Privacy Policy

Last updated: 2026

Who we are

PlanProof designs and facilitates business continuity tabletop exercises for organizations in the UAE and wider GCC. This policy covers the website at plan-proof.com and the request forms on it. It does not cover third-party sites we link to.

What we collect

Depending on which form you use, we may collect:

• Contact details you provide, such as your name, mobile number, and email address
• Information about your organization you choose to share, such as industry, size, location, and risk concerns, if you use the generic scenario intake
• Business continuity plan documents or details you choose to share with us, if you use the plan-review option
• Any other information you include in a message to us, such as remarks or pricing inquiries

We do not currently use cookies, analytics, or tracking scripts on this site. If that changes in the future, this policy will be updated to reflect it.

How your information reaches us

Our request forms open your own email application with a pre-filled message addressed to us; the message is sent from your device through your own email provider, not stored on a server we operate as part of this website. This means the information you submit goes directly to our inbox rather than sitting in a public-facing database.

How we use it

• To respond to your inquiry and design or deliver a tabletop exercise
• To provide pricing information you've requested
• To communicate with you about a service you've asked about

We do not use your information for advertising, and we do not sell or rent personal data to third parties.

Confidentiality of shared plans

Business continuity plans or organizational details you share with us are reviewed directly, one-to-one, and are never published or made publicly accessible. Materials are deleted after your exercise package is delivered unless you ask us to retain them. A mutual non-disclosure agreement is available on request before you share sensitive material.

Who else sees it

We use a small number of service providers to run this business, who may process information on our behalf:

• Email hosting (Zoho Mail) — to receive and store messages sent to our inbox
• Website hosting (Netlify) — to serve this website; hosting providers may log standard technical data such as IP addresses as part of normal web traffic

We do not otherwise share your information with third parties except where required by law.

How long we keep it

Contact and inquiry information is kept for as long as needed to respond to you and, if you become a client, to deliver and support your engagement. Shared plans and organizational details are deleted after your exercise package is delivered, unless you ask us to retain them for a future engagement.

Your rights

Depending on applicable law, including the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you may have the right to:

• Ask what personal data we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your information
• Withdraw consent for us to hold your information, where consent is the basis for processing

To exercise any of these, contact us using the details below.

Governing law

This policy is governed by the laws of the United Arab Emirates.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent version.

Contact us

For any privacy questions or requests, email us at exercises@plan-proof.com.