This Privacy Policy explains how IPCA IT SERVICES L.L.C ("IPCA", "we", "us" or "our") collects and processes personal data when you visit our corporate website, submit the Contact IPCA form or communicate with us about an inquiry. Personal data means information that identifies you, or can reasonably be linked to you, as an individual.

This Policy addresses the requirements of UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (the "UAE PDPL") and applicable implementing requirements. It does not limit any rights under other mandatory data protection laws that apply to you. Processing within separate IPCA products, platforms or client projects is covered by the relevant privacy notices and agreements.


1. Who is responsible for your personal data

IPCA acts as the data controller for the processing described in this Policy, meaning that we determine why and how your personal data is processed.

IPCA IT SERVICES L.L.C
Registration No.: 2045631
Trade License No.: 1218289
Registered office: Office 1-567, BIN DASMAL BUILDING, Al Goze Industrial First, Dubai, United Arab Emirates
Privacy contact: info@ipca.ae


2. Personal data we collect

Information you provide. The Contact IPCA form collects your full name, email address, organization, area of interest and message. Full name, email address, organization and message are marked as required; area of interest is optional. We also receive any further information you choose to provide in related correspondence.

Providing information is voluntary. However, without the details marked as required, you cannot submit the form and we may be unable to handle your inquiry. Please provide only information relevant to your request.

Technical information. Depending on the website features you use, the website and its service providers may record your IP address, browser and device information, pages requested, access times, error and security logs, and cookie or similar identifiers. We also keep records of privacy choices and consents where applicable.

We receive information directly from you or automatically through the website and its supporting systems. Please do not send sensitive personal data, identity documents, payment details, passwords or unnecessary information about other people through the general contact form. If you provide another person's details, ensure you are entitled to do so and that they are informed about this Policy.


3. Why we process personal data and our legal bases

Handling inquiries. We use your contact details, professional information and message to assess your request, direct it to the appropriate team, respond to you and conduct related follow-up about our products, services, projects or potential cooperation. For general contact-form inquiries, we rely on your consent.

Contract-related requests. Where processing is necessary to take steps at your request towards a contract with you, or to perform such a contract, we may rely on the contractual exception under Article 4 of the UAE PDPL.

Website operation and security. We use limited technical information to deliver website functions, record privacy choices, diagnose faults and prevent misuse. We rely on applicable legal obligations where processing is necessary to meet those obligations, including data security duties, and obtain consent where required for other processing. Optional analytics or tracking, if introduced, is addressed in Section 5.

Legal compliance and claims. We process information where necessary to comply with applicable UAE legal obligations, respond to lawful authority requests, or establish, exercise or defend legal claims, relying on the relevant exceptions under Article 4 of the UAE PDPL.

We use personal data only for specified purposes and on an applicable legal basis. Before using it for a materially different purpose, we will provide any required additional notice and obtain consent where necessary.


4. Consent and marketing communications

Where consent is required, we request it through a clear affirmative action, such as selecting an unchecked consent box. Reading this Policy or simply visiting the website does not constitute consent to optional processing.

You may withdraw consent at any time by emailing info@ipca.ae or using the relevant privacy controls where provided. Withdrawal does not affect processing lawfully carried out before withdrawal. We will stop consent-based processing unless a separate lawful basis permits or requires continued processing. Withdrawal may prevent us from continuing to handle your inquiry.

Submitting an inquiry does not subscribe you to a mailing list. We will not use your inquiry details for unrelated promotional messages without separate consent. You may object to direct marketing at any time and use an unsubscribe option in any marketing message, where provided, or contact us at info@ipca.ae.


5. Cookies and similar technologies

The website may use cookies or similar technologies for essential functions, security and remembering privacy choices. Any non-essential analytics, advertising or third-party tracking technologies will be activated only after your consent. Where such technologies are used, their purposes, providers and duration will be explained in the relevant cookie notice or consent panel before activation.

You can refuse optional technologies and change your choices through the website's consent controls where provided. Browser settings also allow you to block or delete cookies, although blocking essential cookies may affect website functions. Refusing optional cookies does not prevent you from submitting an inquiry.


6. Who may receive your personal data

Access is limited to people and organizations that need the information for the purposes described in this Policy. These may include:

• authorized IPCA personnel handling inquiries, website administration or compliance;
• service providers supporting website hosting, form delivery, email, cloud storage, inquiry management, IT support and security, and analytics providers only where the relevant features are enabled lawfully;
• professional advisers, including legal advisers and auditors, where necessary and lawfully permitted; and
• courts, regulators, public authorities or law-enforcement bodies where disclosure is legally required or otherwise specifically permitted by law.

Service providers processing data on our behalf must act under our instructions and appropriate contractual confidentiality, security and data protection requirements. We do not sell personal data or disclose inquiry details to third parties for their independent marketing without separate consent.


7. International transfers

Personal data may be stored in, or accessed from, countries outside the United Arab Emirates where our authorized personnel or service providers operate. Any such transfer must comply with Articles 22 and 23 of the UAE PDPL and applicable implementing requirements.

Depending on the transfer, the protection mechanism may be an adequate level of protection recognized under UAE law, a qualifying agreement binding the overseas recipient to the required data protection obligations and enforceable safeguards, or another transfer ground expressly permitted by UAE law.

If we rely on your express consent for a transfer, we will explain the relevant destination, recipient and protection arrangements and obtain that consent before the transfer. General consent to handle an inquiry is not blanket consent to overseas transfers. You may request information about the recipients, destinations and protection measures relevant to your data at info@ipca.ae.


8. How long we retain personal data

We retain inquiry data for as long as necessary to handle your request and complete related follow-up. If an inquiry develops into a contractual relationship, relevant correspondence may be retained for that relationship and applicable legal recordkeeping purposes.

Retention is determined by the nature of the inquiry, whether correspondence is ongoing, applicable legal requirements and any need to establish, exercise or defend legal claims. Technical logs and consent records are retained only for the periods needed for their security and accountability purposes. We review retention and delete or irreversibly anonymize data when it is no longer needed, unless a lawful requirement or exception justifies continued retention.


9. Security and personal data breaches

We apply technical and organizational safeguards appropriate to the nature of the data and the risks of processing, including access restrictions, confidentiality requirements and measures to protect transmission and storage. No method of internet transmission or electronic storage is completely secure.

If a personal data breach occurs, we take steps to investigate, contain it and reduce its effects. We notify the competent authority and affected individuals where required, in the manner and within the time limits set by applicable law, and provide relevant information about the incident and protective steps.


10. Your rights and how to exercise them

Subject to the conditions and exceptions under applicable law, you may:

• request information about the processing of your personal data, including its purposes, recipients, retention criteria and transfer safeguards, and request access to your data;
• request correction or completion of inaccurate or incomplete data, or erasure where the legal conditions are met;
• request restriction or cessation of processing, or object to processing, including direct marketing;
• receive data you provided in a structured, machine-readable format where processing is automated and based on consent or contractual necessity, and request transfer to another controller where technically feasible;
• withdraw consent at any time; and
• object to qualifying automated decisions, including profiling, and request human review as provided by law.

We do not use the data covered by this Policy to make automated decisions that have legal consequences or otherwise significantly affect you.

Send requests to info@ipca.ae, preferably using the email address you used to contact us. We may request only the additional information reasonably necessary to verify your identity and identify the relevant records. We provide the processing information required by law free of charge and respond without undue delay and within applicable legal time limits. If a legal exception prevents us from fulfilling a request, we will explain this where permitted.

You may also complain to the competent UAE data protection authority in accordance with its applicable procedures. You do not have to contact us first. On request, we will provide available information about the relevant complaint procedure. This does not limit any right to complain to another competent authority under applicable law.


11. Children's personal data

The website is intended for adult representatives of governments, institutions and businesses, not for children. We do not knowingly seek to collect children's personal data through the contact form. If you believe a child has provided personal data to us, please contact info@ipca.ae so that we can investigate and delete it where appropriate, subject to any legal obligation to retain it.


12. Third-party websites and services

Links to external websites and services are provided for convenience. Their operators are responsible for their own processing and privacy notices. This does not remove our responsibility for processing carried out on our behalf by service providers. Separate IPCA products and platforms may also have their own privacy notices.


13. Changes to this Policy

We may update this Policy to reflect changes in our website, processing activities or applicable law. The latest version and its update date will be published on the website. We will give additional notice of material changes and seek renewed consent where required. Continued website use does not by itself provide consent to a new processing purpose.