Privacy policy.

1. Who we are

This website is operated by Benjelloun & Partners, an architecture studio based at City Walk, Building 9, Al Wasl, Dubai, United Arab Emirates.

For anything relating to this policy or to personal information we hold, write to enquiries@benjellounpartners.com or call +971 4 386 9400.

2. What we collect, and when

We only collect personal information that you type into a form yourself, plus limited technical information about how the site is used. There is no visitor account, no payment processing and no newsletter on this website.

Enquiry form

When you submit the form on our contact page we collect your name and email address, and, if you choose to provide them, your company, the type of enquiry and your message.

Careers form

When you apply through our careers page we collect your name, email address, phone number, the role you are applying for, any message you write, and any document you attach, such as a CV or portfolio.

Document downloads

Some documents are released on request. To receive one we ask for your name, email address, and optionally your company, country and phone number. You must tick a box confirming you agree to be contacted about that document before the request is accepted — we do not accept the request without it.

For these requests we also record your IP address, your browser user-agent string and the page you came from. This is to prevent automated abuse of the download form and to keep a record of who a document was released to.

Website analytics

We measure how the site is used. This is described in full in section 4.

3. What we do with it

• To reply to your enquiry and to discuss a possible project.
• To assess a job application and contact you about it.
• To deliver the document you requested, and to follow up about that document.
• To understand which pages and projects people find useful, so we can improve the site.

We do not sell personal information. We do not use it to build advertising profiles, and we do not share it with advertising networks.

4. Analytics

The site uses two measurement tools: our own analytics, which runs on our own server, and Google Analytics 4, provided by Google. There is no Google Tag Manager, no advertising pixel and no social media tracking script anywhere on this website.

Google Analytics

Google Analytics 4 (measurement ID G-4B72WM1EVR) loads on every public page. It sets cookies in your browser — _ga and _ga_<id> — which distinguish one browser from another and group page views into a single visit. Through it, Google receives the pages you view, the address of the page that referred you, your device and browser type, and an approximate location derived from your IP address. Google processes that information under its own terms; you can read them at policies.google.com/privacy.

Our own analytics

Our own analytics does not use cookies. Instead it stores two random identifiers in your browser's local storage:

• bpa_vid — a random value that distinguishes one browser from another. It is not linked to your name or email.
• bpa_ses — a random value identifying a single visit, which expires after 30 minutes of inactivity.

For each page view or interaction we record: the page path, the language you are viewing, the section and label of anything you click, the destination of links you click, where on the page you clicked, your window size, how far you scrolled, how long you stayed, the site that referred you, any campaign parameters in the URL, and whether you are on a desktop, tablet or mobile device.

We also store your browser user-agent string, and an irreversible hash of a shortened version of your IP address — the last part of the address is discarded before hashing, and the result cannot be turned back into an IP address. We use it only to distinguish visitors approximately and to filter out automated traffic. Requests that identify themselves as search-engine crawlers or bots are discarded and never recorded.

To opt out: clear your browser's local storage for this site, or block the script at /assets/track.js using your browser or an extension. The site works normally either way.

5. Cookies

Browsing this website sets no cookies at all.

One cookie exists on this domain, but only for our own staff: when a member of the studio signs in to the content management system, a session cookie named bp_refresh is set. It is restricted to the sign-in path, marked HttpOnly and Secure, uses SameSite=Strict, and is deleted when they sign out. Visitors to the public website never receive it.

6. Other companies involved

Form delivery

Our enquiry and careers forms are delivered to us by Web3Forms (api.web3forms.com), which receives what you submit — including any file you attach to a job application — and emails it to us. Their handling of that data is governed by their own terms and privacy policy.

Hosting

The website, its database and any uploaded documents are hosted on managed servers operated by our hosting provider. Only our studio has access to the administrative system.

Social media

Links to our LinkedIn, Instagram and Facebook profiles are ordinary links. There are no embedded feeds, buttons or tracking pixels from those platforms on this site, so they receive nothing about your visit unless you click through to them.

7. How it is kept

• The whole site is served over an encrypted HTTPS connection.
• The database is not reachable from the internet.
• Administrative access requires an individual account and password. Passwords are stored only as Argon2id hashes, never in readable form.
• Repeated failed sign-in attempts are rate limited.
• Changes made in the administrative system are recorded in an audit log.
• Requestable documents are stored outside the public web directory and are served through short-lived signed links that expire after one hour.

8. How long we keep it

Enquiries, job applications and document requests are kept while they remain relevant to our discussions with you, and are removed when they no longer are. We have not yet set a fixed retention period for each category; if you would like your information removed sooner, ask us and we will do it.

9. Your choices

You can ask us to:

• tell you what personal information we hold about you;
• correct it if it is wrong;
• delete it;
• stop using it to contact you.

Write to enquiries@benjellounpartners.com and we will respond. Where you gave consent — for example to receive a document — you can withdraw it at any time, and withdrawing it does not affect anything done before you did.

10. Where your information goes

Our servers and the form delivery service described in section 6 may process your information outside the United Arab Emirates.

11. Children

This website is intended for a professional audience. It is not directed at children, and we do not knowingly collect information from them.

12. Changes to this policy

If this policy changes we will update the date at the top of the page. Material changes will be described here rather than made silently.

13. Contact

Benjelloun & Partners
City Walk, Building 9, Al Wasl, Dubai, United Arab Emirates
enquiries@benjellounpartners.com
+971 4 386 9400