Privacy Policy

Who we are

Rabbit Hole gives educational, one-to-one crypto guidance to residents of the UAE, in Dubai and Abu Dhabi. In this policy, “we”, “us” and “Rabbit Hole” mean Rabbit Hole, a business based in the UAE.

We decide how and why your personal data is used, so we are responsible for it. You can reach us about anything in this policy at info@rabbit-hole.ae.

What we collect

We only collect what we need to answer you and run your session.

• When you contact us or request a booking: your name, email address, city, the session or product you’re interested in, your preferred day and start time, and anything you write in your message.
• When you book and attend a session: your contact details, the session you booked, and when and where it took place.
• When you pay or order merch: what you bought, the amount, and the details that come with your payment. For a bank transfer, that includes the name and bank account it was sent from.
• When you visit the website: our hosting provider automatically records basic technical data, such as your IP address, browser type and the pages you request. This is standard for every website and is used to keep the site running and secure.

What we never collect

We never ask for, see or record your exchange passwords, your seed phrase or your private keys. If anyone claiming to be Rabbit Hole asks you for them, it isn’t us.

During a session you create your exchange account and complete its identity checks (KYC) yourself, on your own device. Your passport and proof of address go straight to the exchange. We don’t take copies.

How the contact form works

Our contact form doesn’t send anything to a server. When you press “Send Message”, it opens your own email app with your message ready, and nothing leaves your device until you press send there. What you send then reaches us as a normal email.

How we use your data

• To reply to you and arrange your session. We use your details because you asked us to, and to take steps before entering into an agreement with you.
• To deliver the session or order you paid for. This is needed to perform our agreement with you.
• To keep financial records. UAE tax and commercial law requires us to keep invoices and payment records.
• To keep the website secure and working. This is in our legitimate interest and yours.

We don’t send marketing emails unless you ask to receive them, and you can stop them at any time. We don’t sell your data, and we don’t use it for profiling or automated decisions.

Who we share it with

We share your data only with the service providers we need to run Rabbit Hole, and only as far as they need it:

• Our email provider, which stores the messages you send us.
• Our website host, which serves the site and keeps its technical logs.
• Cal.com, our booking tool, which stores your name, email address, the session and slot you booked, your city and your answers to the booking questions, and sends you the confirmation and reminder emails.
• Google Fonts, which supplies the website’s typeface. Your browser contacts Google to load it, which shares your IP address with Google.
• Our bank, and any payment provider we use, when you pay.
• Authorities, when UAE law requires it.

The crypto exchange you choose is not one of our providers. You open your account with it directly, under its own privacy policy.

Cookies and tracking

We don’t set any cookies ourselves, and we don’t use analytics, advertising or tracking tools. That’s why you don’t see a cookie banner. Our booking tool, Cal.com, sets only the cookies it needs to protect and run the booking window. The Cookie Policy lists them.

Links to Substack, Instagram and X take you to those sites, which have their own privacy policies and cookies.

Data stored outside the UAE

Some of our providers, such as our email and website hosting, may store data on servers outside the UAE. When that happens, we rely on providers that protect personal data to a standard consistent with UAE law.

How long we keep it

• Enquiries that don’t lead to a booking: up to 12 months, then deleted.
• Client records and booking details: for as long as you’re a client, plus up to 24 months.
• Invoices and payment records: at least five years, as UAE record-keeping rules require.
• Website technical logs: as long as our host keeps them, usually a few weeks.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, unless the law requires us to keep it;
• restrict or stop how we use it;
• send your data to you or to someone else in a usable format;
• withdraw your consent where we rely on it.

Email info@rabbit-hole.ae to make a request. We’ll reply within 30 days. If you’re unhappy with how we handle your data, you can also complain to the UAE Data Office.

Security

We keep your data in password-protected accounts that only Rabbit Hole team members can access. No method of storing data is perfect, so if we ever learn of a breach that puts you at risk, we’ll tell you and the authorities as the law requires.

Age

Our services are for people over the legal age in the UAE. We don’t knowingly collect data from anyone younger.

Changes to this policy

If we change this policy, we’ll update it here and change the date at the top. If a change is significant, we’ll tell current clients by email.