Privacy Policy

Data Controller

The Data Controller responsible for personal data collected through this website is:

For any questions about this policy or about how we process your personal data, contact us using the details above.

What Personal Data We Collect

We collect personal data that you provide to us directly, and limited technical data collected automatically when you visit our website.

Legal Basis for Processing

Under Article 4 of the UAE PDPL, we process your personal data on one or more of the following legal bases:

• Your consent, for example, when you submit an enquiry via WhatsApp, call us, or email us, you consent to us using that data to respond to your enquiry.
• Performance of a contract, where we have a project agreement with you, processing necessary to deliver the project.
• Legal obligation, compliance with UAE tax, accounting, anti-money laundering and trade licensing requirements.
• Legitimate interest, improving our services, business analytics, and direct response to commercial enquiries you initiate.

We do not process personal data without one of these legal bases.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Responding to your enquiry and providing quotes, specifications or surveys.
• Delivering commercial flooring projects where a contract is in place.
• Communicating with you about your project, including programme updates, install scheduling, snagging and handover.
• Sending you commercial communications about our services where you have consented to receive them.
• Improving our website, services and customer experience.
• Complying with UAE legal obligations (tax, anti-money laundering, trade licensing).
• Protecting our legal rights and the security of our website and business operations.

Who We Share Your Data With

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary for the purposes set out in this policy.

• Within our network of specialist UAE flooring sites urbanvinylflooring.ae, urbancarpetflooring.ae and garageflooring.ae we may share enquiry data....
• Third-party service providers, hosting (LiteSpeed and Cloudflare), analytics (Google Analytics), email and communication tools, project management software, and accounting providers.
• Suppliers and installation partners, where necessary to deliver your project (with appropriate data protection commitments in place).
• Regulators and authorities, where required by UAE law (UAE Data Office, tax authorities, courts).

We require all third-party processors to comply with UAE PDPL standards and to use your data only for the purposes we authorise.

International Data Transfers

Some of our third-party processors operate servers outside the UAE. For example, Google Analytics processes data in jurisdictions including the United States and the European Union. Where personal data is transferred outside the UAE, we ensure that the transfer is to a jurisdiction recognised as providing adequate protection under the UAE PDPL, or that appropriate safeguards (such as Standard Contractual Clauses or equivalent) are in place. Free zones in the UAE (such as DIFC and ADGM) operate under their own data protection laws and we apply equivalent protections.

Your Rights as a Data Subject

Under the UAE PDPL, you have the following rights regarding your personal data. To exercise any of these rights, contact us using the details in Section 1. We will respond within the timeframes required by UAE law.

• Right of access, request a copy of the personal data we hold about you.
• Right to rectification, request correction of inaccurate or incomplete personal data.
• Right to erasure, request deletion of your personal data, where it is no longer needed or where you withdraw consent.
• Right to restrict processing, request that we temporarily stop processing your data while a request is being resolved.
• Right to data portability, request your data in a machine-readable format.
• Right to object, object to processing of your data for direct marketing or where based on legitimate interest.
• Right to withdraw consent, withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint, file a complaint with the UAE Data Office if you believe we have not handled your data correctly.

Data Retention and Security

Retention. We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by UAE law. Enquiry data is typically retained for 3 years from last contact. Contracted project data is typically retained for 7 years after project completion, in line with UAE tax and commercial record-keeping requirements. We delete or anonymise data after retention periods expire.

Security. We apply technical and organisational measures to protect your personal data, including encrypted website connections (HTTPS), access controls, secure hosting, regular backups, and staff confidentiality obligations. No method of transmission over the internet is 100% secure; while we take reasonable steps to protect your data, we cannot guarantee absolute security.

Changes to This Policy and Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or UAE law. Where we make material changes, we will notify you by email or via a notice on this website at least 30 days before the changes take effect. We will not change the policy in a way that materially reduces your rights without your express consent.

For any questions about this policy or to exercise your rights, contact us using the details in Section 1 above. If you are not satisfied with our response, you may file a complaint with the UAE Data Office.