Privacy Policy

Who we are

Blocks N Bytes Technologies is a technology services firm registered and operating in Dubai, United Arab Emirates. For the purposes of this policy we act as the data controller in respect of personal data collected through this website and through our commercial relationships.

Where we process personal data on behalf of a client as part of a service engagement, we act as a data processor and our obligations are governed by the relevant services agreement and data processing terms.

Personal data we collect

We collect only what is necessary for the purposes described in this policy:

• Enquiry data — name, company, work email, telephone number, area of interest and the content of your message, submitted through our contact forms or the BNB Bot advisor.
• Engagement data — contact details of client personnel, contractual correspondence and information necessary to deliver and invoice the services.
• Technical data — IP address, browser type, device type, referring page and pages viewed. This is collected through server logs and, where you have consented, analytics cookies.
• Preference data — your language selection and cookie choices, stored locally in your browser.

We do not knowingly collect sensitive personal data through this website, and we ask that you do not include such data in enquiry messages.

Why we process it, and on what basis

• To respond to your enquiry — on the basis of your consent and, where a commercial discussion is under way, in order to take steps at your request prior to entering into a contract.
• To deliver contracted services — on the basis of performance of a contract with you or your organisation.
• To operate and secure this website — on the basis of our legitimate interest in maintaining a secure, functioning service and preventing abuse.
• To measure and improve the website — on the basis of your consent, given through the cookie banner.
• To meet legal and regulatory obligations — including tax, accounting and record-keeping requirements under UAE law.

We do not sell personal data, and we do not use enquiry data for unrelated marketing without a separate, specific consent.

Disclosure to third parties

We disclose personal data only where it is necessary and only to the following categories of recipient:

• Service providers who support our operations — hosting, email delivery, and business software — bound by confidentiality and data protection terms.
• Professional advisers such as auditors and legal counsel, where required.
• Competent authorities, where disclosure is required by applicable law or lawful request.

Where personal data is transferred outside the United Arab Emirates, we do so only to jurisdictions offering an adequate level of protection, or under appropriate contractual safeguards consistent with UAE data protection law.

Retention

We retain enquiry data for twenty-four months from your last contact with us, unless a commercial relationship begins, in which case engagement records are retained for the duration of the relationship and for the period required by applicable commercial and tax law thereafter. Technical logs are retained for up to twelve months.

When data is no longer required, it is deleted or irreversibly anonymised.

Security

We apply technical and organisational measures proportionate to the risk, including encryption of data in transit, access control on a least-privilege basis, logging of administrative access, and periodic review of our own infrastructure against the standards we apply for clients.

No system is absolutely secure. Where a personal data breach occurs that is likely to prejudice your privacy or confidentiality, we will notify the UAE Data Office and affected individuals as required by law.

Your rights

Subject to the conditions and exemptions set out in UAE data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where there is no continuing lawful basis for us to hold it.
• Object to, or request restriction of, certain processing.
• Request a copy of data you provided to us in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us using the details below. We will respond within the period prescribed by law. You also have the right to lodge a complaint with the UAE Data Office.

Children

This website and our services are directed at businesses and are not intended for individuals under the age of eighteen. We do not knowingly collect personal data from children.

Changes to this policy

We review this policy periodically and will publish any updated version on this page with a revised effective date. Material changes affecting how we use your personal data will be communicated directly where we hold contact details for you.

Contact

Privacy enquiries and data subject requests should be addressed to [email protected], or by post to Blocks N Bytes Technologies, Business Bay, Dubai, United Arab Emirates.