What Data We Collect
Contact information, service details, uploaded documentation, and necessary technical analytics required for secure form submission.
Your Privacy is the Core of Our Trust Together
This policy outlines transparently how ACTA collects, handles, protects, and stores personal data submitted through our digital platforms and service forms.
How We Use Data
To evaluate your request, communicate with you, verify legal requirements, complete transactions, and fulfill regulatory compliance.
Your Rights
You have the right to request access to, correction of, or deletion of your personal data subject to statutory records retention laws.
Introduction
Scope of this policy and legal framework
This policy explains how ACTA handles personal data when you visit the website, use the Contact Us form, submit a service request, upload documents, or communicate through channels linked to the website.
This policy applies to data processed by ACTA where ACTA determines the purpose or means of processing through the website. External websites and platforms you choose to visit are governed by the privacy policies of their respective operators.
We take into account the provisions of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data to the extent applicable. Where a specific processing activity is subject to an independent regime in the Dubai International Financial Centre (DIFC) or Abu Dhabi Global Market (ADGM), the requirements of that regime are considered within its applicable scope.
Data
Data we may collect through the website
The type of data we collect depends on how you use the website and the service you request. It may include the following categories:
Contact information
Your name, telephone number, email address, message subject, and the communication channel you choose.
Service request information
The type of service, relevant emirate, description of the transaction or enquiry, and any information you enter in free-text fields.
Uploaded documents
Files you choose to upload, such as PDFs, images, or Word documents. Depending on your transaction, these files may contain identity, legal, or financial information.
Technical and operational data
IP address, country where available from the network provider, time zone, browser language, page URL, submission time, and, for some requests, the referring page.
Please do not send data or documents that are unrelated to your request. If a document contains information about other people, make sure you have a lawful basis to share it for the relevant transaction.
Use
Why do we process your data?
- To receive your enquiry or service request and verify the information required to begin.
- To contact you and identify the appropriate requirements, documents, and procedural steps.
- To review documents and follow up on the transaction or service you requested.
- To maintain an operational record of requests and correspondence for follow-up and client service purposes.
- To protect the website and its forms, prevent misuse, and verify the integrity of submissions.
- To comply with legal or regulatory obligations, or binding requests from a competent authority, where applicable.
Depending on the processing activity, the legal basis may be taking steps at your request before entering into a contract, performing the service, complying with a legal obligation, pursuing a legitimate interest related to the security and operation of the service, or obtaining your consent where consent is required. We do not treat mere use of the website as blanket consent to every type of processing.
Protection
Document confidentiality and data security
We treat information and documents submitted through website forms as information that requires protection appropriate to its nature and sensitivity. We apply technical and organisational controls designed to reduce unauthorised access and unlawful use.
01
Restricted access: Service-request attachments are stored in a dedicated area that is not intended for public display, and downloads from the administration area are restricted to authorised users.
02
Data minimisation: We request only what is needed to understand and follow up on your request, and we encourage you not to upload unnecessary documents.
03
Operational safeguards: Website forms use validation mechanisms, WordPress permissions, and file and field checks before information is saved.
No electronic transmission or storage method can guarantee absolute security. We therefore review safeguards according to the available risks and the nature of the data and service.
Sharing
When may data be shared?
We share data only to the extent connected with the purpose of the service, operation of the website, or legal compliance. Depending on the circumstances, recipients may include:
- Authorised ACTA employees, consultants, or representatives who need the information to follow up on your request.
- Hosting, email, technology, and support providers that supply services necessary to operate the website or send communications.
- Competent government, judicial, or regulatory authorities where disclosure is necessary to complete the transaction you requested or comply with an applicable legal obligation.
- Other professional parties where required by the service, to the extent necessary and subject to appropriate confidentiality and professional considerations.
We do not use data submitted through the website for sale or rental to third parties for advertising purposes.
Third parties
External links, cookies, and international data transfers
The website includes links to or resources from external services such as WhatsApp وGoogle Maps and web-font services. Using these services or loading their resources may result in some technical data being processed by their providers under their own policies.
The website may use cookies or similar technologies that are necessary for WordPress operation, security, remembering certain settings, or providing technical functionality. If non-essential analytics or marketing tools are enabled in the future, appropriate notice and consent choices should be provided where required.
Website hosting, email, or external services may rely on providers that process data in other countries. Where an international transfer takes place, applicable legal requirements and safeguards are considered according to the relevant regulatory jurisdiction.
Control
Retention periods and your rights
We retain data for as long as necessary to handle your request, follow up on the service, protect records, and meet legal, accounting, or dispute-related obligations, depending on the nature of the transaction. Retention periods may vary from one case to another.
When a service-request record is permanently deleted from the website system, its related attachments are deleted from the website storage. Some information may need to be retained for longer where required by law or necessary to establish a transaction or right.
Access and informationRequest information about the personal data we process about you and obtain available information concerning that processing.
CorrectionRequest correction or completion of inaccurate or outdated information.
Deletion or restrictionRequest deletion or restriction of processing where the right is available, subject to applicable exceptions and legal obligations.
Withdrawal of consent and objectionWhere processing is based on consent, or where the law permits an objection, you may exercise the relevant right subject to its applicable conditions.
We may ask for information to verify your identity before acting on a data-related request, in order to protect your information from disclosure to an unauthorised person.
Contact
Privacy requests and updates to this policy
If you have a question about this policy or wish to exercise a right relating to your data, you may contact us through the official email address below or through the Contact Us page. We will review the request according to the nature of the data and the applicable legal rules.
Contact channels
Contact Us page
We may update this policy when website functions, services, or legal requirements change. The date of the latest update appears at the top of the page, and we recommend reviewing the policy when submitting a new request or documents of a sensitive nature.