1. Information We Collect

1.1 Project and Technical Documentation

In the course of providing our surveying, appraisal, inspection, and consultancy services, we collect and process comprehensive technical information including:

• Site survey measurements, vessel specifications, and machinery data
• Architectural, structural, engineering, and technical drawings
• Building inspection reports, vessel survey reports, and technical assessments
• Construction project details, vessel operational history, and maintenance records
• Cargo specifications, container information, and shipment documentation
• Photographs, video recordings, thermal imaging, and ultrasonic testing data
• Non-destructive testing results and technical evaluations
• Fire investigation documentation and damage assessment reports

1.2 Personal Information

We collect personal and organizational information necessary to deliver our services, including:

• Client Contact Information: Full name, job title, company/organization name, business email address, UAE telephone numbers, international contact details, and postal addresses
• Property and Ownership Information: Title deed verification, property registration details, vessel registration and classification documents, flag state documentation, and beneficial ownership information when required for legal or regulatory compliance
• Technical and Operational Data: IP addresses, device information, browser type, operating system, access logs, and technical metadata related to service delivery
• Communication Records: Email correspondence, WhatsApp communications, telephone recordings (where legally permitted), meeting notes, and documentary evidence of service requests and delivery
• Financial Information: Invoice details, payment records, banking information for service payments, and financial transaction documentation
• Professional Credentials: Professional licenses, certifications, qualifications, insurance information, and regulatory compliance documentation

1.3 Sensitive Data

Where necessary for legal compliance, insurance purposes, or regulatory requirements, we may process sensitive information including accident circumstances, medical information related to incident investigation, criminal convictions for maritime offenses, and other sensitive personal data as legally required for our services.

3. How We Use Your Information

We use collected information for the following purposes:

• Delivering professional surveying, appraisal, inspection, and consultancy services
• Preparing technical reports, assessments, certifications, and expert opinions
• Facilitating communication regarding projects, deliverables, and service progress
• Invoicing, billing, and financial management of service engagements
• Regulatory compliance and submission of required documentation to authorities
• Quality assurance, internal audits, and professional standards maintenance
• Staff training, professional development, and service quality improvement
• Legal proceedings, arbitration, expert witness testimony, and dispute resolution
• Insurance claims management and loss adjusting activities
• Website analytics, security, fraud prevention, and system maintenance
• Business continuity, disaster recovery, and operational resilience

5. Your Rights Under UAE Personal Data Protection Law

You have the following rights regarding your personal data:

• Right of Access: You may request access to your personal data that we process
• Right to Correction: You may request correction of inaccurate, incomplete, or outdated personal data
• Right to Deletion: You may request deletion of non-essential personal data, except where data retention is required by law or contract
• Right to Withdraw Consent: You may withdraw consent for marketing communications and non-contractual processing at any time
• Right to Object: You may object to certain processing activities, subject to our contractual and legal obligations
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format
• Right to Legal Remedy: You have the right to lodge complaints with the UAE Personal Data Protection Authority or seek legal remedies

Limitations: These rights are subject to contractual obligations, legal requirements, ongoing litigation, and legitimate business interests. Project documentation, technical reports, and survey data may be retained as required by UAE law, professional standards, and insurance requirements. To exercise any of these rights, contact our Data Protection Officer at the information provided below.

7. Information Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: AES-256 encryption for all project data, technical documentation, and sensitive information at rest and in transit
• Authentication: Two-factor authentication (2FA) and multi-factor authentication for all system access and administrative functions
• Access Control: Role-based access controls, principle of least privilege, and strict employee access policies
• Network Security: Firewalls, intrusion detection systems, and network segmentation to prevent unauthorized access
• Regular Audits: Comprehensive cybersecurity audits conducted by Dubai-based IT security specialists and international standards compliance
• Employee Training: Mandatory data protection training for all staff members handling personal or project data
• Incident Response: Documented incident response procedures for addressing potential data breaches or security violations
• Backup and Recovery: Regular backups, disaster recovery planning, and business continuity measures
• Physical Security: Secure office facilities in Dubai with controlled access, surveillance, and document destruction protocols
• Vendor Management: Third-party service provider audits and contractual security obligations

Limitation of Liability: While we employ industry-leading security measures, no system is completely immune to unauthorized access or data breaches. We maintain cyber liability insurance appropriate to our operations. In the event of a data breach, we will notify affected individuals and the relevant authorities as required by UAE law.

9. International Data Transfers

As a global surveying services company, we may transfer personal data internationally to serve clients across multiple jurisdictions. All international data transfers are conducted with appropriate safeguards and in compliance with UAE PDPL. Where data is transferred outside the UAE, we ensure equivalent data protection standards through contractual agreements, standard contractual clauses, and Binding Corporate Rules where applicable. By engaging our services, you consent to international data transfers necessary to deliver our services.

11. Third-Party Links and Services

Our website may contain links to third-party websites, services, and resources. This Privacy Policy applies only to information collected through our services. We are not responsible for the privacy practices, content, or security of third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing your information.

13. Data Protection Officer and Contact Information

For privacy inquiries, data subject requests, or concerns regarding our data protection practices, please contact:

Response Time: We aim to respond to data subject requests and privacy inquiries within 30 days. Complex requests may require additional time as permitted under UAE PDPL.

You also have the right to lodge a complaint with the UAE Personal Data Protection Authority (PDPA) if you believe your data protection rights have been violated.