Privacy Policy

Template — review with your legal adviser for compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL) and any other applicable rules. Last updated: [date].

1. Who we are

[Legal company name] ("AL-SAFFAT", "we") operates this website. Contact for privacy questions: [email].

2. Data we collect

• Quote and contact requests: name, phone, email, property type, community/area, address (optional), service details, preferred timing and any notes you provide.
• Client accounts: name, email, phone, company (optional) and a securely hashed password. We never store your password in readable form.
• Saved estimates: Cost Estimator selections you choose to save to your account.
• Technical data: IP address and browser information used for security, abuse prevention and rate limiting.
• Analytics (with consent): if you accept analytics cookies, Google Analytics collects usage data such as pages visited and device type.

3. AI service assistant

When you use the "Ask AL-SAFFAT" assistant:

• Your messages are sent from our server, through the Vercel AI Gateway, to a third-party AI model provider to generate a response. They are processed only to answer you.
• We do not store your chat history in our database, and the conversation is not saved between visits. Refreshing or closing the page clears it.
• We do not log the content of your messages. Your IP address is held temporarily in server memory to apply rate limits and prevent abuse.
• AI providers may process data under their own terms and may operate outside the UAE. [List the provider(s) configured and link to their privacy terms.]
• Please do not share sensitive personal data, payment details or passwords in the chat.

4. How we use your data

To respond to enquiries, prepare quotations, schedule and deliver services, manage your account, keep the website secure, comply with legal obligations and, with your consent, understand website usage.

5. Legal basis

We process data to take steps at your request before entering a contract, to perform our contract with you, for our legitimate interests in operating a secure website, to comply with legal obligations, and with your consent for analytics.

6. Sharing

We share data only with service providers who help us operate (for example hosting, email delivery, analytics and AI processing), with technicians or subcontractors who need it to deliver your service, or where required by law. We do not sell personal data.

7. Retention

Quote requests and client records are kept for [period] or as required by law. Contact messages are kept for [period]. You can ask us to delete your account at any time.

8. Cookies

We use essential cookies for sign-in sessions and to remember your theme and cookie choices. Analytics cookies are only set if you accept them via the cookie banner, and you can change your choice at any time by clearing site data or using the "Cookie preferences" link in the footer.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. Contact [email].

10. Security

We use encrypted connections (HTTPS), hashed passwords, access controls for staff and rate limiting on public forms and the AI assistant.

11. Changes

We may update this policy and will show the date of the latest version at the top.