Privacy Policy

1About This Policy

This Privacy Policy describes how TriNova AI Technologies L.L.C-FZ ("TriNova AI", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with our website, services, and business operations. It applies to clients, website visitors, prospective clients, business contacts, employees, and any other individual whose personal data we process.

This Policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations, as well as any other applicable UAE federal and emirate-level legislation governing data privacy and cybersecurity.

By engaging with our website or services, you acknowledge that you have read and understood this Policy.

2Who We Are

For the purposes of data protection law, the data controller is:

For all data protection queries, please contact us at the above details, marked for the attention of our Data Privacy team.

3Data We Collect

3.1 Data You Provide Directly

• Identity data: full name, job title, company name
• Contact data: email address, phone number, postal address
• Communication data: messages, enquiries, and feedback submitted via our contact forms or email
• Commercial data: service preferences, project briefs, proposal requests, and contractual information
• Account data: login credentials where a client portal or platform account is created

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, screen resolution
• Usage data: pages visited, session duration, navigation paths, click events, and referral sources
• Location data: approximate geographic location derived from IP address
• Cookie and tracking data: as described in our Cookie Policy

3.3 Data Received from Third Parties

• Business contact data from professional networking platforms (e.g. LinkedIn)
• Referral data provided to us by existing clients or partners
• Publicly available information relevant to client due diligence

3.4 Special Categories of Data

We do not knowingly collect special categories of personal data (such as health data, biometric data, religious beliefs, or political opinions) unless expressly required for a specific service and only with your explicit consent.

4Legal Basis for Processing

Under the UAE PDPL, we process personal data on the following legal bases:

• Contractual necessity: processing required to perform a contract with you or to take pre-contractual steps at your request
• Consent: where you have given clear, informed consent for a specific processing purpose (e.g. marketing communications)
• Legal obligation: processing necessary to comply with UAE law or regulatory requirements
• Legitimate interests: processing necessary for our legitimate business interests, provided these are not overridden by your rights and interests

5How We Use Your Data

• To respond to enquiries, provide quotations, and deliver contracted services
• To manage our client relationship, including project delivery, invoicing, and support
• To send service-related communications (updates, maintenance notices, contract renewals)
• To send marketing communications where you have opted in, or where a legitimate interest applies within applicable law
• To improve and develop our website, products, and services using aggregated and anonymised analytics
• To comply with legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements applicable to our business
• To protect the security and integrity of our systems and premises
• To conduct client satisfaction surveys and quality assurance activities

We will not use your personal data for purposes incompatible with those for which it was collected without obtaining fresh consent or a new legal basis.

6Disclosure to Third Parties

We may share personal data with the following categories of recipients, only to the extent necessary:

• Service providers: cloud hosting providers, IT infrastructure vendors, payment processors, and CRM platforms operating under data processing agreements
• Professional advisers: legal counsel, auditors, and accountants bound by confidentiality obligations
• Technology partners: where integration with third-party AI platforms or software is required to deliver our services
• Regulatory and government bodies: UAE courts, law enforcement agencies, or regulators where disclosure is required by law (including the UAE Data Office, UAE Central Bank, or other competent authorities)
• Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, subject to appropriate confidentiality arrangements

We do not sell personal data to third parties. We do not share personal data with third parties for their own marketing purposes without explicit consent.

7Cookies

Our website uses cookies and similar tracking technologies to enhance functionality and analyse usage. Please refer to our Cookie Policy for full details on the types of cookies used, how to manage your preferences, and third-party cookies.

8Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to legal retention obligations. General retention periods are as follows:

• Client contractual records: 5 years from contract end date (in line with UAE Commercial Transactions Law)
• Financial and accounting records: 5 years, as required by UAE Commercial Companies Law
• Enquiry and pre-sales data: 2 years from last contact, or until consent is withdrawn
• Marketing opt-in records: until consent is withdrawn, plus 1 year
• Website analytics data: up to 26 months in aggregated form
• Employee data: as required by UAE Labour Law and MOHRE regulations

On expiry of the applicable retention period, data is securely deleted or anonymised.

9Your Rights Under the UAE PDPL

Subject to the provisions of UAE Federal Decree-Law No. 45 of 2021, you have the following rights in respect of your personal data:

To exercise any of these rights, please contact us at info@trinovaai.ae. We will respond within 30 days. Where a request is refused, we will explain the reason. You may also lodge a complaint with the UAE Data Office (UDO) or other applicable regulatory authority.

10Cross-Border Data Transfers

Some of our service providers or technology platforms are based outside the UAE. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Transfers to countries recognised as providing an adequate level of data protection by the UAE Data Office
• Standard contractual clauses or data processing agreements incorporating equivalent protections
• Binding corporate rules where applicable within a group structure

We do not transfer personal data to a country whose data protection framework has been assessed as inadequate, without appropriate contractual safeguards and, where required, notification to the UAE Data Office.

11Security

We implement technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, or destruction. These include:

• Encryption of data in transit and at rest using industry-standard protocols
• Role-based access controls and multi-factor authentication
• Regular security assessments and penetration testing
• Staff training on data protection and information security
• Incident response procedures compliant with UAE PDPL breach notification requirements

In the event of a personal data breach that poses a risk to your rights, we will notify the UAE Data Office and affected individuals within the timeframes required by applicable law.

12Children's Privacy

Our services and website are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. Material changes will be communicated via our website or by direct notification where appropriate. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of our services following notification of changes constitutes acceptance of the revised Policy.

14Contact Us

For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact: