Privacy Policy

CloudMetic Technologies

Last updated: 13 October 2026

1. Introduction

CloudMetic Technologies (“CloudMetic”, “we”, “us” or “our”), a company registered in the United Arab Emirates, provides IT consulting and Salesforce consulting, implementation, integration, customization and support services. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, share, store and protect personal data when you visit our website, contact us, use our services, or otherwise interact with us. It is designed to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and, where applicable, other data protection laws such as the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021.

Registered address: Building C1 – 1F – SF8525, Ajman, UAE
Email: info@cloudmetic.ae
Phone:+971-0501099158

2. Scope and Our Role

Depending on the context, CloudMetic acts in one of two roles:

• Data Controller: when we decide why and how personal data is processed, for example data about website visitors, prospective clients, business contacts, job applicants and our own staff and vendors.
• Data Processor: when we process personal data on behalf of our clients while delivering consulting services, for example when we access, migrate, configure, test or support a client’s Salesforce org or other IT systems. In this role we act only on the client’s documented instructions, and the client’s own privacy notice and data processing agreement govern that data.

3. Personal Data We Collect

Information you provide to us

• Identity and contact details: name, job title, company, business email, phone number
• Enquiry and project information: messages, requirements, meeting notes, feedback
• Contract and billing details: billing address, tax registration number, payment and bank details
• Recruitment information: CV, qualifications, employment history, references

Information collected automatically

• Device and usage data: IP address, browser type, operating system, pages visited, referring URLs, time spent on pages
• Cookies and similar technologies (see Section 9)

Information accessed while delivering services When working in client environments, we may incidentally access client data such as customer records, contact and lead data, sales and service records, user account details and system logs. We access only what is necessary to perform the agreed services.

Information from third parties We may receive business contact information from publicly available sources, professional networks (such as LinkedIn), referral partners, or Salesforce and its partner ecosystem.

We do not intentionally collect sensitive personal data (such as health, biometric or religious data). Please do not send us such data unless it is strictly necessary for a project and agreed in writing.

4. How We Use Personal Data

We use personal data to:

• Respond to enquiries and provide proposals and quotations
• Deliver, manage and support our IT and Salesforce consulting services
• Perform contracts, issue invoices and process payments
• Communicate about projects, updates, security notices and support
• Send marketing communications, events and insights, where permitted or with your consent
• Improve our website, services and client experience
• Maintain security, prevent fraud and protect our systems
• Recruit and onboard staff and contractors
• Comply with legal, regulatory, tax and accounting obligations
• Establish, exercise or defend legal claims

5. Legal Basis for Processing

We process personal data on one or more of the following bases:

• Consent, for example for marketing emails and non-essential cookies, which you may withdraw at any time
• Contract, where processing is necessary to enter into or perform a contract with you or your organization
• Legal obligation, where we must comply with UAE or other applicable laws
• Legitimate interests, such as running and securing our business, where these are not overridden by your rights
• Protection of your legitimate interests or the public interest, where permitted by law

6. Sharing of Personal Data

We do not sell your personal data. We may share it with:

• Service providers and sub-processors: cloud hosting, email and collaboration tools, CRM and project management platforms, payment processors, analytics providers, IT support and security vendors
• Technology partners: Salesforce and related partners, only where required to deliver the services you have requested
• Professional advisers: auditors, accountants, lawyers and insurers
• Authorities: government, regulatory or law enforcement bodies where required by law or to protect our rights
• Corporate transactions: a prospective buyer or merged entity in the event of a restructuring, merger or sale of business, subject to confidentiality

All third parties are required to protect personal data and to use it only for the specified purposes.

7. International Transfers

Our service providers and technology platforms (including Salesforce data centers) may be located outside the UAE. Where we transfer personal data across borders, we do so in accordance with the PDPL and other applicable laws, relying on mechanisms such as adequacy determinations, standard contractual clauses, binding agreements, or your consent, and we take reasonable steps to ensure an appropriate level of protection.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, including legal, accounting and reporting requirements. As a general guide:

• Enquiry and marketing data: until you unsubscribe or for up to [2] years of inactivity
• Client project and contract records: for the duration of the engagement plus [5–10] years, as required by UAE commercial and tax law
• Recruitment data: up to [12] months after the recruitment process
• Client data accessed as processor: deleted or returned at the end of the engagement or as the client instructs

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to make the site work, remember your preferences, analyze traffic and measure marketing effectiveness. Categories include:

• Strictly necessary cookies: essential for site functionality and security
• Analytics cookies: help us understand how visitors use the site (for example Google Analytics)
• Marketing cookies: used for advertising and campaign measurement

You can manage or disable cookies through your browser settings or our cookie banner. Disabling some cookies may affect site functionality.

10. Data Security

We apply appropriate technical and organizational measures to protect personal data, including:

• Role-based access controls and least-privilege access to client systems
• Multi-factor authentication and strong password practices
• Encryption of data in transit and, where appropriate, at rest
• Secure development and testing practices, with sandbox use and data masking where possible
• Staff confidentiality obligations and regular security awareness training
• Vendor due diligence and incident response procedures

No system is completely secure. In the event of a personal data breach likely to cause risk to individuals, we will notify the UAE Data Office, affected individuals and, where we act as processor, the relevant client, as required by applicable law.

11. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and obtain information about how it is processed
• Rectify inaccurate or incomplete data
• Erase your data in certain circumstances
• Restrict or object to processing, including direct marketing and automated decision-making
• Data portability, to receive your data in a structured, commonly used format
• Withdraw consent at any time, without affecting earlier lawful processing
• Lodge a complaint with the UAE Data Office or the competent authority (such as the DIFC or ADGM Commissioner of Data Protection)

To exercise these rights, contact us at info@cloudmetic.ae. We may need to verify your identity and will respond within the time required by law. If your request concerns data we process on behalf of a client, we will direct you to that client or assist them in responding.

12. Marketing Communications

We may send you newsletters, event invitations and service updates. You can opt out at any time by clicking “unsubscribe” in any email or by contacting us. Opting out will not affect service or transactional messages.

13. Third-Party Links and Services

Our website may link to third-party sites, including Salesforce, LinkedIn and partner platforms. We are not responsible for their privacy practices and encourage you to read their policies.

14. Children’s Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised “Last updated” date. Where changes are material, we will provide additional notice where appropriate.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Data Protection Contact

CloudMetic Technologies Building C1 – 1F – SF8525, Ajman, UAE
Email: info@cloudmetic.ae
Phone: +971-0501099158

Note: This policy is a general template and not legal advice. Please have a UAE-qualified lawyer review it, and adjust the bracketed items (addresses, retention periods, analytics tools, and any DIFC/ADGM applicability) to match your actual practices.