Privacy Policy

Introduction

Data Direct Group (“we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.datadirect.ae or interact with our services. This policy is designed in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where applicable, the EU General Data Protection Regulation (GDPR).

Who We Are

Data Direct Group is a business process outsourcing and customer experience services company headquartered in Dubai, UAE. For most website visitors, we act as a data controller, determining how and why personal data is processed. For certain client projects, we may act as a data processor, handling data under the instructions of our clients.

Information We Collect

• Information you provide: When you contact us, fill out forms, apply for jobs, or request information.
  • Examples: name, email address, phone number, company, job title.
• Automatically collected data: When you visit our website, we may collect:
  • IP address
  • Browser type
  • Operating system
  • Referring URLs
  • Browsing activity
• Cookies and analytics: We use cookies to enhance user experience and analyze traffic. You can control cookies through your browser or our cookie consent tool.
• Third-party data: We may receive information from verification providers, analytics partners (like Google Analytics), or publicly available sources.
• We do not knowingly collect information from individuals under the age of 18 without verified parental consent.

How We Use Your Data

• To provide, maintain, and improve our services.
• To respond to your inquiries or requests.
• To send service updates, newsletters, or marketing communications (only with your consent).
• To comply with legal or regulatory obligations.
• To analyze site usage and improve content and performance.
• We do not sell or rent personal data under any circumstances.

Legal Bases for Processing

Our data processing practices comply with applicable regulations including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where relevant, the EU GDPR. We rely on the following lawful bases:

• Performance of a contract with you or your company.
• Compliance with legal obligations.
• Legitimate business interests (e.g., improving services, ensuring security).
• Your consent (for marketing, cookies, or optional data sharing).

You may withdraw your consent at any time by contacting our Data Protection Officer (DPO).

Sharing and Transfers of Data

We may share personal data with:

• Trusted third parties (IT providers, analytics tools, HR systems, advisors).
• Government or legal authorities where required by law.
• Internal group entities within Data Direct Group for operational or compliance purposes.

If data is transferred outside the UAE or EEA, we ensure equivalent protection using standard contractual clauses or other approved mechanisms.

Data Retention

We keep your data only as long as necessary for the purposes it was collected or as required by law. When no longer needed, data is securely deleted or anonymized.

Data Security

We apply strong technical and organizational measures to prevent unauthorized access, loss, or misuse of personal data. These include

• Encryption
• Access control
• Network monitoring
• Staff training
• Regular audits

Your Rights

You have the following rights under PDPL and GDPR:

• Access to your personal data.
• Correction or deletion of inaccurate or outdated data.
• Restriction or objection to processing (including direct marketing).
• Data portability (transfer to another service provider).
• Withdraw consent at any time.

To exercise any of these rights, please contact our DPO.

Cookies and Tracking

Our website uses cookies to:

• Remember your preferences.
• Measure traffic and site performance.
• Support marketing and advertising analytics.

You can manage cookie settings through our Cookie Preference Center or your browser.

Data Breach Notification

If a data breach occurs that may affect your rights or freedoms, we will notify you and the relevant authorities within 72 hours, as required by law.

Contact Information

Data Protection Officer (DPO)

• Data Direct Group
• Email: dpo@datadirect.ae
• Address: Dubai, United Arab Emirates

Updates to This Policy

We review and update this policy regularly. The latest version will always be available on www.datadirect.ae with the effective date clearly displayed. We encourage you to review this page periodically.