1. Introduction

Welcome to the EM99 Technologies privacy policy (‘Policy’).

EM99 Technologies (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Policy informs you how we look after your personal data when you visit our website, use or commission our custom software development, e-commerce solutions, and digital marketing services. It also outlines your privacy rights and how regional data protection laws safeguard you.

We will never sell your personal data to a third party under any circumstances.

2. Regional Compliance Frameworks

To support our international business operations and cross-border partnerships, this policy has been drafted to satisfy the strict statutory compliance requirements of our core target markets:

• United Kingdom: UK GDPR and Data Protection Act 2018, under the oversight of the Information Commissioner’s Office (ICO).
• United Arab Emirates (UAE): Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).
• Kingdom of Saudi Arabia (KSA): Personal Data Protection Law (PDPL), regulated by the Saudi Data and AI Authority (SDAIA).

3. Important Information & Who We Are

• Scope: This Policy applies to all website visitors, prospective clients requesting quotes or submitting inquiries via our /contacts/ page, and active business entities contracting our agency for technical solutions.
• Data Controller: EM99 Technologies is the sole data controller responsible for this website and the processing of your personal data.
• Contact & Compliance Desk: For any privacy queries, data access requests, or regulatory questions, you can contact us directly via email at info@em99technologies.com or write to us at Business Avenue, Office EM99.
• Third-Party Links: Our website may include links to third-party portals, software plug-ins, or external platforms. We do not control these external sites and strongly recommend reading their specific privacy policies when you leave our website.

4. The Data We Collect About You

Personal data means any information from which an individual or business entity can be directly or indirectly identified. We collect and store the following categories of data:

• Identity & Contact Data: Includes first name, last name, business designation, corporate email, phone number, and physical billing or delivery addresses.
• Financial & Transaction Data: Includes corporate bank account details, transaction histories, invoices, and comprehensive records of software, websites, or marketing retainers commissioned from us.
• Technical & Usage Data: Includes internet protocol (IP) address, browser type, operating system, geographic location tracking, and navigation paths showing how you interact with our portfolio. This is tracked via advanced analytics tools, specifically Google Analytics 4 (GA4) and Microsoft Clarity.
• Marketing Data: Includes your explicit preferences regarding receiving our technical SEO/AEO insights, corporate newsletters, and business communications.

We do not knowingly collect any Special Categories of Personal Data (such as race, religion, health status, or political beliefs) or criminal conviction records.

5. How We Collect Your Data

• Direct Interaction: You explicitly provide your Identity, Contact, and Financial data when you fill out data fields on our contact page, correspond with our project managers via email/phone, or sign a service contract with us.
• Automated Tracking Technologies: As you navigate our website, our servers and integrated tools automatically collect Technical and Usage metadata using standard tracking cookies and server error logs.
• Third-Party Analytics: We receive technical tracking data from verified performance networks, specifically analytics platforms like GA4 and Microsoft Clarity.

6. How We Use Your Data (Lawful Basis)

We process your personal variables strictly under defined legal grounds as mandated by global privacy regulations:

• Contractual Necessity: We process your Identity, Contact, and Financial data to execute agreements, onboard your business, deliver custom source code/digital assets, and handle cross-border billing.
• Legitimate Business Interests: We utilize Technical and Usage data via GA4 and Microsoft Clarity to analyze user behavior, refine our website layout, and optimize search engine and Answer Engine Optimization (AEO) visibility. We also rely on this basis to perform platform testing, maintain cybersecurity protocols, and prevent fraudulent activity.
• B2B Marketing Expansion: We use Identity and Contact markers to distribute targeted industry insights and B2B service updates to corporate enterprises across the UK, UAE, and KSA. You hold an absolute right to opt out or unsubscribe from these updates at any moment.
• Legal Compliance: We retain specific financial footprints and transactional data where we are legally mandated to do so by international corporate tax laws or financial accounting standards.

7. Cross-Border Transfers & Security Architecture

Because EM99 Technologies operates internationally—collaborating between technical development teams and corporate clients based across the UK, UAE, and KSA—your data may be transferred across international boundaries.

• Data Safeguards: Data originating in the UK is strictly protected using approved Standard Contractual Clauses (SCCs). Data originating in the UAE and KSA is processed in complete alignment with regional PDPL statutory frameworks using secure data agreements and AES-256 encryption.
• Security Measures: We implement robust technical, physical, and managerial safety protocols to guard your records against accidental loss, alteration, or unauthorized exposure. Internal data access is restricted to authorized engineers and project managers who are bound by strict confidentiality mandates.

8. Data Retention

We only preserve your personal data for as long as necessary to satisfy legal liabilities, corporate tax rules, international accounting procedures, or active technical support agreements. By standard regulatory law, foundational client transaction files, billing records, and contract parameters are safely archived for six (6) years after a business contract is officially terminated.

9. Your Regional Legal Rights

Depending on your geographical point of operation (UK, UAE, or KSA), you possess non-negotiable statutory rights under regional data protection laws, including the right to:

• Access a comprehensive, structured copy of all personal records we maintain for your business.
• Rectify any incomplete, outdated, or inaccurate information.
• Erase your profiles (“Right to be Forgotten”) from our databases if no legal retention track or contract requirement exists.
• Object to or Restrict the processing of your data for account-based marketing, profiling, or behavioral analytics.
• Port your structured data to another IT infrastructure or service provider in a machine-readable format.
• Withdraw Consent for direct marketing dispatches at any time.

To enforce any of these rights, please submit a formal directive to our compliance group at info@em99technologies.com. We do not charge an administrative fee for legitimate requests and aim to issue a full response within one calendar month.