Last updated 25 October 2026
This notice explains how KhahanA Insights FZ-LLC collects, uses and protects personal data when you visit khahana.com, submit an enquiry to us, or send a design brief to KhahanA Lab. It is written to meet our obligations under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and under the EU General Data Protection Regulation where it applies to visitors in the European Economic Area and the United Kingdom.
KhahanA Insights FZ-LLC is the controller of the personal data described in this notice.
When you complete the enquiry form on our site, we collect your name and at least one contact detail, being an email address or a telephone number. You may also choose to provide your company, role, LinkedIn profile, preferred contact method, industry, region of interest, timescale, company size, and a free-text description of the business challenge you want help with.
Please provide only what is necessary to describe your situation. Do not include confidential client information, personal data about other individuals, or any special category data in the free-text field.
If you book a conversation through our scheduling page, we collect your name, email address and, where you provide them, a telephone number, a short description of what you would like to cover, and any other details you choose to enter on the booking form. Some of those fields are built into the scheduling tool and cannot be removed by us, but only your name and email address are required. Where the meeting is held online, a Microsoft Teams meeting is created for it. We do not record meetings.
Our Thinking Loud studies carry an optional form at the foot of the page. Nothing on those pages is locked, and the study can be read in full without leaving any details. If you choose to use the form, we collect your email address, your organisation if you enter one, the study you were reading, the date and time, and a record of the consent wording that was shown to you at the moment you ticked the box.
Consent given through that form is scoped to the single study you were reading. We use it to tell you when that study is revised and to send you the full report behind it. We do not use it to promote other studies in the series, to cross-sell our services, or to add you to a general mailing list. Every message we send on this basis carries a one-click unsubscribe.
KhahanA Lab, our interior, object and kinetic art design studio, takes project requests through the design brief at khahana.com/lab. When you send a brief, we collect your name and email address, and, where you provide them, your telephone number, company and preferred contact method. We also collect what you tell us about the project: the disciplines you chose, your answers about the project, a description in your own words, the feeling and colours you are after, any links you add, the place and timing, your budget range, whether you would like a site visit, and the date and time you sent it.
You may also attach files: a floor plan or a drawing, and up to three photos or pictures, for example of the space today, of furniture you want to keep, of a sketch, or of the place where a piece will go. Photos of a home can show more than the room itself, so please leave out people, documents and anything you would rather we did not see. We use these files to understand and design your project.
The brief page also keeps a copy of a brief you have sent in your own browser, so that you can see it again under "My projects". That copy stays on your device; you can remove it there at any time.
Our designers work on your brief in the studio's own project records. To show you a first concept, we may prepare images with AI image services: we draw the layout ourselves and let the service turn it into a photorealistic picture. What we send to such a service is the layout we drew and the words that describe the design, such as colours, materials and light. We do not include your name or contact details.
We send your own photos to an AI image service only if you have agreed to it, and we keep a record of that agreement. You can say no, or withdraw your agreement at any time, without affecting the rest of your brief. Concept images are design drafts: no decision about you is made by automated means.
Our hosting provider records standard server logs, including IP address, browser type and pages requested, for security and reliability purposes. If you accept analytics cookies, we also collect aggregated usage information through Google Analytics. Until you accept, the Google tag is not requested at all, so no data reaches Google. The typeface used on this site is served from our own servers rather than from a font provider, so no request leaves your browser to a third party for it. We record the referring page and any campaign parameters in the address bar so that we can tell which activity brought you to us.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and corresponding with you about it | Your consent, given by ticking the box on the form. Where a commercial discussion follows, our legitimate interest in conducting that discussion, and steps taken at your request prior to entering a contract. |
| Arranging, confirming and holding a meeting you have booked, including reminders | Steps taken at your request prior to entering a contract, and your consent where you provided the information voluntarily |
| Telling you when a Thinking Loud study you signed up for has been revised, and sending you the report behind it | Your consent, given by ticking the box on that study's form. We keep the consent wording and timestamp as the record of it. |
| Answering a KhahanA Lab design brief, and preparing a first design concept for you, including drawings, a 3D model and concept images | Steps taken at your request prior to entering a contract, and, where a project follows, the contract |
| Sending photos you gave us to an AI image service to prepare concept images | Your consent, which you can refuse or withdraw at any time |
| Keeping a record of enquiries and our responses | Legitimate interest in maintaining accurate business records |
| Security, fraud prevention and site reliability | Legitimate interest in protecting our systems |
| Understanding how the site is used | Your consent, given through the cookie banner |
| Meeting legal, regulatory and licensing obligations | Compliance with a legal obligation |
We do not sell personal data, and we do not use enquiry information to send marketing unrelated to the matter you contacted us about. An address left on a study form is used only for that study, and an address left on the enquiry form is never added to a study list, or the reverse.
We share personal data only with service providers who process it on our instructions, and only to the extent needed to run our website and respond to you.
| Provider | What they do | Where |
|---|---|---|
| Netlify | Hosts the website and receives enquiry form submissions and KhahanA Lab design briefs, including the files attached to them, on our behalf | United States and global edge network |
| ElevenLabs | AI image service used by KhahanA Lab to turn our layout drawings into concept images, using image models from its own technology partners. It receives no names or contact details, and your photos only if you have agreed. | United States and other countries where it or its partners operate |
| Google (Analytics) | Aggregated site usage statistics, and only where you have accepted analytics cookies. The Google tag is not loaded at all until you accept, so nothing is sent to Google before that. | United States and global |
| GitHub | Hosts our publications subdomain | United States |
| Microsoft | Handles khahana.com email through Exchange Online, appointment scheduling through Microsoft Bookings, and online meetings through Microsoft Teams | United States and global |
We may also disclose personal data where we are required to do so by law, by a regulator, or by a court of competent jurisdiction.
We are established in the United Arab Emirates and the providers listed above process data outside the UAE, principally in the United States and the European Union. Where personal data of individuals in the EEA or the UK is transferred outside those territories, we rely on the safeguards our providers have put in place, including Standard Contractual Clauses. Transfers of UAE personal data outside the UAE are made in accordance with the cross-border provisions of Federal Decree-Law No. 45 of 2021.
If you would like details of the specific safeguards applied, write to us at the address in section 1 and we will provide them.
The site sets no analytics or advertising cookies unless you accept them. Analytics storage is denied by default, the Google tag is not loaded at all until you select Accept on the cookie banner, and the site makes no third-party request of any kind before that point. Your choice is stored locally in your browser so that we do not ask again.
To change your decision, clear this site's data in your browser settings and reload the page, and the banner will appear again.
The interactive material under Practice keeps your progress in your own browser so that you can return to it: which rooms you have cleared, your scores and times, and the name you choose to put on a completion certificate. It asks before it stores anything. None of it is sent to us or to anyone else, and clearing this site's data in your browser removes it. If you decline, the material still works in full and your progress simply lasts until you close the tab.
Subject to the conditions and exemptions in the applicable law, you may:
To exercise any of these, email info@khahana.com. We will respond within the period required by the applicable law, and we may need to verify your identity first.
If you are not satisfied with our response, individuals in the UAE may complain to the UAE Data Office. Individuals in the EEA or the UK may complain to their national supervisory authority. We would appreciate the chance to resolve the matter with you first.
The site is served over HTTPS. Enquiry submissions are transmitted over an encrypted connection and are held in access-controlled systems. Access to enquiry data is limited to those within the firm who need it in order to respond to you. No transmission over the internet can be guaranteed completely secure, and you send information to us at your own risk, but we take appropriate technical and organisational measures to protect it.
The site and our services are directed at businesses and are not intended for anyone under 18. We do not knowingly collect personal data from children.
We may update this notice from time to time. The date at the top shows when it was last revised. Where changes are material, we will make that clear on the site.
Questions about this notice or about how we handle personal data should go to info@khahana.com, or to KhahanA Insights FZ-LLC, Meydan Free Zone, Dubai, United Arab Emirates.