Privacy Policy
Last Updated: 10 April 2025 · Sahara Cortex · Dubai, UAE
Sahara Cortex ("we", "us", "our") is committed to handling personal data responsibly. This policy explains what data we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to data collected through our website and through our client engagements.
If you have questions about this policy, contact us at [email protected].
1. Data Controller
The data controller for personal data collected through this website is:
Sahara Cortex
Dubai Silicon Oasis, Dunes Building, Block 4, Office 412
Dubai, United Arab Emirates
[email protected]
2. What Personal Data We Collect
When you use our contact form, we collect:
- Full name (required)
- Email address (required)
- Phone number (optional)
- Message content (optional)
When you visit our website, we may collect technical data through cookies and analytics tools, including IP address, browser type, pages visited, and time on site. See Section 6 and our Cookie Policy for details.
During client engagements, we may handle operational data (sensor logs, document samples) you provide for the specific purpose of the project. This is governed by the scope agreement for that engagement.
3. Legal Basis for Processing
We process personal data on the following legal grounds:
- Consent: For optional cookies and marketing communications. You may withdraw consent at any time.
- Legitimate interest: For responding to enquiries submitted through our contact form and for website analytics.
- Contract: For processing data necessary to deliver the services you have engaged us for.
- Legal obligation: Where we are required to retain records under UAE law.
4. How We Use Your Data
Contact form enquiries
Name, email, and phone are used to respond to your enquiry and to schedule any follow-on conversation or project. We do not use this data for marketing without your explicit consent.
Project data
Operational data provided for a pilot or document tool project is used only for that project. It is not shared with third parties and is not retained after project completion without a written agreement.
Website analytics
Aggregated, anonymised data about website usage may be used to improve the site. This data does not identify individual visitors.
5. Data Retention
- Contact form data: Retained for 12 months from the date of submission, or until you request deletion.
- Client project data: Retained only for the duration of the engagement. Deleted or returned to the client within 30 days of project completion, unless a longer retention period is agreed in writing.
- Website analytics data: Retained for up to 26 months in aggregated form.
- Financial records: Retained for 5 years as required by UAE commercial law.
6. Cookies
We use essential cookies for site functionality, and optional cookies for analytics and preferences. You can manage your cookie preferences through the cookie banner on our homepage or via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.
7. Data Sharing
We do not sell personal data. We may share data in the following limited circumstances:
- With service providers who assist in operating our website (hosting, analytics), under data processing agreements
- With legal or regulatory authorities where required by UAE law
- With no other third parties without your explicit consent
8. Data Protection Measures
We take reasonable technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These include:
- Encrypted data transmission (TLS) for web communications
- Access controls limiting data to staff with a legitimate need
- Regular review of data handling practices
- Incident response procedures — we will notify affected individuals and relevant authorities of a data breach within 72 hours where required
9. Your Rights
You have the following rights in relation to personal data we hold about you:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data where there is no legitimate reason for us to continue processing it
- Portability: Request transfer of your data to another service provider in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Withdrawal of consent: Withdraw consent at any time for processing based on consent
To exercise any of these rights, email [email protected]. We will respond within 30 days. UAE residents may also contact the UAE Data Office if they believe their rights have not been respected.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policies of any external sites you visit.
11. Children's Privacy
Our services are directed at businesses and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data through our site, we will delete it promptly.
12. International Data Transfers
Our primary operations are in the UAE. If data is processed or stored outside the UAE, we ensure appropriate safeguards are in place consistent with UAE data protection requirements.
13. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via a notice on the homepage or by email to clients. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our website after changes constitutes acceptance of the updated policy.
14. Contact
For any questions or requests relating to this Privacy Policy:
Email: [email protected]
Address: Dubai Silicon Oasis, Dunes Building, Block 4, Office 412, Dubai, UAE
Phone: +971 4 728 5491