Privacy Policy

Corum8 is a Web3, AI and fintech agency headquartered in Dubai, United Arab Emirates, working with clients across Europe, Singapore, the United States, wider APAC, Canada, Africa, the Middle East and Australia.

Corum8 is responsible for the personal information described in this policy. For anything covered here, contact info@corum8.com.

Where we are working on a client's platform or campaign, that client usually decides what data is collected from their own users and why. In those cases we are acting on their instructions, and their privacy policy governs their users' data, not this one.

We only collect what you actively give us, plus the basic technical data any web server records.

When you use the contact or enquiry form

• Your first and last name.
• Your email address.
• The services you tick as being interested in.
• An indicative budget, if you choose to enter one.
• Your message.
• Any files you attach.
• The page you submitted from and the page that referred you, so we know what you were reading.

When you subscribe to the briefing

• Your email address, and the fact that you opted in.

When you apply for a role

• Your name, contact details, CV and anything else you send us in support of an application.

When you become a client

• Business contact details for the people we work with, and the correspondence and documents the engagement generates.

Automatically, from any visit

• Standard server log data — IP address, browser and device type, pages requested, timestamps — which our hosting provider records in order to serve the site and protect it from abuse.

We do not ask for, and do not want, your private keys, seed phrases, wallet credentials, passwords or payment card numbers. Nobody at Corum8 will ever ask you for them. If someone claiming to be from Corum8 does, it is not us.

Each thing we collect has one job:

• To reply to you. If you send an enquiry, we use your details to answer it and to discuss a possible engagement.
• To deliver work. Client contact details and correspondence are used to run the engagement, report on it and invoice for it.
• To send the briefing. Only to addresses that opted in, and only until you opt out.
• To consider applications. Recruitment data is used to assess your application and to contact you about it.
• To keep the site working. Server logs help us fix errors and block abuse.
• To meet our own record-keeping obligations. Contracts, invoices and the correspondence behind them are retained as business records.

We rely on your consent for marketing email, and on the need to perform or prepare a contract, and our legitimate interest in running and protecting the business, for the rest. You can withdraw consent for marketing at any time.

We do not sell your personal information, rent it, or trade it. We do not use enquiry data to build advertising audiences.

This website does not run third-party advertising pixels, remarketing tags or analytics trackers. There is no Meta pixel, no advertising cookie, and no cross-site tracking script on these pages.

Your browser may store small amounts of data locally to remember interface preferences. Fonts and the site's own assets are served from our own domain rather than a third-party font service, so loading a page here does not hand your IP address to an advertising network.

Two things do involve other companies, and they are visible on the page:

• The WhatsApp enquiry button. Tapping it opens WhatsApp. From that point you are in WhatsApp's hands, under its own terms and privacy policy, and it will see your phone number.
• Embedded or linked third-party content. Where a page links or embeds something from another platform, that platform sets its own rules.

If we ever add analytics, we will update this page and, where required, ask for consent first.

A short list, and nothing beyond it:

• Service providers who run our infrastructure — hosting, email, file storage and the tools we use to send the briefing. They process data on our instructions in order to provide that service.
• Our own team, limited to the people who need it for the work.
• Professional advisers — accountants and lawyers — where a matter genuinely requires it.
• A competent authority or court, where we are legally required to disclose.

Where a project involves a third-party vendor — a market maker, a security review firm, an exchange, an ad platform — that vendor is a separate business with its own terms and its own privacy policy. We tell you before your information goes to one, and you deal with them directly.

We do not pass enquiry or subscriber data to clients, partners or anyone else for their own marketing.

Corum8 is headquartered in Dubai and our team and service providers are not all in one country, so information you send us may be stored or accessed outside the country you are writing from.

Where that happens, we work with established providers and take reasonable steps to see that the information stays protected to the standard described in this policy, wherever it sits.

• Enquiries that do not become engagements — kept while the conversation is live and for a reasonable period afterwards, then deleted.
• Client records — kept for the engagement and for as long as we need them as business and accounting records afterwards.
• Briefing subscribers — kept until you unsubscribe, after which we keep only the minimum needed to make sure we do not email you again by mistake.
• Recruitment — kept for the hiring process. If you are not hired we delete it, unless you have told us you want to be considered for future roles.
• Server logs — kept for a short operational period.

When information is no longer needed for the purpose it was collected for, we delete it.

The site is served over HTTPS, access to enquiry and client data is limited to the people who need it, and we use reputable providers for hosting, mail and storage.

We will not pretend this is absolute. No website, network or company can guarantee that data is theft-proof or hack-proof, and any policy that promises otherwise is overselling. What we can commit to is keeping the amount of personal information we hold small, keeping access to it narrow, and telling you promptly if something affecting your information goes wrong.

Please do not send private keys, seed phrases, passwords or payment card details through the contact form, email or chat. If a document you need to send us is sensitive, ask and we will arrange a secure route.

You can ask us to:

• Tell you what we hold about you.
• Correct it if it is wrong or out of date.
• Delete it, where we do not need to keep it as a business or accounting record.
• Stop emailing you. Every briefing email has an unsubscribe link, and you can also just reply and say stop.
• Send you a copy of what you gave us.
• Object to a use you are not comfortable with.

Email info@corum8.com and say what you want done. We do not charge for this and we will not make it difficult. We may need to confirm who you are before acting on a request about someone's data.

This website and our services are aimed at businesses and the people who run them. They are not directed at children, and we do not knowingly collect information from anyone under 18.

If you believe a child has sent us personal information, tell us and we will delete it.

We update this policy when our practices change. The date at the top tells you when it last changed. Where a change is significant, we will make that clear rather than quietly editing the page.

To ask anything about this policy, or to exercise any of the choices in section 09, email info@corum8.com or use the contact page. Our engagement terms are set out in the terms and conditions.