PDPL

Privacy & Data Protection Policy | AHDC Global LLC - FZ

Privacy & Data Protection Policy

This Privacy & Data Protection Policy explains how AHCD Global LLC - FZ (“we”, “us”, or “our”) collects, uses, discloses, and protects personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable Executive Regulations.

Effective date: 07 November 2025
Version: v1.0

1. Data Controller

AHCD Global LLC - FZ
Trade / Licence No.: [2539792.01]
Registered in: Dubai, United Arab Emirates
Address: [Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.]
Email: [info@ahcdglobal.com]

This Policy applies to personal data processed by AHCD Global LLC - FZ in its capacity as a Data Controller under the UAE PDPL.

2. Scope

This Policy covers personal data collected via our websites, corporate sales and B2B operations, supplier management, customer service channels, partner applications, and any online forms or email communications related to our activities in the UAE and the GCC.

3. Categories of Personal Data

  • Identification & Contact: name, company, title, business email, phone.
  • Business & Contractual: RFQs, quotations, orders, invoices, delivery and returns records.
  • Technical: IP address, device and browser data, log files, cookies/analytics.
  • Communications: messages, support requests, and correspondence history.
  • If any special category data is processed, we will apply explicit consent (where required) and enhanced safeguards.

4. Legal Bases for Processing

  • Consent (where required)
  • Performance of a contract and pre-contractual steps
  • Compliance with legal obligations
  • Legitimate interests, provided these do not override data subject rights

5. Purposes of Processing

  • Managing quotations, procurement, fulfilment, and after-sales support
  • Supplier and partner onboarding and relationship management
  • Billing, accounting, auditing, and compliance
  • Securing and improving websites, systems, and logistics operations
  • Handling queries and providing customer service
  • Marketing communications with prior consent and opt-out options

6. Disclosures & Processors

We may share personal data with vetted service providers (IT/cloud hosting, email and security tools, logistics and customs brokers, payment and accounting platforms, professional advisors) strictly under data protection and confidentiality obligations, and only for the purposes described in this Policy.

7. International Data Transfers

Where personal data is transferred outside the UAE, we implement safeguards required by the PDPL (e.g., adequacy, contractual clauses, and technical/organizational measures) to ensure a level of protection essentially equivalent to PDPL standards.

8. Your Rights

  • Access your personal data and obtain information
  • Request rectification or erasure
  • Request restriction of processing or object to processing
  • Data portability (where applicable)
  • Withdraw consent at any time (for consent-based processing)

9. Exercising Your Rights

You can submit a request by emailing our Data Protection Officer (DPO) at [handedemir@ahcdglobal.com]. We will verify your identity and respond in accordance with PDPL timelines and requirements.

If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office in accordance with PDPL procedures.

10. Retention

We keep personal data only as long as necessary for the purposes outlined above and to meet legal, regulatory, tax, or accounting requirements. After expiry, data is securely deleted or anonymised.

11. Security

  • Encryption in transit and at rest (where applicable)
  • Access controls, authentication, and logging
  • Contractual and confidentiality duties with processors
  • Backups, continuity, and vulnerability management
  • Incident handling and breach notification workflows

12. Cookies

We use cookies and similar technologies to enhance user experience and analyse performance. You may adjust browser settings to refuse cookies; however, some features may not function properly.

See our Cookie Policy for details and preferences.

13. Children

Our services are not directed to individuals under 18. We do not knowingly collect or process personal data of minors.

14. Updates to this Policy

We may update this Policy from time to time. Material changes will be posted on this page and reflected by the “Effective date”.

15. Contact & Data Protection Officer (DPO)

DPO: [Full Name]
Email: [handedemir@ahdcglobal.com]
Address: [Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.]

© 2025 AHCD Global LLC - FZ. All rights reserved.

Note: This template provides general guidance and does not constitute legal advice. Please consult your legal counsel for company-specific compliance.