1. Introduction
Allied Technologies LLC FZ (“Allied Technologies”, “Company”, “we”, “our”, or “us”) is committed to safeguarding the confidentiality, integrity, and lawful processing of your personal data. This Privacy Policy explains how we collect, process, store, disclose, and protect your personal information in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), Cabinet Resolution No. 32 of 2022, and other applicable international frameworks, including the General Data Protection Regulation (GDPR) where relevant. This Policy applies to all data collected via our website, communication channels, or business engagements. By interacting with our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.
2. Purposes and Lawful Basis of Processing
a. Performance of Contract
- Processing service or business engagement applications and related documentation.
- Administering ongoing service delivery, project execution, billing, and client relationship management.
- Responding to client queries and providing technical or operational support.
- Recording communications (calls or electronic exchanges) for verification, compliance, and service quality purposes.
- Issuing regular reports, invoices, or service updates.
- Sharing information with authorized third parties (e.g., auditors, regulators, banks, or partners) as required for service delivery.
b. Compliance with Legal Obligations
- AML/CFT compliance: Verification of client identity under UAE Cabinet Decision No. 10 of 2019 and Federal Decree-Law No. 20 of 2018 on Anti-Money Laundering and Combating Financing of Terrorism.
- Tax reporting: Compliance with CRS/FATCA and other cross-border tax disclosure regimes.
- Sanctions and PEP screening: Conducted in accordance with UAE, UN, EU, OFAC, and other applicable sanctions frameworks.
- Regulatory reporting: Providing information to regulators or authorities as required by law.
c. Legitimate Interests
We may process your data for purposes aligned with our legitimate business interests, provided such processing does not override your rights and freedoms, including:
- Monitoring, auditing, and enhancing service quality.
- Managing internal operations, cybersecurity, and IT infrastructure integrity.
- Conducting statistical or market research.
- Protecting company interests, property, and rights in case of disputes or claims.
You may object to such processing at any time by contacting us (see Section 10).
d. Consent
Where required by law, we will obtain your explicit consent before using your personal data for non-contractual purposes such as direct marketing, newsletters, or promotional communications. You may withdraw your consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing carried out before such withdrawal.
3. Data Collection and Sources
- Information you provide directly through forms, emails, or communications.
- Data obtained through website interactions (cookies, analytics, or forms).
- Authorized third parties or publicly available sources for verification or compliance.
Data categories may include identifiers (name, contact details), professional data (designation, employer), financial data (billing details), and compliance-related data (KYC, AML, tax information).
4. Disclosures and Data Transfers
Your data may be shared with authorized personnel, affiliates, or third-party service providers, subject to strict confidentiality and data protection agreements. Transfers may occur to:
- Auditors, banks, regulators, or government authorities as required by law.
- Technology providers and secure cloud service platforms (data hosting, CRM, analytics).
- Affiliated entities or service partners located within or outside the UAE.
If data is transferred outside the UAE, such transfer will comply with PDPL Articles 22–23, ensuring adequate safeguards, contractual protections, and equivalence to international data protection standards.
5. Data Retention
We retain personal data only as long as necessary for the purposes outlined or as required under law, including retention periods mandated by:
- AML/CFT record-keeping requirements (minimum five years).
- Tax or audit record obligations.
- Legal claims or statutory limitation periods.
Data that is no longer required is securely deleted or anonymized.
6. Data Security
We implement robust technical, administrative, and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction, including:
- Encrypted storage and secure network infrastructure.
- Multi-layer access controls and role-based permissions.
- Regular vulnerability assessments and cybersecurity audits.
- Staff confidentiality agreements and periodic data protection training.
Despite best efforts, no electronic transmission or storage is completely secure; therefore, users acknowledge inherent risks of online communication.
7. Your Rights under UAE and International Law
- Right to Access: Obtain confirmation and a copy of your data held by us.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data (“right to be forgotten”).
- Right to Restrict Processing: Limit use of your data in certain cases.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Revoke consent at any time for non-essential processing.
You may exercise these rights by contacting [email protected]. If you believe your data is not processed in accordance with applicable law, you may file a complaint with the UAE Data Office or your local data protection authority.
8. Automated Decision-Making and Profiling
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Any use of analytics or AI tools is solely for operational optimization and is anonymized.
9. Refusal to Provide Data
Provision of personal data may be a contractual or regulatory requirement. Failure to provide such data may prevent us from establishing or maintaining a business relationship or fulfilling legal obligations.
10. Contact and Complaints
For data protection inquiries, corrections, or complaints, please contact: [email protected].
11. Updates to This Policy
This Privacy Policy may be updated periodically to reflect legal, operational, or technological changes. The latest version will always be available on our website with a revised effective date. Material updates will be communicated via email or public notice where applicable.
12. Legal Disclaimer
This Policy forms part of Allied Technologies LLC FZ’s corporate governance and compliance framework. All information is provided “as is” without warranty of completeness or accuracy. This Policy does not create any additional contractual or legal rights beyond those stipulated by applicable law.