Privacy Policy - Al-Asri Engineering Consultations
1. Introduction
1.1 Al-Asri Engineering Consultations ("the Company", "we", "us", "our") is committed to protecting the privacy of our clients' and website visitors' data. This Privacy Policy explains how we collect, use, and protect your personal information in the context of providing our engineering consulting services and communicating with you.
1.2 We operate in accordance with the Personal Data Protection Law of the United Arab Emirates (Federal Decree-Law No. 45 of 2021) and any other applicable legislation related to privacy and data protection.
1.3 By using our website or services, you consent to the data collection and usage practices described in this policy.
2. Personal Data We Collect
We collect the following types of information:
2.1 Information You Provide Directly:
Contact Information: Full name, email address, phone number, company address, job title.
Project Information: Details of the requested project (location, type, area, budget, timeline), preliminary technical documents (plans, photos, previous studies).
Payment and Invoicing Information: Billing details, payment history (we do not store full credit card details on our servers).
2.2 Information Collected Automatically:
Usage Data: When you visit our website, we may collect your IP address, browser type, pages visited, visit time and duration, and referral sources.
Cookies and Tracking Technologies: We use cookies to enhance user experience, remember preferences, and analyze website traffic. You can manage cookie preferences through your browser settings.
2.3 Information from Other Sources:
We may supplement contact information from public or professional sources (e.g., LinkedIn or business registries) for verification or business development purposes, while adhering to legal frameworks.
3. How We Use Your Personal Data
We use the data we collect for the following purposes:
3.1 Providing and Executing Services:
Communicating with you regarding inquiries or service requests.
Preparing technical and financial proposals (quotations).
Executing signed agreements and contracts with you.
Managing projects and technical communication during implementation phases.
3.2 Legal and Administrative Purposes:
Fulfilling legal and regulatory obligations in the UAE.
Issuing invoices and managing payments.
Maintaining records required by law.
3.3 Improving Our Services and Marketing (With Your Consent):
Analyzing website usage to improve its design and content.
Sending newsletters, offers, or information about new services only if you explicitly subscribe. You can unsubscribe at any time.
3.4 We do not sell your personal data to third parties for their marketing purposes.
4. Legal Basis for Processing Data
We rely on the following legal bases to process your data:
Contract Performance: When data is necessary to perform the services agreed upon with you.
Legal Obligation: When collection or disclosure is required under UAE law.
Explicit Consent: For direct marketing purposes or certain types of cookies.
Legitimate Interest: To improve our services, prevent fraud, and protect our systems' security.
5. Sharing Data with Third Parties
We may share your data with the following parties for specific purposes only and with appropriate safeguards:
5.1 Service Providers and Partners:
Data and cloud hosting providers (within the UAE or in countries with adequate protection levels).
Engineering software companies (e.g., Autodesk) for shared licensing.
Legal or financial consultants when needed.
5.2 Government Authorities and Legal Compliance:
When required by competent authorities in the UAE (Municipalities, Civil Defence, regulatory bodies) as part of project requirements or under a court order.
5.3 We require all third parties to respect the security of your data and process it in accordance with the law and our instructions.
6. Cross-Border Data Transfer
6.1 Your data may be transferred to, stored, and processed in countries other than the UAE where our cloud service partners' servers are located.
6.2 We take appropriate steps to ensure any data transfer outside the country complies with UAE law and that an adequate level of data protection exists (through binding contracts or transfers to countries recognized by UAE regulatory authorities).
7. Data Security and Protection
7.1 We implement advanced technical and administrative security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
7.2 These measures include, but are not limited to: encryption, firewalls, intrusion detection systems, strict access control policies, and employee training on data confidentiality.
7.3 However, no method of data transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.
8. Data Retention Period
8.1 We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal or contractual obligations.
8.2 For example:
Contact data for active projects: Throughout the contract duration and warranty years.
Financial and accounting data: For at least 5 years according to legal and tax requirements in the UAE.
Marketing data: Until you request deletion or unsubscribe.
8.3 After the retention period ends, data is securely deleted or destroyed.
9. Your Rights Regarding Your Data
Under UAE law, you may have the right to:
Request access to your personal data we hold.
Request correction of inaccurate or incomplete data.
Request deletion of your data under certain circumstances (right to be forgotten).
Request restriction of processing of your data.
Object to the processing of your data.
Request transfer of your data to another party (data portability).
Withdraw your consent at any time, if processing is based on consent.
To exercise any of these rights, please contact our Data Protection Officer using the details provided at the end of this policy.
10. Links to External Websites
Our website may contain links to third-party sites (e.g., engineering software platforms or regulatory authorities). We are not responsible for the privacy practices or content of these sites. We advise you to review their privacy policies.