This Privacy Policy explains how we collect, use, share and protect personal information when you visit our website, contact us, or use software and mobile applications that we provide. We have written it to be read, not to be survived.
The controller responsible for the personal information described in this policy is the company identified at the end of this document, registered in Dubai, United Arab Emirates. Where we process personal information on behalf of a client — for example, inside a business system we operate for them — that client is the controller and we act as a processor under our agreement with them.
We collect only what we need for a clearly identified purpose:
We use personal information to:
We do not sell personal information. We do not use the content of client data to train general-purpose AI models.
Where a legal basis is required, we rely on: performance of a contract with you or your employer; our legitimate interests in operating, securing and improving our business, balanced against your rights; compliance with a legal obligation; and, where applicable, your consent — which you may withdraw at any time.
We share personal information only in these circumstances:
We are based in the United Arab Emirates and work with clients and providers in other countries. Where personal information is transferred across borders, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and with applicable law, including through contractual safeguards with the recipient. Where a client requires data to remain within a specific jurisdiction, we agree that in writing before implementation.
We keep personal information only as long as needed for the purpose it was collected for, and for any period required by law, contract or a legitimate record-keeping need. Enquiry correspondence is normally retained for up to twenty-four months. Client system data is retained according to the agreement with that client and deleted or returned at the end of the engagement on request.
We apply administrative, technical and physical safeguards appropriate to the sensitivity of the information, including access control on a need-to-know basis, encryption in transit, logging of administrative actions, and confidentiality obligations on our personnel and subcontractors. No system is completely secure, and we do not claim otherwise; if a breach affects your personal information we will notify affected parties and any relevant authority as required by applicable law.
Subject to applicable law, you may ask us to:
To exercise any of these, contact us using the details below. We may need to verify your identity before acting. If we hold the information as a processor for a client, we will refer your request to that client and support them in responding.
This website uses Cloudflare Web Analytics to count page views. It sets no cookies, stores nothing on your device, and does not track you across other sites; Cloudflare processes this data on our behalf. Your language choice is carried in the page address rather than saved in your browser. We use no advertising cookies and no cross-site trackers, and we also use the search engines' own webmaster consoles, which report on data those engines collect themselves. Standard server logs are retained for security and diagnostic purposes.
Our website, software and applications are intended for business use and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this policy to reflect changes in our services or in applicable law. The date at the top of this page shows when it was last revised. Where a change materially affects how we handle your personal information, we will take reasonable steps to notify you.
Questions, requests or complaints about this policy or about how we handle personal information can be sent to the address below. We aim to respond within one business day and to resolve substantive requests within thirty days.