Privacy Policy

NEDHAM BARAQ TECHNICAL CONSULTATIONS L.L.C is the data controller responsible for the personal data described in this policy. We are registered in Dubai, United Arab Emirates under trade licence No. 1398034.

This policy explains what we collect through this website and in the course of providing our services, why we collect it, how long we keep it, and what rights you have. It applies from 12 August 2024.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations.

Information you give us. When you submit our contact form, email us, call us, or engage us as a client, we collect your name, company name, email address, telephone number, the service you are interested in, and anything else you choose to include in your message.

Client and billing information. If you become a client, we additionally hold contract details, billing address, trade licence details, VAT registration number and payment records.

Technical information. Our hosting provider automatically records standard server logs, including IP address, browser type, pages requested and timestamps. We use these for security, fraud prevention and diagnosing faults.

Data we process on your behalf. While delivering managed IT or migration services we may access systems containing personal data belonging to your staff or customers. We process that data only on your instructions, for the purpose of the engagement — see section 8.

We do not collect or store full payment card numbers. Card payments are handled entirely by a licensed third-party payment gateway.

• To respond to your enquiry — on the basis of steps taken at your request prior to entering a contract.
• To provide services and support — on the basis of performing our contract with you.
• To issue invoices and keep accounting records — on the basis of our legal obligations under UAE commercial and tax law.
• To secure our website and prevent abuse — on the basis of our legitimate interest in protecting our systems.
• To send service updates or occasional marketing — on the basis of your consent, which you may withdraw at any time.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

We share personal data only where necessary, with:

• Service providers who help us operate — website hosting, email delivery, accounting software and payment gateways — each bound by confidentiality obligations.
• Professional advisers such as auditors and legal counsel, where required.
• Government or regulatory authorities, where we are legally obliged to disclose.

We never sell, rent or trade personal data to third parties for their own marketing.

Some of our service providers store data on servers outside the United Arab Emirates. Where personal data is transferred abroad, we transfer it only to jurisdictions offering an adequate level of protection, or under contractual safeguards required by UAE data-protection law.

• Enquiries that do not become engagements: up to 12 months from last contact.
• Client records, contracts and correspondence: for the duration of the relationship and 5 years afterwards.
• Accounting and tax records: at least 5 years, as required by UAE tax legislation.
• Server logs: typically 30 days.

When a retention period ends, data is securely deleted or irreversibly anonymised.

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit (TLS), access control on a need-to-know basis, multi-factor authentication on administrative accounts, monitored and tested backups, and confidentiality undertakings from everyone who works with us.

No system is perfectly secure. If a personal-data breach occurs that is likely to prejudice your privacy or confidentiality, we will notify the UAE Data Office and affected individuals without undue delay, as required by law.

Where we act as a data processor for a client — for example while administering their email tenancy, servers or backups — we:

• process personal data only on the client's documented instructions;
• keep it confidential and restrict access to assigned personnel;
• apply the security measures described in section 7;
• do not engage a sub-processor without the client's prior written approval;
• assist the client in responding to requests from individuals exercising their rights;
• return or securely delete the data at the end of the engagement, at the client's choice.

Subject to the conditions in UAE Federal Decree-Law No. 45 of 2021, you have the right to:

• request access to the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• request deletion of your data, where no legal duty requires us to keep it;
• request that we restrict or stop processing in certain circumstances;
• receive your data in a structured, machine-readable format;
• object to processing based on our legitimate interests;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with the UAE Data Office.

To exercise any of these rights, email hr@nedhambaraq.com. We respond within 30 days and may ask you to verify your identity before we act.

This website uses only the cookies necessary for it to function correctly. We do not use advertising or cross-site tracking cookies. Full details are in our Cookie Policy.

Our services are intended for businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy to reflect changes in our practices or in the law. The current version and its effective date are always published on this page. Material changes will be notified to active clients by email.

NEDHAM BARAQ TECHNICAL CONSULTATIONS L.L.C
Office 108-A41, Owned by Saeed Suhail Saeed Bin Delooh Al Ketbi, White Swan Bldg, Trade Center First, P.O. Box 54660, Dubai, United Arab Emirates
Telephone: +971 4 273 0789
Email: hr@nedhambaraq.com