Privacy Policy

Data Protection Statement of INSUS UAE

Version effective as of 01 June 2026

With this Data Protection Statement, we, INSUS UAE (hereinafter together referred to as INSUS, we or us), describe how we collect and further process personal data. This Data Protection Statement is not necessarily a comprehensive description of our data processing activities. It is possible that other data protection statements, General Terms and Conditions, Conditions of Participation, or similar documents may apply to specific circumstances.

The term "personal data" in this Data Protection Statement means any information that identifies, or could reasonably be used to identify, an individual.

If you provide us with personal data of other persons, such as family members or colleagues, please ensure that those individuals are aware of this Data Protection Statement and only provide us with their data if you are authorized to do so and the information is accurate.

This Privacy Policy is aligned with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable data protection laws and regulations. Where INSUS processes personal data of individuals located in other jurisdictions, including the European Economic Area (EEA), additional legal requirements may apply, including the General Data Protection Regulation (GDPR) where applicable.

1. Controller

The controller responsible for data processing under this Privacy Policy is:

INSUS UAE

Address: Dubai, UAE

Email: info@insus.ae

You may contact us using the above details regarding any questions, concerns, or requests relating to the processing of your personal data.

Where required by applicable law, INSUS may appoint a data protection officer or representative and will make the relevant contact details available through its website or upon request.

2. Collection and Processing of Personal Data

We primarily process personal data that we obtain from our clients, suppliers, business partners, and other individuals in connection with our business relationships. We also collect personal data through our websites, applications, and other digital platforms.

Where permitted by law, we may obtain personal data from publicly available sources, affiliated companies, regulatory authorities, professional advisers, service providers, business partners, and other third parties.

The personal data we process may include contact information, identification details, employment-related information, correspondence and communication records, payment and banking information, insurance-related information, information required for compliance with legal and regulatory obligations, publicly available information, marketing and preference data, and technical information relating to the use of our websites and services.

Technical information may include IP addresses, device identifiers, browser information, operating system information, cookies, website usage data, location information, and information relating to how users interact with our websites and digital platforms.

3. Purpose of Data Processing and Legal Grounds

We process personal data to establish, manage, and perform contractual relationships with our clients, suppliers, subcontractors, and business partners, including the provision of digital engineering solutions and related services.

We may also process personal data to operate, maintain, improve, and develop our services, websites, and applications; communicate with clients, suppliers, applicants, and other stakeholders; respond to inquiries and requests; conduct business development and customer relationship management activities; undertake marketing and promotional activities; perform market research and analytics; protect and enforce legal rights; prevent fraud and other unlawful activities; maintain security and risk management systems; comply with legal, regulatory, and corporate governance obligations; facilitate corporate transactions such as mergers, acquisitions, or restructurings; and protect our employees, visitors, premises, systems, and assets.

INSUS processes personal data on lawful grounds recognized under applicable law, including where processing is necessary for the performance of a contract, compliance with legal obligations, protection of vital interests, legitimate business interests that do not override the rights and freedoms of individuals, consent where required, or any other lawful basis permitted under applicable law.

Where processing is based on consent, you may withdraw your consent at any time, subject to legal or contractual limitations. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

4. Cookies, Tracking Technologies and Website Analytics

We use cookies and similar technologies on our websites and applications to improve functionality, security, performance, user experience, analytics, and marketing activities.

Cookies are small text files stored on your device when you access our website. Some cookies are deleted when your browsing session ends, while others remain on your device for a longer period to remember preferences and improve future visits.

Where required by applicable law, we will obtain your consent before placing non-essential cookies or similar tracking technologies on your device. You may manage or withdraw your consent through your browser settings or any cookie preference tools made available on our website.

We may use analytics services such as Google Analytics and similar tools provided by third parties to better understand how users interact with our websites and services. These services may collect information relating to your device, browser, IP address, usage patterns, pages visited, session duration, and referral sources. Such information is processed in accordance with the privacy policies of the relevant providers.

Our websites may also contain links, integrations, or plugins associated with social media platforms and other third-party services. Where you interact with such features, the relevant third parties may collect information about your activity in accordance with their own privacy policies.

5. Data Transfers and International Transfers

In the course of our business activities, we may disclose personal data to affiliated companies, service providers, cloud hosting providers, technology vendors, professional advisers, business partners, clients, regulatory authorities, courts, law enforcement agencies, and parties involved in corporate transactions.

Personal data may be transferred to and processed in countries outside the United Arab Emirates where such transfers are necessary for business operations, service delivery, technical support, hosting services, regulatory compliance, or other legitimate business purposes.

Where personal data is transferred internationally, INSUS will implement appropriate safeguards required under applicable law to ensure that personal data remains adequately protected. Such safeguards may include contractual protections, organizational and technical security measures, transfers to jurisdictions recognized as providing an adequate level of protection, consent where required, and other lawful transfer mechanisms recognized under the UAE PDPL.

6. Retention of Personal Data

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including the performance of contractual obligations, compliance with legal and regulatory requirements, protection of legitimate business interests, resolution of disputes, and enforcement of legal rights.

Personal data will not be retained longer than necessary for the purposes for which it was collected unless a longer retention period is required or permitted by applicable law.

Once personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable legal and regulatory requirements.

7. Data Security

INSUS implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other unlawful forms of processing.

Such measures may include access controls, encryption technologies, network security protections, monitoring systems, internal policies and procedures, staff training, and other safeguards appropriate to the nature of the personal data and associated risks.

INSUS regularly reviews and updates its security measures to address evolving technological, operational, and cybersecurity risks.

8. Obligation to Provide Personal Data

Where personal data is necessary for entering into or performing a contractual relationship, complying with legal obligations, or providing requested services, you may be required to provide such information.

If you choose not to provide personal data that is necessary for these purposes, INSUS may be unable to provide services, enter into agreements, or fulfill certain obligations.

9. Profiling and Automated Decision-Making

INSUS may use automated tools, analytics, and profiling techniques to better understand user preferences, improve services, support marketing activities, and enhance business operations.

Where profiling or automated decision-making produces legal effects or similarly significant effects on an individual, INSUS will provide any information, safeguards, and rights required under applicable law.

10. Your Rights

Subject to applicable law, including the UAE PDPL, you may have rights relating to your personal data, including the right to request access to personal data, request correction of inaccurate or incomplete information, request deletion of personal data in certain circumstances, request restriction of processing, object to certain processing activities, withdraw consent where processing is based on consent, request transfer of personal data where applicable, and request information regarding automated decision-making activities.

To exercise any of these rights, please contact us at info@insus.ae. We may request information necessary to verify your identity before processing your request.

You may also have the right to submit a complaint to the competent authority responsible for personal data protection in the United Arab Emirates or any other authority having jurisdiction over the relevant processing activity.

11. Amendments to this Privacy Policy

INSUS may amend this Privacy Policy from time to time without prior notice. The most current version published on our website will apply.

Where required by applicable law, we will notify users of material changes through our website, email communications, or other appropriate means.