Privacy Policy

1. About us and this Policy

Dynovative Technologies L.L.C (“Dynovative”, “we”, “us”, “our”) is a technology services company incorporated and operating in Dubai, United Arab Emirates. We build software platforms, enterprise systems, cloud infrastructure and managed IT services for organisations worldwide.

This Privacy Policy explains what personal data we collect when you visit our website or contact us, why we collect it, how long we keep it, with whom we share it, and what rights you have. It applies to all visitors regardless of location.

We act as the data controller for personal data processed through this website.

2. Personal data we collect

2a. Data you provide directly

• Contact and enquiry data: your name, email address, telephone number, company name, job title and the contents of any message you send us through our contact form or by email.
• Business context: details about your organisation, project requirements or technology needs that you choose to share when making an enquiry.

2b. Data collected automatically

• Technical data: IP address (anonymised where possible), browser type and version, operating system, device type, and referring URL.
• Usage data: pages visited, time spent on pages, clickpath, and the date and time of your visit.
• Essential cookie data: session identifiers and security tokens set by the website to enable core functionality (see Section 6).

2c. Data we do not collect

We do not currently deploy analytics tracking pixels, behavioural advertising scripts, or third-party social media tracking on this website. We do not collect payment card details, government identity numbers, or any special categories of personal data (health, biometric, political, religious or similar) through this website.

3. Legal basis for processing

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following lawful bases:

• Legitimate interests (Article 6(1)(f) GDPR): responding to business enquiries, improving the security and performance of our website, and preventing fraud. We have assessed that these interests are not overridden by your privacy rights.
• Legal obligation (Article 6(1)(c) GDPR): where we are required to process or retain data to comply with applicable law.
• Consent (Article 6(1)(a) GDPR): where you have given clear consent for a specific purpose not covered above. You may withdraw consent at any time.

Where the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL) applies, we process personal data on the basis of necessity to provide the requested service or information, compliance with a legal obligation, or pursuant to our legitimate business interests, as set out in that law.

4. How we use your data

• To receive, assess and respond to your business enquiries and service requests.
• To communicate with you about services, proposals or follow-up actions you have initiated.
• To operate and maintain the security, performance and integrity of this website.
• To detect and prevent fraudulent activity or abuse.
• To comply with applicable legal obligations, including tax, audit and regulatory requirements.
• To exercise or defend legal claims.

5. How long we keep your data

• Contact enquiries and correspondence: retained for up to two (2) years from the date of last contact, unless a longer period is required by law or the enquiry progresses to a client engagement.
• Client engagement records: retained for a minimum of seven (7) years from the end of the engagement in accordance with UAE commercial record-keeping requirements.
• Server and access logs (technical data): retained for up to ninety (90) days, then deleted or anonymised.
• Data subject rights requests: records of requests and our responses are retained for three (3) years.

6. Cookies and similar technologies

This website uses only strictly necessary (essential) cookies required for the website to function. These cookies do not track you across other websites and do not require your consent under applicable law. They include session identifiers and security tokens.

We do not currently use analytics, performance, preference, or marketing cookies. If this changes, we will update this Policy and, where required, obtain your consent before setting any non-essential cookies.

You can control and delete cookies through your browser settings. Disabling essential cookies may prevent some parts of the website from functioning correctly. For guidance on managing cookies, visit www.allaboutcookies.org.

7. Sharing your data with third parties

We do not sell, rent or trade your personal data. We may share your data only in the following circumstances:

• Service providers and sub-processors: companies that provide infrastructure (web hosting, cloud services), email delivery, or IT security on our behalf. These providers are contractually required to process data only on our instructions and to maintain appropriate security measures.
• Professional advisors: lawyers, accountants or insurers where necessary to obtain professional advice or in the context of a dispute.
• Corporate transactions: in the event of a merger, acquisition, restructuring or sale of assets, personal data may be transferred to the relevant parties subject to equivalent confidentiality obligations.
• Legal requirements: regulatory bodies, law enforcement agencies or courts where we are required or permitted to do so by applicable law, or where necessary to protect the rights, property or safety of Dynovative, our clients or the public.

8. International data transfers

Dynovative is based in Dubai, UAE. Your data may be processed or stored by our service providers in other countries, including within the European Economic Area (EEA) or countries outside the EEA.

Where personal data of EU/EEA residents is transferred to a country that has not been granted an adequacy decision by the European Commission, we implement appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) approved under GDPR Article 46.

Where UAE PDPL applies to cross-border transfers, we ensure the receiving country or organisation provides an adequate level of protection as required by Article 22 of the UAE PDPL, or we apply appropriate contractual protections.

9. Security of your data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include encrypted transmission (TLS/HTTPS), access controls, and regular security reviews.

No method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect that your interaction with us has been compromised, please contact us immediately.

10. Your privacy rights

Subject to applicable law and certain conditions, you have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we hold your personal data and to receive a copy.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure (“right to be forgotten”): to request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to restriction of processing: to request that we limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format and to transmit it to another controller (where technically feasible and the processing is based on consent or contract).
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Rights related to automated decision-making: not to be subject to a decision based solely on automated processing that produces legal or significant effects on you.

Residents of the UAE have equivalent rights under the UAE PDPL, including rights of access, correction, erasure and objection, which may be exercised using the same contact details below.

To exercise any of the above rights, please contact us at privacy@dynovative.com or hello@dynovative.com. We will respond within thirty (30) days. We may need to verify your identity before fulfilling your request.

If you are located in the EU/EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority (for example, the ICO in the UK, or the relevant EU national authority). UAE residents may contact the UAE Data Office.

11. Children’s privacy

This website is directed at business professionals and is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

12. Changes to this Policy and how to contact us

We may update this Privacy Policy from time to time to reflect changes in law, our practices or our services. When we make material changes, we will update the “Last updated” date at the top of this page. Where required by law, we will notify affected individuals directly.

For any privacy-related enquiries, requests or complaints, please contact:

• Email: hello@dynovative.com
• Company: Dynovative Technologies L.L.C
• Address: Dubai, United Arab Emirates