1. Information We May Collect
Depending on how you interact with TOSS, we may collect information including:
- your name;
- company or organisation name;
- job role or business information;
- email address;
- telephone or WhatsApp number;
- website URL;
- information you submit through our contact or project enquiry forms;
- information contained in emails or other communications with us;
- service requirements, project information and business requirements you voluntarily provide;
- technical information such as browser type, device information, approximate location derived from IP address, access logs and security data;
- cookie or similar technology information where such technologies are used;
- records required to manage a business relationship, proposal, project, support request or legal obligation.
- Please do not send confidential, sensitive or special-category information through the website unless it is genuinely required and an appropriate method of transmission has been agreed with TOSS.
2. How We Collect Information
Information may be collected:
- directly from you when you complete a form;
- when you contact us by email, telephone, WhatsApp or another agreed channel;
- during project discussions or a business relationship;
- automatically through normal website/server operation;
- from service providers used to operate our website or business systems;
- from publicly available business sources where lawful and relevant to a legitimate business enquiry.
3. Why We Use Personal Information
TOSS may use personal information to:
- respond to enquiries;
- understand your requirements;
- prepare proposals or discuss potential work;
- provide agreed services;
- communicate about projects or support;
- maintain client and business records;
- improve our website, systems and services;
- protect our website, infrastructure and users against misuse or security threats;
- maintain operational and security logs;
- comply with legal, regulatory, accounting or contractual obligations;
- establish, exercise or defend legal rights;
- send business communications where permitted by applicable law.
- We do not sell personal information to advertisers or data brokers.
4. Lawful and Fair Processing
TOSS aims to process personal information lawfully, fairly and transparently. Where consent is required by applicable law, we will rely on consent.
Depending on the circumstances, information may also be processed where necessary to respond to your request, enter into or perform an agreement, comply with legal requirements, protect legitimate interests or exercise other grounds permitted by applicable law.
5. UAE Data Protection
Where applicable, TOSS handles personal information in accordance with the data-protection requirements applicable in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data.
Where another mandatory data-protection regime applies to a particular individual or processing activity, TOSS will seek to comply with those requirements as applicable.
7. International Data Transfers
Some technology providers used by TOSS may process or store information outside the United Arab Emirates.
Where personal data is transferred internationally, TOSS will take reasonable steps to use appropriate providers, contractual safeguards and other mechanisms required by applicable law.
8. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including business, operational, contractual, accounting, security and legal requirements.
Retention periods may therefore differ depending on the nature of the information and relationship. When information is no longer reasonably required, it may be securely deleted, anonymised or otherwise disposed of.
9. Security
TOSS uses reasonable administrative, organisational and technical measures designed to protect information against unauthorised access, loss, alteration, misuse or disclosure.
No website, email service, cloud service or electronic transmission can be guaranteed to be completely secure. Users should therefore avoid transmitting unnecessary sensitive information through ordinary website forms.
10. Your Rights
Depending on the law applicable to you and the circumstances of processing, you may have rights relating to your personal information, including rights to request access, correction, deletion, restriction, transfer or information about processing, and in appropriate cases to withdraw consent or object to certain processing.
Rights are subject to the conditions, exceptions and limitations provided by applicable law. To make a privacy request, email info@toss.ae. We may need to verify your identity before fulfilling a request.
11. Marketing Communications
Where TOSS sends optional promotional communications, recipients may ask us to stop by using an unsubscribe mechanism where provided or by contacting info@toss.ae.
Operational, project, security, billing or legally required communications may still be sent where necessary.
12. Third-Party Websites
Our website may contain links to third-party websites or platforms. TOSS does not control the privacy practices of those third parties. Their own privacy notices apply when you leave toss.ae.
13. Children
TOSS provides business and professional technology services and does not intentionally design its website or services for children.
If we become aware that personal information relating to a child has been submitted inappropriately, we will take reasonable steps to address it.
14. Changes to This Policy
We may update this Privacy Policy where our website, services, technology or legal obligations change. The latest version will be published on this page with an updated revision date.
15. Contact
Privacy questions or requests may be sent to TOSS, Dubai, United Arab Emirates.
Email: info@toss.ae
Telephone: +971 52 813 2262
Website: https://toss.ae/