Privacy Policy

Last updated: 20 August 2026

This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, or use software and mobile applications that we provide. We have written it to be read, not to be survived.

1. Who we are

The controller responsible for the personal information described in this policy is the company identified at the end of this document, registered in Dubai, United Arab Emirates. Where we process personal information on behalf of a client — for example, inside an ERP system we operate for them — that client is the controller and we act as a processor under our agreement with them.

2. Information we collect

We collect only what we need for a clearly identified purpose:

  • Information you give us — your name, company, email address, telephone number and the content of your message when you contact us or request a demonstration.
  • Information from using our software — account identifiers, activity and audit records generated as you use a system we provide, and technical logs needed to operate and secure it.
  • Technical information from our website — IP address, browser type, referring page and pages viewed, collected in standard server logs.
  • Support information — the content of support requests, including any screenshots, files or device details you choose to send us.

3. How we use information

We use personal information to:

  • Respond to your enquiry and provide the information or demonstration you asked for
  • Provide, operate, secure and improve the software and services you or your employer have engaged us for
  • Provide technical support and communicate about service issues, changes and maintenance
  • Meet legal, regulatory, tax and accounting obligations that apply to us
  • Detect, investigate and prevent fraud, abuse and security incidents

We do not sell personal information. We do not use the content of client data to train general-purpose AI models.

4. Legal basis for processing

Where a legal basis is required, we rely on: performance of a contract with you or your employer; our legitimate interests in operating, securing and improving our business, balanced against your rights; compliance with a legal obligation; and, where applicable, your consent — which you may withdraw at any time.

5. Sharing and disclosure

We share personal information only in these circumstances:

  • With service providers who host, secure or operate our infrastructure, under written confidentiality and data protection terms
  • With software vendors whose platforms we resell or support, strictly as required to provision, license or support your use of those platforms
  • Where required by applicable law, regulation, court order or a lawful request from a competent authority
  • In connection with a corporate transaction such as a merger or acquisition, subject to equivalent protection continuing to apply

6. International transfers

We are based in the United Arab Emirates and work with clients and providers in other countries. Where personal information is transferred across borders, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable law, including through contractual safeguards with the recipient. Where a client requires data to remain within a specific jurisdiction, we agree that in writing before implementation.

7. Retention

We keep personal information only as long as needed for the purpose it was collected for, and for any period required by law, contract or a legitimate record-keeping need. Enquiry correspondence is normally retained for up to twenty-four months. Client system data is retained according to the agreement with that client and deleted or returned at the end of the engagement on request.

8. Security

We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access control on a need-to-know basis, encryption in transit, logging of administrative actions, and confidentiality obligations on our personnel and subcontractors. No system is completely secure, and we do not claim otherwise; if a breach affects your personal information we will notify affected parties and any relevant authority as required by applicable law.

9. Your rights

Subject to applicable law, you may ask us to:

  • Confirm whether we hold personal information about you and provide a copy
  • Correct information that is inaccurate or incomplete
  • Delete information where there is no continuing lawful basis for us to keep it
  • Restrict or object to certain processing, including direct marketing
  • Withdraw consent where processing is based on consent

To exercise any of these, contact us using the details below. We may need to verify your identity before acting. If we hold the information as a processor for a client, we will refer your request to that client and support them in responding.

10. Cookies and similar technologies

This website does not use advertising cookies, cross-site trackers or third-party analytics. Your language preference is stored locally in your browser so that the site remembers it on your next visit; that preference stays on your device and is not transmitted to us. Standard server logs are retained for security and diagnostic purposes.

11. Children

Our website, software and applications are intended for business use and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our services or in applicable law. The date at the top of this page shows when it was last revised. Where a change materially affects how we handle your personal information, we will take reasonable steps to notify you.

13. How to contact us

Questions, requests or complaints about this policy or about how we handle personal information can be sent to the address below. We aim to respond within one business day and to resolve substantive requests within thirty days.

Registered legal name

OceanAstra Technologies L.L.C
Office 08, Building R.SH.038, Saih Shuaib 2, Dubai Industrial City, Dubai, United Arab Emirates