Privacy Policy

Hephaestus Technologies

1. Introduction and Scope
Hephaestus Technologies (“the Company,” “we,” “us,” or “our”) is a technology services provider based in Dubai, UAE. We are committed to transparency and the protection of personal data. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information for our services, including Web and Mobile Development, AI Development, Branding, Animation, and API Integration. This policy aligns with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Data We Collect
We collect information necessary to provide high-quality technology solutions:

Identity & Contact Data: Name, job title, business email, phone number, and Emirates ID (where legally required for contracts).
Technical Data: IP addresses, browser types, time zone settings, and operating systems collected via our website.
Project & Usage Data: Information related to your service requests, including API documentation, branding assets, and feedback provided during the development lifecycle.

3. Lawful Basis for Processing
In accordance with UAE law, we process your data based on:

Contractual Necessity: To perform our obligations under a service agreement.
Legal Obligation: To comply with UAE regulatory and tax requirements.
Consent: Where you have explicitly opted-in to receive marketing communications.

4. How We Use Your Information
Your data is used to:

Develop, test, and deploy bespoke software and AI solutions.
Manage project milestones and provide technical support.
Process payments and issue VAT-compliant invoices in accordance with UAE Law.
Improve website functionality and security through data analytics.

5. Data Sharing and Cross-Border Transfers
We do not sell personal data. We may share data with:

Service Providers: Third-party cloud hosting (e.g., AWS, Azure) or specialized API partners.
Legal Authorities: When required by UAE judicial or security entities.
International Transfers: Data may be transferred outside the UAE only to jurisdictions providing an adequate level of protection or under standard contractual clauses approved by the UAE Data Office.

6. Data Security and Retention
We implement robust technical and organizational measures (including encryption and pseudonymization) to prevent unauthorized access or data breaches. We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with statutory retention periods in the UAE.

7. Your Rights as a Data Subject
Under the PDPL, you have the right to:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete information.
Erasure: Request deletion of data (the “Right to be Forgotten”) under certain conditions.
Restriction: Limit how we process your data during disputes.
Withdraw Consent: Rescind your permission for data processing at any time.

8. Contact Information
For any privacy-related inquiries or to exercise your rights, please contact us:
Email: Info@hephaestus-technologies.dev