Privacy Policy

This website and the client portal are operated by VRIMO MILAD (“we”, “us”). We are responsible, as the controller, for the personal data described in this policy.

You can contact us about privacy matters using the contact form on this website.

We operate from the United Arab Emirates and process personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and other applicable UAE laws, including those relating to electronic transactions, cybercrime and consumer protection.

If our business is established in a financial free zone with its own data protection regime (such as DIFC or ADGM), that regime may apply instead of, or in addition to, the PDPL. Where this is the case, this policy will be updated to say so.

• Website visitors: technical information needed to deliver the site securely (such as IP address, browser type and the pages requested) and your cookie choices.
• Inquiries: the details you submit through the contact form — name, company, email, optional phone number, project type, optional budget, timeline, description and how you heard about us — together with the time you gave consent.
• Client portal users: your name, email address, organization, role and account settings; the project information, comments, feedback, approvals and files you or your team add; and security records such as sign-in times, IP address and browser information.
• Correspondence: messages you send us by email or through the portal.

We do not ask for special categories of personal data (such as health or religious information) and ask you not to include it in forms or uploads.

• To respond to your inquiry and discuss a potential project — based on your consent and on steps taken at your request before entering into a contract.
• To deliver the services agreed with your organization and operate the client portal, including project tracking, deliverable reviews and approvals — because this is necessary to perform our contract.
• To keep the website and portal secure, prevent misuse and investigate incidents — to protect our systems and our clients’ data, as permitted by law.
• To meet legal, accounting and record-keeping obligations.
• With your separate consent only, to understand how the website is used through analytics cookies.

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

• Website inquiries that do not lead to a project: up to 24 months, then deleted.
• Client portal accounts and project records: for the duration of the engagement and typically up to five years after the project ends, or longer where required by law (for example, commercial and tax record-keeping).
• Security and audit logs: up to 12 months, unless needed to investigate an incident.
• Sign-in sessions: until they expire or you sign out.

We use carefully selected service providers to host the website and database, store files securely and send transactional emails. They act on our instructions, under contractual confidentiality and security obligations, and only receive what they need to provide their service.

We may disclose information where required by law or by a competent authority, or to protect our rights, our clients or the public.

Project information in the client portal is only visible to authorised members of your organization and our project team.

Some of our service providers may store or process data outside the United Arab Emirates. Where this happens, we transfer data only as permitted by the PDPL — for example to countries with adequate data protection, or with appropriate contractual safeguards in place.

We use encryption in transit (HTTPS), securely hashed passwords, private file storage with short-lived access links, strict separation between client organizations, role-based permissions, rate limiting and audit logging. No system is perfectly secure, but we work to protect your data and will notify affected people and authorities of a personal data breach where the law requires.

Subject to the conditions in the PDPL, you may ask us to:

• tell you what personal data we hold about you and how it is used, and give you a copy;
• transfer your data to you or another controller in a structured, machine-readable format;
• correct inaccurate or incomplete data;
• delete your data where it is no longer needed or was processed unlawfully;
• restrict or stop processing in certain circumstances, and object to processing;
• withdraw consent at any time (this does not affect processing that took place before).

You can contact us about privacy matters using the contact form on this website. We may need to verify your identity before acting on a request, and we will respond within the time required by law. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.

Client portal users can update their name and password in Account settings. For other changes, or to close an account, contact your project lead or us directly.

We use only strictly necessary cookies by default. Optional analytics cookies are used only if you agree. See the Cookie Policy for details and to change your choices.

This website and the client portal are intended for business users and are not directed at children under 18.

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes affecting portal users will be communicated through the portal or by email.