Privacy Policy

Who we are and what this policy covers

Emirates Digitals (“we”, “us”, or “our”) is based at Al Maryah Tower, Suite 405, P.O. Box 5774, Abu Dhabi, United Arab Emirates. Contact us about privacy at info@emiratesdigitals.com or +971 2 650 6777.

This policy explains how we handle personal information in connection with this website, enquiries, business relationships, and applications, websites, portals and digital services that we develop, deploy, host, operate, support or maintain, whether under our own name or on behalf of other organizations (“Client Applications”). It also covers AI-powered applications, assistants, modules and features (“AI-Powered Services”) within those services. Emirates Digitals is responsible for processing where we decide why and how information is used.

When we process information on a business customer’s instructions, that customer may be the controller and we may act as its service provider or processor. The customer’s privacy notice and our agreement with that customer also apply. A service-specific notice may provide additional details; it does not remove rights granted by applicable law.

Applications operated for other organizations

Emirates Digitals develops, deploys, operates and maintains applications for other entities. An application may display the client organization’s name or brand while Emirates Digitals provides its technical operation, hosting, maintenance, updates, integrations or support.

Where the client organization determines the purposes and essential means of processing its users’ information, it is generally the controller and Emirates Digitals acts as a processor or service provider under the relevant agreement and instructions. Emirates Digitals may separately act as a controller for activities where it determines its own purposes and means, such as its own business correspondence. The allocation of responsibilities depends on the service and actual processing; it is not determined by branding alone.

Depending on the application, information handled may include user account and contact details, orders and bookings, delivery or fulfilment details, loyalty records, customer communications, transaction records, technical logs, and content submitted to AI features. These are possible categories across different applications, not a statement that every application collects all of them.

Handling on a client’s behalf may be needed to deliver the application’s functions, process and track requests or orders, provide technical support, troubleshoot issues, maintain security, and perform authorized maintenance or integrations. Access and use must be limited to the relevant role, instructions and applicable legal obligations.

The client organization’s application-specific privacy notice explains its purposes, data collection, payment arrangements, retention and user choices. This policy supplements that notice by explaining Emirates Digitals’ role; it does not replace the client’s responsibilities or authorize unrelated uses of its users’ information.

For requests concerning an account, order or other information controlled by a client organization, contact that organization using the details in its application. You may also contact Emirates Digitals, identifying the application and organization, so we can direct the request appropriately or assist within our role. Client-controlled retention, deletion and access requests are handled in accordance with the applicable agreement and law.

Payment and credit card information

Some applications that Emirates Digitals develops, deploys, operates or maintains for other organizations may request credit card details to complete a payment. Emirates Digitals does not save or store that credit card information.

Card details supplied through a payment flow are used for payment processing. The relevant payment provider or financial institution may process and retain information under its own privacy notice and applicable obligations. Our statement that Emirates Digitals does not store card information does not mean that the payment provider, card issuer or client organization has identical practices.

Application records may include non-card transaction information, such as an order reference, payment amount, date and payment status, where needed to deliver the service, reconcile a transaction or provide support. Such transaction records are distinct from storing the card information entered for payment.

The payment options and provider involved depend on the application and should be checked in its checkout and privacy information. Enter card details only in the designated payment flow; do not send them through general enquiries, support messages or AI conversations.

Information we handle

Depending on your interaction, information may include contact details such as your name, work email, telephone number and organization; enquiry and support correspondence; and project or service information you provide.

For AI-Powered Services, information may also include prompts, uploaded content, conversation context, generated responses, request references and service records. Submit only information you are authorized to share and avoid unnecessary sensitive information.

Technical information may be generated by hosting, security or service providers, including IP addresses, browser or device information, timestamps, request identifiers and access or error logs. Device identifiers and location-related information may be personal information; we do not automatically treat them as anonymous.

Information may come directly from you, from an organization authorizing your use of a service, from integrations you authorize, or from technical operation of the service. Truly anonymized information that can no longer identify a person is different from personal information.

This website, cookies and external resources

When enabled, this website’s enquiry form sends your name, email, selected service and message to our server for validation and delivery through Resend to info@emiratesdigitals.com. The receiving address may forward messages to our designated business-contact inbox. Delivery providers process message content and delivery metadata under their terms and privacy practices. The application does not store enquiry content in its database; short-lived counters based on a hashed network identifier help prevent abuse. Email copies and provider logs may be retained under the applicable retention arrangements. If sending is unavailable, the form reports that your message was not sent.

The website’s AI examples are prewritten demonstrations, not live AI conversations. This website does not ask for payment card details or provide a payment checkout. Do not send card details in enquiries or AI prompts.

The site loads fonts from Google Fonts, which involves requests from your browser to that provider. Hosting and access-control providers may also process technical data and use technologies needed for security, authentication or delivery. Their processing may be covered by their own privacy notices.

The website code does not include advertising trackers or analytics scripts. If optional analytics or advertising technologies are introduced, the relevant information and consent choices must be provided as required by applicable law. Browser settings may limit cookies, but blocking essential technologies can affect functionality.

Purposes and grounds for processing

We use relevant information to respond to enquiries, discuss and deliver requested services, manage customer relationships, provide support, maintain records, protect services against misuse, and meet legal obligations.

Processing must have a basis permitted by applicable law. Depending on the activity and jurisdiction, this may be your consent, steps requested before entering a contract or performance of a contract, a legal obligation, or another applicable statutory permission. Where legitimate interests are a permitted basis, they may include proportionate service security and business administration, subject to your rights. Legitimate interests are not a universal basis under every jurisdiction.

Where consent is the basis, you may withdraw it by contacting us. Withdrawal does not affect lawful processing before withdrawal. Not providing information needed for an enquiry or service may prevent us from responding or providing that service. Reading this policy or merely visiting the website is not blanket consent to all processing.

AI providers, training and human review

An AI-Powered Service may send the content needed to process your request to an AI technology or platform provider and receive generated results. The information involved depends on the feature and authorized integrations. Provider handling, retention, human review and any model-training use depend on the specific service, provider terms and configuration; this general policy does not represent that all providers operate identically or that all content is excluded from model training.

Before sharing confidential or sensitive content, check the service-specific notice and available controls, or contact us for details of the applicable provider and data handling. An organization deploying a service may also set its own permitted-use rules.

The demonstrations on this website do not make decisions about you. If a separate service involves solely automated decisions with legal or similarly significant effects, applicable disclosures, safeguards and rights to human intervention or challenge must be addressed for that service.

Sharing information

Information may be handled by authorized personnel and providers supporting hosting, communications, infrastructure, AI processing, security and support, to the extent needed for their role. A third-party platform you independently use may process information under its own terms and privacy notice.

Information may also be disclosed where required by law or lawful requests, to establish or defend legal claims, or where necessary to protect users and services. A business transfer may involve relevant records, subject to applicable privacy requirements.

This policy does not authorize unrestricted sharing or sale of personal information. Any separate marketing or other use requires its own applicable legal basis and disclosures.

International processing

Hosting, communications and AI services may involve processing outside the UAE. Destinations and arrangements depend on the service and its providers. International transfers must follow the requirements of the applicable data-protection regime, including any required adequacy arrangements, contractual safeguards or permitted exceptions.

Contact us to ask about the locations, recipients and transfer safeguards relevant to a particular service. This policy is not a statement that all information remains in the UAE or that every destination has equivalent privacy laws.

Retention

Retention depends on the purpose and service. Relevant criteria include whether an enquiry or project is active, support needs, contractual obligations, applicable recordkeeping requirements, security investigations and legal claims. Information should not be retained longer than necessary for the applicable purpose and legal requirements.

Service-specific notices or agreements may set particular periods. This general policy does not impose a single 12-month or 90-day period across all services and providers. You may ask us for the retention period or criteria applicable to your records. Deletion requests are subject to applicable rights and lawful retention exceptions, including necessary records and backup cycles.

Security

Personal information requires appropriate technical and organizational protection against unauthorized access, loss, misuse and disclosure. Measures should be proportionate to the information and risks involved. This website is delivered over HTTPS, which encrypts information in transit between your browser and the hosting service.

No online service or transmission method can be guaranteed completely secure. Please avoid sending passwords, full payment card details or unnecessary sensitive information through general enquiries. Where a personal-data breach triggers notification obligations, the applicable legal requirements govern notifications to authorities and affected individuals.

Your rights and choices

Depending on the law applicable to your information, you may have rights to obtain information about processing, access or receive a copy of your data, correct inaccuracies, request deletion, restrict or object to processing, obtain data portability, withdraw consent, and challenge certain automated decisions or request human intervention. These rights may be subject to statutory conditions and exceptions.

To make a request, email info@emiratesdigitals.com with “Privacy request” in the subject and describe the service and request. We may need proportionate information to verify identity or authority before releasing or changing records. We will address requests within applicable legal time limits and explain any lawful limitation or refusal.

You may object to direct marketing or request to stop marketing messages by contacting us or using an available unsubscribe mechanism. Essential service, security or legal messages are distinct from optional marketing. You may also stop using an AI service and revoke authorized integrations through available account or platform controls.

Questions and complaints

You can raise privacy questions or concerns with Emirates Digitals at info@emiratesdigitals.com, +971 2 650 6777, or the postal address above. You may also complain to the competent data-protection authority under the law that applies; you do not have to waive that right to contact us.

The relevant authority depends on the responsible entity, service and jurisdiction. Where ADGM data-protection law applies, complaints may be made to the ADGM Office of Data Protection. Where the UAE federal personal-data protection regime applies, the UAE Data Office is the relevant authority. Other rights and regulators may apply where another jurisdiction’s law governs the processing.

Children and third-party services

This business website is intended for business enquiries, not for children. Do not submit a child’s personal information unless it is necessary for a specific authorized service and the applicable safeguards and consent requirements have been addressed. Contact us if you believe a child has submitted personal information inappropriately.

External websites and platforms operate under their own privacy practices. Review their notices when you follow links or use their services. This policy does not replace those notices.

Changes to this policy

We may update this policy to reflect changes to services, practices or legal requirements. The date above identifies the latest revision. Material changes will be communicated as required by applicable law; where a new use requires consent, publishing an updated policy alone does not replace that consent.