Legal
Privacy Policy
This policy explains what personal data we collect, why we collect it, and what rights you have over it.
Last updated:
Who we are
D-TECH HUB is a technology company headquartered in Dubai, United Arab Emirates, serving clients across the GCC and the United Kingdom. You can reach us at hello@d-techhub.com. Important: this policy is template copy and must be reviewed by qualified legal counsel before this site goes live. The placeholders in it — our trade licence number, registered office address and the named data controller — must be completed before publication. Where we handle the personal data of individuals in the UAE we act as controller under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data; where we handle the personal data of individuals in the United Kingdom we act as controller under UK GDPR and the Data Protection Act 2018. If the contracting entity sits in DIFC or ADGM, that free zone's own data protection law applies instead of the federal law — confirm which applies to your entity before publishing.
What data we collect
We collect very little. If you email us, we hold your email address and whatever you write to us. If you submit the contact form or the newsletter form on this site, we currently receive nothing at all: those forms are not yet connected to a backend, so the details you type are not transmitted or stored anywhere. This section must be updated the moment those forms are wired up. The site sets one functional cookie, NEXT_LOCALE, which stores your language choice and contains no personal data. We do not run analytics or advertising trackers on this site today.
Why we collect it (lawful basis)
When you contact us about a project, we process your details on the basis of legitimate interests: replying to an enquiry you chose to send us. If you become a client, we process your details to perform our contract with you. If you subscribe to the newsletter once that is live, we will process your email address on the basis of your consent, and you will be able to withdraw it at any time. We keep the NEXT_LOCALE cookie because it is strictly necessary to deliver the site in the language you selected.
Cookies and analytics
This site sets a single first-party cookie, NEXT_LOCALE, to remember your language. It expires after one year, uses SameSite=Lax, holds no personal data, and is never used to track you across sites. No analytics, advertising, or third-party cookies are set. Because we set no non-essential cookies, we do not show a consent banner. If we add analytics later, we will update this policy and our cookie policy first, and we will ask for consent before any non-essential cookie is set. Full detail is in our cookie policy.
How long we keep it
Enquiry emails are kept for two years from our last exchange, so we can pick up a conversation you started. Records tied to a signed engagement are kept for seven years after the project ends, which covers UAE corporate tax and VAT record-keeping obligations as well as UK tax and accounting requirements. Newsletter subscriptions are kept until you unsubscribe. The NEXT_LOCALE cookie sits on your device for a year unless you clear it sooner. When a retention period ends, we delete the data or anonymise it.
Who we share it with
We do not sell your personal data, and we never will. We share it only with the service providers we need to run the business — email hosting, website hosting, accounting software, and project management tools — each acting as a processor under a written contract. Some of those providers operate outside the UAE; where they do, transfers are made either to a jurisdiction recognised as providing an adequate level of protection, or under contractual safeguards permitted by the applicable data protection law. Transfers involving UK personal data are covered by UK adequacy regulations or the International Data Transfer Addendum. Where an engagement requires data residency, we say so in the contract and keep that data in-region. We will also disclose data where the law requires it. The specific providers we use must be listed here by name before this policy goes live.
Your rights
Under the UAE Personal Data Protection Law you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, ask for it in a portable format, and object to decisions made solely by automated processing. Individuals in the United Kingdom have comparable rights under UK GDPR. Where we rely on consent, you can withdraw it at any time. Email hello@d-techhub.com and we will respond within one month. If you are unhappy with our response, individuals in the UAE may complain to the UAE Data Office and individuals in the UK may complain to the Information Commissioner's Office at ico.org.uk. If you are a California resident, the CCPA gives you comparable rights to know what we collect, to request deletion, and to opt out of any sale of personal information — we do not sell personal information, and you will never be treated differently for exercising these rights.
How to contact us
For anything about this policy or your data, email hello@d-techhub.com and put "Privacy" in the subject line. We aim to reply within five working days, and within one month for formal rights requests. Our registered office address and company registration number will be listed here once the placeholders are completed.