Dritrez Solutions LLC ("Dritrez," "we," "our," or "us") is committed to protecting the privacy and security of the personal information you share with us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you access our website at dritrez.com and interact with our services.
This policy is governed by the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and applicable international data protection standards. By using our website and services, you consent to the collection and use of information described in this policy.
1. Information We Collect
We may collect the following categories of personal information:
- Contact Information: Name, corporate entity designation, email address, and telephone number provided through our contact forms or direct communications.
- Technical Data: IP address, browser type, operating system, referring URLs, and pages viewed — collected automatically via server logs and analytics instruments.
- Communication Content: The substance of messages, service enquiries, and operational briefings you submit through our secure contact mechanism.
- Security Verification Data: Cloudflare Turnstile challenge responses used to verify that form submissions originate from human users rather than automated bots.
We do not collect or store payment card details. All financial transactions are conducted through regulated third-party payment processors.
2. How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your service enquiries and communications within our standard 24-hour business response window.
- To deliver contracted enterprise security services, including audit reports, vulnerability assessments, and technical deliverables.
- To improve the functionality, security, and content of our website and digital properties.
- To comply with applicable legal obligations, regulatory requirements, and lawful government requests.
- To maintain the security of our systems and detect, investigate, and prevent fraudulent or malicious activity.
We do not sell, rent, or commercially trade your personal information to third parties under any circumstances.
3. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil a service agreement entered into with you or your organisation.
- Legitimate Interest: Processing necessary for our legitimate business interest in maintaining secure operations, improving our services, and communicating about relevant offerings — provided this interest is not overridden by your rights.
- Legal Obligation: Processing required for compliance with applicable UAE laws and regulations.
- Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications, which you may withdraw at any time.
4. Data Sharing and Third Parties
We may share your personal information with the following categories of trusted third parties:
- Formspree Inc.: Our contact form submission processor. Submissions are transmitted to Formspree's secure servers for delivery to our operations team. Formspree's privacy policy applies to data in transit through their systems.
- Cloudflare Inc.: Our security and content delivery provider. Cloudflare processes connection metadata to protect our infrastructure from malicious traffic. Cloudflare's privacy policy governs this processing.
- Legal Authorities: Where required by law, court order, or regulatory directive from competent UAE or international authorities.
- Professional Advisors: Lawyers, auditors, and compliance specialists bound by professional confidentiality obligations.
5. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact enquiry data is retained for a maximum of 36 months from the date of submission unless an active service engagement extends this period. Technical log data is retained for 12 months for security investigation purposes.
6. Data Security
We implement enterprise-grade technical and organisational security measures commensurate with our status as a cybersecurity organisation. These include TLS 1.3 encryption for all data in transit, access controls restricted to authorised personnel, multi-factor authentication for all internal systems, and regular security assessments of our own infrastructure.
No transmission over the internet or method of electronic storage is 100% secure. While we employ best-in-class security controls, we cannot guarantee the absolute security of information transmitted to or stored on our systems.
7. Your Rights
Subject to applicable UAE data protection law, you have the following rights:
- Right of Access: To obtain confirmation of whether we process your personal data and, if so, to receive a copy.
- Right of Rectification: To request correction of inaccurate or incomplete personal data.
- Right of Erasure: To request deletion of your personal data where retention is no longer legally justified.
- Right to Object: To object to processing based on legitimate interest where your rights override our interests.
- Right of Portability: To receive your personal data in a structured, machine-readable format where processing is automated and consent-based.
To exercise any of these rights, submit a written request to info@dritrez.com. We will respond within 30 calendar days.
8. Cookies and Tracking
Our website does not deploy advertising trackers, cross-site tracking pixels, or persistent behavioural profiling cookies. We use strictly functional session identifiers essential to website operation. Analytics, where implemented, are configured for data minimisation and do not transmit personally identifiable information to third-party advertising networks.
9. Changes to This Policy
We reserve the right to modify this Privacy Policy to reflect changes in applicable law, our data processing practices, or our service offerings. Material changes will be communicated via a prominent notice on our website. Continued use of our website following notice of changes constitutes your acceptance of the revised policy.
10. Contact
For privacy-related enquiries, data subject requests, or to raise a concern about how your personal data is handled, contact our Data Protection function at:
Dritrez Solutions LLC
Dubai, United Arab Emirates
Email: info@dritrez.com
Telephone: +971-56-123-0313