Privacy Policy

1. Who we are

This website, https://metadac.io (the "Site"), is operated by Metadac FZE, Al Shmookh Business Center, 1 UAQ Free Trade Zone, Umm Al Quwain, United Arab Emirates ("Metadac", "we", "us"). Metadac FZE is the data controller for the personal data described in this policy. You can reach us at [email protected].

2. Scope

This policy covers personal data processed through the Site, the corporate home of the DAC ecosystem. The product sites dacos.dental (DACOS) and dacademy.ai (DACademy) are separate websites with their own privacy policies; this policy does not apply to them.

3. Data we collect

Data you provide

• Contact and lead form: first name, last name, email address, phone number, country, area of interest, and an optional message.
• Calibrator download gate: first name and email address.

Data collected automatically

• Technical data: IP address and user agent, processed for security and abuse prevention.
• Cookie-based data: analytics and marketing measurement data, collected only after you give consent through the cookie banner. See section 6 and our Cookie Policy.

We do not knowingly collect special categories of personal data through the Site.

4. Why we process your data and on what legal basis

Purpose	Legal basis (GDPR)
Responding to your inquiries and managing pre-contractual contact	Performance of a contract / steps prior to a contract, and our legitimate interest in answering requests addressed to us
Sending marketing email to the DACOS downloads list and to leads who opt in	Consent — you can withdraw it at any time via the unsubscribe link included in every email
Analytics and marketing measurement (Google Analytics 4, Meta Pixel)	Consent, given through the cookie banner and managed with Google Consent Mode v2 (default: denied)
Security, spam and abuse prevention (including Cloudflare Turnstile)	Legitimate interest in keeping the Site and our services secure

5. Who receives your data

We use a small number of service providers who process personal data on our behalf under appropriate data processing agreements:

• MailerLite (EU) — marketing email platform for our mailing lists.
• Postmark / ActiveCampaign — transactional notification email (for example, delivering form submissions and download links).
• Cloudflare — hosting, content delivery network, R2 file storage, and Turnstile anti-spam protection.
• Google — Tag Manager and Analytics 4, loaded only if you consent.
• Meta Platforms — Meta Pixel for marketing measurement, loaded only if you consent.

We do not sell personal data. We may disclose data where required by law or to protect our legal rights.

6. Cookies

The Site uses a small set of necessary first-party cookies (mtdc_consent for your consent choices, mtdc_lang for your language preference, and dacos_unlock for the calibrator download) and, only with your consent, analytics and marketing cookies set by Google Analytics 4 (_ga, _ga_*) and Meta Pixel (_fbp). Google Tag Manager loads these tags and fires them only after consent. You can change your choices at any time via "Cookie settings" in the footer. Full details, including lifetimes, are in our Cookie Policy.

7. International transfers

Your data is processed in the United Arab Emirates and by our processors in the EU and the US. The UAE is not covered by an EU adequacy decision. Where the GDPR applies to a transfer, we rely on appropriate safeguards, such as the processors' Standard Contractual Clauses or applicable adequacy mechanisms. You can contact us at [email protected] for more information about the safeguards in place.

8. How long we keep your data

• Form submissions: kept as long as needed to handle your inquiry and for up to 24 months after our last contact, unless a longer period is required (for example, by law or to establish or defend legal claims).
• Marketing lists: until you unsubscribe.
• Consent cookie (mtdc_consent): approximately 8 months.
• Unlock cookie (dacos_unlock): 2 hours.

9. Your rights

Where the GDPR applies, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten");
• Restrict processing in certain circumstances;
• Receive your data in a portable format;
• Object to processing based on legitimate interest, including direct marketing;
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• Lodge a complaint with a supervisory authority — for EU/EEA residents, the authority of your country of residence.

To exercise any of these rights, email [email protected]. We will respond within the timeframes required by applicable law and may ask you to verify your identity before acting on a request.

10. Security

We apply technical and organizational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, and anti-abuse protection through Cloudflare. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access, alteration, and loss.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our processing or in applicable law. The date at the top of this page shows when it was last revised. Material changes will be highlighted on the Site.

12. Contact

Questions about this policy or about how we handle your data? Write to [email protected] or to Metadac FZE, Al Shmookh Business Center, 1 UAQ Free Trade Zone, Umm Al Quwain, United Arab Emirates.