Privacy Policy

1. Scope and Applicability

This policy applies to personal data we collect from individuals in the UAE and via our UAE-based services. It is governed by the Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (“PDPL”) which came into force on 2 January 2022. It also applies where we act as a “controller” or “processor” of personal data under that law.

2. Definitions

Personal data means any data relating to a natural person that can identify them, directly or indirectly (e.g., name, ID number, voice, image, location).

Sensitive personal data means data revealing, for example, family origin, religious beliefs, or biometric data.

Processing includes collection, storage, use, disclosure, destruction, or any other handling of personal data.

Controller means the entity that determines the purposes and means of processing personal data.

Processor means an entity processing personal data on behalf of the controller.

3. Collection of Personal Data

We may collect personal data when you:

• visit our website, fill in forms, register for services, or communicate with us;
• use our services online or offline;
• provide information to us voluntarily (e.g., by email, telephone, or in person).

Types of data may include: name, contact details (email, phone), IP address, device identifiers, and other information you provide.

4. Purposes of Processing and Lawful Basis

We process your personal data for purposes such as:

• providing and managing our services;
• communicating with you;
• maintaining and improving our website and services;
• complying with legal obligations.

Under the PDPL we ensure all processing is based on a lawful basis (e.g., consent, performance of a contract, legal obligation, or legitimate interests) and that it is fair and transparent.

5. Data Minimisation and Purpose Limitation

We ensure that personal data collected is relevant and limited to what is necessary for the stated purposes and not further processed in a way incompatible with those purposes.

6. Accuracy and Retention

We take reasonable steps to ensure that data is accurate and up to date. Personal data will not be kept longer than necessary. When no longer required, it will be securely deleted or anonymised.

7. Security of Personal Data

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. If a personal data breach occurs that affects confidentiality or privacy, we will comply with applicable notification obligations under the PDPL.

8. Data Subject Rights

Under the PDPL, you have the following rights:

• access your personal data and receive confirmation of processing;
• request correction of inaccurate data;
• request deletion (“right to be forgotten”) where applicable;
• request restriction or objection to processing;
• request data portability where applicable;
• object to automated decision-making, including profiling.

To exercise these rights, contact us using the details below.

9. Disclosure to Third Parties and Cross-Border Transfers

We may share personal data with trusted third-party service providers (e.g., hosting, payment processors) under strict confidentiality and data protection terms. Transfers outside the UAE will only occur in compliance with the PDPL—either to jurisdictions with adequate protection, under contractual safeguards, or with your consent.

10. Cookies and Tracking Technologies

Our website may use cookies or similar tools to recognise your device, remember preferences, analyse traffic, and improve functionality. You can manage cookie preferences through your browser settings. See our separate Cookies Policy for details.

11. Children

Our services are not directed at children under 18. We do not knowingly collect data from minors. If we become aware that a child has provided personal data without parental consent, we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. The updated version will be posted on our website with a new “Last Revised” date. Continued use of our services after updates means you accept the revised policy.

13. Contact Us

If you have questions or wish to exercise your data rights, please contact: