Privacy Policy
Last updated 28 September 2026
1. Who we are
This policy explains how Nirmata Information Technology Consultancy LLC SPC, a limited liability company (sole proprietorship) licensed by the Abu Dhabi Department of Economic Development under licence no. CN-6675642, Mussafah, Abu Dhabi, United Arab Emirates ("Nirmata", "we", "us") handles personal data when you visit our website, contact us, or do business with us. It is written to meet Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"). For privacy questions, email info@nirmataitc.com.
2. Data we collect
Contact details you give us: name, business email, phone or WhatsApp number, company, role and region.
The content of your enquiries and our correspondence, meeting notes, proposals and contracts.
Billing details for clients: company details, tax registration number, invoices and payment records.
Technical data: our website does not use analytics, advertising or tracking cookies. When the page loads, font providers (Google Fonts and Fontshare) and our hosting provider receive your IP address and browser details to deliver the page.
3. How and why we use it
To reply to your enquiry and prepare proposals (to take steps at your request before a contract).
To deliver, support and invoice our services (to perform our contract).
To keep accounting and tax records and meet other legal duties (legal obligation).
To manage and improve our business, keep our systems secure, and send relevant updates to business contacts, which you can stop at any time (our legitimate interests, or your consent where the law requires it).
We do not sell personal data, and we do not make decisions with legal effect about you by automated means alone.
4. Who we share it with
Service providers that help us operate: email, hosting and cloud, accounting, and communication platforms. They act on our instructions under confidentiality and security obligations.
WhatsApp: if you message us on WhatsApp, Meta processes the messages under its own privacy policy.
Professional advisers, banks, and government or regulatory authorities where required by law or to protect our legal rights.
5. International transfers
Some of our service providers store data outside the UAE. We transfer data only where the PDPL permits it, for example to countries with adequate protection or under contractual safeguards.
6. How long we keep it
Enquiries that do not become business: up to 2 years after last contact. Client and financial records: for the period required by UAE tax and commercial law (generally at least 5 to 7 years). Then we delete or anonymise them.
7. Security
We use access controls, encryption where appropriate, secure credential storage and backups. No system is completely secure; if a breach affects your data, we will notify you and the relevant authority where the law requires.
8. Your rights
Subject to the PDPL, you can ask to access, correct, delete, restrict or object to processing of your personal data, obtain it in a portable format, and withdraw consent at any time. Email info@nirmataitc.com. We may need to verify your identity. You may also complain to the UAE Data Office.
9. Client data
When we process personal data inside systems we build or host for clients, we do so as a processor on the client's instructions. The client's own privacy notice applies to that data.
10. Children and changes
Our services are for businesses and are not directed at anyone under 18. We may update this policy; the date above shows the latest version.