Last updated: 17 July 2026

Who we are

This website, casteo.ai, is operated by Casteo, a registered trade name of Badocco and Lemieux Legal Consultants FZ LLC (“we”, “us”), holder of trading licence No. 47010713, registered in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates.

The same entity also operates blegal.ae.

We are the controller of the personal data described in this policy. For any question about it, or to exercise any of the rights below, contact us at lj.lemieux@blegal.ae.

What we collect

Information you give us

We only collect what you actively submit through a form on this site:

  • Contact form — your name, email address, subject, and the content of your message.
  • Newsletter signup — your email address.
  • Features as a Service trial request — the details you provide in the trial request form, including your email address.

We ask only for what we need in order to answer you. You are not required to give us any personal data to browse this site.

Information collected automatically

Our web server keeps standard access logs. These record your IP address, browser user-agent string, the page requested, and the date and time of the request. These logs exist to operate and secure the site — for example, to diagnose errors and identify abuse.

Cookies and tracking

We do not use third-party analytics, advertising, or tracking cookies on this site. There is no Google Analytics, no advertising pixel, and no cross-site tracking of any kind. We do not profile you, and we do not make automated decisions about you.

The only cookies this site may set are functional cookies used by WordPress itself — for example, a session cookie if you log in to administer the site.

Why we use it, and your consent

  • To reply to you. When you contact us or request a trial, we use your details to respond and to provide what you asked for.
  • To send you the newsletter — only if you asked us to. You can withdraw your consent at any time, and every newsletter includes an unsubscribe link.
  • To operate and secure the site. Server logs are kept for reliability and abuse prevention.

We process your personal data on the basis of your consent, or because it is necessary to take steps at your request before entering into a contract, or for our legitimate interest in operating a secure service. We use it only for the purposes listed above. If we ever need it for a new purpose, we will ask you first.

We do not sell your personal data. We do not share it with advertisers, and we do not use it to build a profile of you.

Who else processes your data

We use a small number of service providers to run this site. They act on our behalf, under contract, and only on our instructions:

  • DigitalOcean, LLC (United States) — hosting. This site and its database run on DigitalOcean infrastructure.
  • Google LLC (United States) — email delivery. Messages you submit through our forms, and the notifications they generate, are transmitted using Google’s SMTP service.

We may also disclose personal data where the law requires it.

Data stored outside the UAE

Because the providers named above are established in the United States, your personal data is stored and processed outside the United Arab Emirates. Data held in another country may be accessible to the authorities of that country under its own laws.

Before entrusting personal data to a provider outside the UAE, we satisfy ourselves that it will receive an adequate level of protection, and we require contractual protections from that provider.

How long we keep it

  • Form submissions are stored in this site’s database and kept for as long as needed to deal with your enquiry and to keep a record of our correspondence. You can ask us to delete them sooner.
  • Email delivery logs are automatically deleted after 14 days.
  • Newsletter subscriptions are kept until you unsubscribe.
  • Server access logs are rotated and deleted on a short cycle in the ordinary course of operating the server.

When personal data is no longer needed for the purpose it was collected for, we delete it or anonymise it.

Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to:

  • Be informed and obtain a copy — ask what personal data we hold about you, how it is processed, and receive a copy of it.
  • Correction — have inaccurate or incomplete data corrected.
  • Erasure — ask us to delete your data, in the circumstances the law provides.
  • Restrict or stop processing — ask us to limit or cease processing.
  • Portability — receive the data you gave us in a structured, machine-readable format, or have it transferred.
  • Withdraw consent — at any time, where we rely on your consent.

To exercise any of these, email lj.lemieux@blegal.ae. We will respond within 30 days. If you are not satisfied with our response, you may complain to the UAE Data Office.

Visitors in the European Economic Area and the United Kingdom

Where the General Data Protection Regulation applies to you, you also have the right to object to or restrict our use of your data, and to lodge a complaint with your local supervisory authority.

Security

This site is served over encrypted HTTPS connections. Access to the underlying server and database is restricted to authorised personnel. No system is perfectly secure, but we take reasonable technical and organisational measures to protect the data we hold.

If a personal data breach occurs that would prejudice your privacy, confidentiality, or security, we will notify the UAE Data Office and, where required, the people concerned.

Children

This site and our services are intended for businesses and professional users. They are not directed at children, and we do not knowingly collect personal data from minors.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be highlighted on the site.