Privacy Policy

Benanetwork FZE · Sharjah Publishing City Free Zone, UAE · Trade Licence 4429395.01 · info@sitepin.org

Last updated: 27 August 2026

This policy explains what personal data Benanetwork FZE collects through the Sitepin website, the 24-hour preview and the checkout, why we collect it, and what rights you have. It covers our storefront at sitepin.org. It does not cover a licensed customer's own installation of the software, which that customer controls and is responsible for.

1. Who is responsible

Benanetwork FZE — Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Trade Licence No. 4429395.01.

We are the controller of the data described here. Contact us about privacy at info@sitepin.org.

2. What we collect

When you request a preview — the details you type into the form: your name, work email address, phone number (optional), and the website address of your developments. We also record a hashed form of your IP address, never the address itself, so that we can apply fair-use limits without keeping a log of who visited from where.

When you buy a licence — your work email, company or brand name, your website address, whether you accepted the licence, and a reference to the payment session. We never see or store your card details — those go directly to our payment processor.

From your public website — to build your preview we read publicly available pages of the site address you give us: brand name, logo, project pages, images, prices and published map links. We read only public HTTPS pages. We do not log in, submit forms, or attempt to reach anything not publicly served. This is business information, not personal data, unless your site publishes personal data in those pages.

Automatically — standard server logs (request path, timestamp, status, user-agent) kept for security and troubleshooting. We do not use advertising or analytics cookies. The only cookie we set is the preview session cookie described below.

3. Cookies

We set one cookie, im_preview, when a preview is created. It is a signed session identifier that lets your browser open your own preview map and editor for 24 hours. It is strictly necessary for the preview to work, contains no tracking data, and can be cleared at any time from the Start over link on our home page.

4. Why we use it, and on what basis

Purpose	Data	Basis
Build and serve your 24-hour preview	Name, email, phone, website, session cookie	Performance of a contract / your request
Send your preview credentials and reply to you	Name, email	Performance of a contract / your request
Contact you about your preview or enquiry	Name, email, phone	Legitimate interest in following up a request you made
Fair use limits, abuse prevention, security	Hashed IP, server logs	Legitimate interest in keeping the service available
Take payment and deliver the source archive	Email, company, website, payment reference	Performance of a contract
Accounting, tax and legal records	Order records	Legal obligation

We do not sell your data, and we do not use it for advertising profiling.

We use a small number of processors and service providers, each of which receives only what it needs:

Payment processing — our payment provider handles the transaction and card details under its own privacy terms. We receive only a confirmation and a session reference.
Email delivery — our transactional email provider sends your credentials email and our internal alerts.
Hosting — our servers and database are hosted with a cloud provider.
Map and geocoding services — Mapbox, Google Maps Platform, and OpenStreetMap / Nominatim are queried with project and place names from your public website in order to place pins. Your personal contact details are never sent to them.
Web fonts — our pages load fonts from Google Fonts, which receives your IP address as part of that request.

We may also disclose data where we are legally required to, or to establish or defend a legal claim.

6. Where your data is held

Our infrastructure and email provider operate outside the United Arab Emirates, so your data may be processed abroad. Where we transfer personal data internationally we rely on our providers' contractual data-protection terms.

7. How long we keep it

Preview access expires 24 hours after it is issued. Preview credentials are stored hashed and stop working at expiry.
Preview and enquiry records (name, email, phone, website, outcome) are kept for up to 24 months so we can recognise a returning enquiry and answer questions about a preview you were given.
Imported website content in an expired preview is kept only as long as the preview record, and is deleted on request.
Order and payment records are kept for five years, as UAE commercial and tax record-keeping requires.
Server logs are kept for a short operational period only.

8. Your rights

You may ask us to:

tell you what personal data we hold about you, and give you a copy;
correct anything inaccurate;
delete your data, where we are not required to keep it;
restrict or object to a use that relies on our legitimate interest; or
stop contacting you.

Email info@sitepin.org and we will respond within 30 days. Ask us to delete your preview and we will remove the preview record and any content imported from your website. Where local law gives you the right to complain to a data protection authority, you may do so.

9. Security

Preview passwords are stored hashed, never in plain text. IP addresses are stored hashed. Session cookies are signed. Source archives are built with a process that strips secrets, databases, signing keys and any other customer's content before delivery — every buyer's archive contains only their own data.

No system is perfectly secure, but we keep the data we hold to the minimum the service needs.

10. Children

Sitepin is a business product. It is not directed at children and we do not knowingly collect data from anyone under 18.

11. Changes

We may update this policy. The date at the top shows when it last changed. Material changes will be reflected on this page before they take effect.

12. Contact