Privacy Policy

1. Who we are

NetzMeister Technology Services LLC ("NetzMeister", "we", "us", "our") is a UAE mainland company based in Dubai, providing managed IT, co-managed IT, and cybersecurity services to nonprofits, NGOs, foundations, and humanitarian organisations. For the personal data described in this policy (enquiries, correspondence, our own business contacts), we act as the data controller. Where we process personal data inside systems we manage for a client (for example a client's Microsoft 365 tenant), the client remains the controller and we act as a processor under our engagement letter; that processing is governed by our agreement with the client, not this policy.

Contact: [email protected].

2. What personal data we collect

We collect personal data in the following ways:

• Enquiry forms: name, organisation, work email, phone (optional), staff count, area of interest, and the message you choose to share.
• Direct correspondence: email, calls, or meetings you initiate with us.
• Service delivery: if you become a client, the personal data necessary to deliver the contracted services (typically user accounts, device identifiers, IT support tickets).
• Website analytics: standard server logs (IP address, browser type, pages viewed, timestamps) for security and operational diagnostics.

3. Why we use your data (lawful basis)

• To respond to your enquiry, a step at your request prior to entering into a contract.
• To deliver services, performance of a contract.
• To run our business, legitimate interest in operations, security, billing, and record-keeping.
• To comply with UAE law, legal obligation (e.g. tax records).
• To send relevant updates, consent, which you can withdraw at any time.

4. Who we share data with

We do not sell personal data. We share it only with:

• Sub-processors we rely on to operate the business, including Microsoft (Microsoft 365, Azure), Hostinger (this website), and other reputable providers under written data-processing terms.
• Professional advisors (accountants, lawyers, auditors) under confidentiality.
• UAE authorities where required by law or valid legal process.

5. International data transfers

Some of our sub-processors (e.g. Microsoft) operate from data centres outside the UAE. Where personal data is transferred internationally, we rely on appropriate safeguards consistent with UAE Federal Decree-Law No. 45 of 2021 (PDPL).

For nonprofits handling data subject to UAE Federal Law No. 2 of 2019 (health data localisation), we design backup and storage architecture to support UAE data-residency for that regulated category of data where the law requires it.

6. How long we keep it

• Enquiry data: up to 24 months from last contact, unless you ask us to delete it sooner or a contract begins.
• Client data: retained according to its purpose and applicable legal requirements. Records subject to UAE corporate tax law must be kept for at least 7 years after the relevant tax period; other records may carry different statutory or contractual periods.
• Server logs: typically up to 12 months.

7. Your rights under UAE PDPL

Subject to the conditions set out in PDPL and its Executive Regulations, you have the right to:

• Request information about the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Object to processing or request restriction of processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the UAE Data Office once its complaint mechanism is operational.

To exercise any of these rights, email [email protected]. We may need to verify your identity, and we will respond within the timeframe required by applicable UAE law. There is normally no fee, though we may charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

8. Cookies

This website uses only strictly necessary cookies and standard server logs. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future, we will update this policy and request consent where required.

9. Security

We apply technical and organisational measures appropriate to the risks, including access controls, multi-factor authentication, encryption in transit, regular patching, and staff training. No system is perfectly secure, but we take our obligations seriously and apply the same practices we recommend to clients.

10. Contact us

For any privacy question, write to [email protected].