Privacy Policy

1. Scope and Our Role

This policy covers personal data handled through our website, enquiries, quotations, customer relationships, and the delivery of IT, ELV, software, and accounting services.

We act as a data controller when we determine why and how personal data is used for our own business activities, such as responding to enquiries and managing billing.

When we process information on behalf of a client under their instructions, we may act as a data processor. In those situations, the client’s privacy notice and our service or data-processing agreement also apply. Product-specific privacy notices may provide further details.

2. Information We Collect

The information we handle depends on your interaction with us and the services requested. It may include:

• Contact information: your name, business email address, telephone number, company name, and job title.
• Enquiry and correspondence details: messages, service requirements, attachments, support requests, and communication history.
• Business and transaction records: quotations, contracts, billing addresses, invoices, payment confirmations, and relevant tax information.
• Technical information: IP addresses, browser and device details, request times, website activity, and diagnostic or security logs, depending on the systems and tools used.
• Service-related information: records, configuration details, and other information necessary to perform the agreed work.

Please provide only information relevant to your request. Do not submit passwords, complete payment-card details, biometric records, or other sensitive information through a general enquiry form or website chat.

3. How We Collect Information

We collect information directly when you contact us, submit an enquiry, request a quotation, enter into an agreement, or seek technical support.

We may also receive information from your employer, authorised representatives, or service partners where necessary for an engagement and permitted by law.

Technical information may be generated automatically when you use our website or supported systems. Optional tracking technologies are addressed separately in the cookies section below.

4. How We Use Information

We use relevant personal data to:

• Respond to enquiries and prepare quotations or proposals.
• Deliver, administer, and support agreed products and services.
• Manage customer accounts, contracts, invoices, and payments.
• Coordinate appointments, installation, maintenance, and handover.
• Investigate technical issues and protect systems against misuse.
• Improve website functionality and service quality where lawful.
• Meet legal obligations and establish or defend legal claims.
• Send marketing communications only where legally permitted.

If we intend to use personal data for a new purpose that requires additional notice or consent, we will provide that notice or obtain consent before proceeding.

5. Grounds for Processing

We process personal data on grounds permitted by applicable law. Depending on the circumstances, these may include your consent, processing necessary to enter into or perform a contract with you, compliance with legal obligations, or another applicable statutory exception.

Where processing relies on consent, you may withdraw that consent through the contact channels below. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Simply visiting our website or reading this policy does not constitute consent to optional tracking or marketing. If information is necessary to fulfil a request and you choose not to provide it, we may be unable to provide the relevant service.

6. Cookies and Website Tools

Cookies and similar technologies can support website functionality, security, preferences, usage measurement, and embedded services. The information collected depends on the tools enabled on the website.

Where optional analytics, advertising, or other non-essential tracking is used, we will provide the required information and obtain consent where required before activating it. Where a cookie preference control is provided, you can use it to review or change your choices.

You can also manage or delete cookies through your browser. Blocking essential cookies may affect certain website functions. Browser settings alone may not control all third-party tracking technologies.

Embedded maps, videos, chat tools, or social features may transmit technical information to their providers when loaded or used. Relevant tools should be considered alongside their providers’ privacy notices.

7. Sharing Information

Where necessary for the purposes described in this policy, personal data may be shared with:

• Authorised personnel who need the information to perform their duties.
• Providers supporting hosting, business communications, software, storage, payments, or technical operations.
• Contractors and service partners involved in an agreed project.
• Professional advisers, such as accountants, auditors, insurers, or legal advisers, where relevant.
• Courts, regulators, or public authorities where disclosure is required or otherwise lawfully justified.

Disclosures should be limited to what is necessary. Where a provider processes personal data on our behalf, appropriate contractual and confidentiality requirements apply.

8. Client and Service Data

IT and ELV services: Installation, maintenance, migration, or support may require authorised access to devices, networks, logs, backups, CCTV systems, access-control systems, or attendance systems. Access and handling depend on the agreed scope.

Software and Auxwall: Software implementation or support may involve employee, customer, supplier, membership, attendance, payroll, or transaction records, depending on the product and enabled features.

Accounting services: An engagement may involve financial records, invoices, payroll information, and supporting documents that contain personal data.

Where a client controls this information, the client is responsible for determining an appropriate lawful basis, providing required notices, and issuing lawful instructions. We remain responsible for our own obligations as a service provider or processor.

Sensitive information, including biometric data where involved, requires specific assessment and appropriate safeguards. This policy is not a substitute for employee, visitor, CCTV, or biometric notices required for a client’s systems.

9. Communications and Marketing

We may contact you about your enquiry, quotation, project, invoice, account, or support request using the contact details provided for that purpose.

Promotional communications will be sent only where permitted by applicable law and with consent where required. You can ask us to stop marketing messages using the available unsubscribe method or by contacting us.

Opting out of marketing does not prevent necessary communications about an active service, contractual obligation, security issue, or legal requirement.

10. International Data Transfers

Depending on the hosting, software, or service providers used for an engagement, personal data may be stored or accessed outside the United Arab Emirates.

Where this occurs, transfers must follow applicable legal requirements, including an appropriate level of protection, permitted safeguards, or another legally available transfer mechanism.

You may contact us for information about overseas processing relevant to your data and the safeguards that apply.

11. Data Retention

We retain personal data for as long as necessary for the purpose for which it was collected, subject to applicable legal, contractual, and record-keeping requirements.

• Enquiry records are retained according to the need to respond, follow up, and document the interaction.
• Contract, invoice, and accounting records are retained for applicable statutory and business record-keeping periods.
• Support and security records are retained according to operational needs, risk, and relevant obligations.
• Data processed for a client is retained, returned, or deleted according to the relevant agreement and law.

Retention may be extended where necessary for an ongoing dispute or legal obligation. When information is no longer required, it should be securely deleted or anonymised. Backup copies may remain until the applicable backup retention cycle ends, with access restricted.

12. Information Security

We apply reasonable technical and organisational measures appropriate to the information handled and the risks involved, including controls over authorised access and confidential handling.

No internet transmission or storage system can be guaranteed completely secure. Please use an agreed secure method when sending confidential documents or access credentials.

Where a personal data breach occurs, we will assess and respond to it and notify affected individuals and relevant authorities where required by applicable law.

13. Your Privacy Rights

Depending on the applicable law and circumstances, you may have the right to:

• Obtain information about how your personal data is processed.
• Request access to or a copy of your personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal data in applicable circumstances.
• Request restriction of, or object to, certain processing.
• Receive or transfer your data where a portability right applies.
• Withdraw consent where processing is based on consent.
• Object to qualifying automated decisions and request human review where applicable.
• Lodge a complaint with a competent authority.

These rights are subject to legal conditions and exceptions. We may need to verify your identity and authority before responding. We will handle requests within the applicable legal timeframe and explain any lawful restriction.

If your request concerns information we process for a client, we may refer it to the relevant client and assist them as required.

14. External Services and Links

Our website may link to external websites or allow you to interact with third-party communication and other services. Those providers may process information under their own privacy policies.

If a chatbot or AI-assisted feature is offered, avoid entering sensitive or confidential information unless the feature is expressly intended for it. Any additional processing, provider involvement, and relevant choices should be disclosed for that feature.

Please review the relevant provider’s privacy information. This does not remove our responsibility for personal data processing that we control.

15. Children’s Privacy

Our website and business enquiry channels are intended for business customers and adults, rather than children.

If you believe a child has provided personal data through our website without appropriate authorisation, please contact us so that we can assess the situation and take appropriate action.

Where a client’s service involves children’s information, the relevant engagement must address the applicable notices, permissions, and safeguards.

16. Updates to This Policy

We may update this policy to reflect changes in our services, processing activities, or legal obligations. The effective date at the top of this page identifies the current version.

Where a change requires additional notice or fresh consent, we will provide that notice or seek consent as required. Publishing an updated policy does not replace a legal requirement to obtain consent.

17. Contact and Privacy Complaints