Privacy
Policy
Your privacy matters to us. Learn how we collect, use, and protect your personal and business information in compliance with UAE data protection laws.
Table of Contents
Introduction
UAE Carbon Reporting (referred to as "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our website, services, and carbon reporting solutions.
By accessing or using our services, you agree to the terms outlined in this Privacy Policy. We encourage you to read this document carefully to understand our practices regarding your personal data and how we will treat it.
This policy is designed to comply with applicable UAE data protection laws and regulations, including provisions under Federal Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL).
Information We Collect
We collect various types of information to provide and improve our services:
1. Personal Information
- Full name, job title, and contact details
- Business email address and phone number
- Company name, registration number, and business address
- User account credentials and login information
2. Business Information
- Emissions data and carbon footprint calculations
- Energy consumption records and utility data
- Compliance documentation and regulatory submissions
- NRCC registration details and verification reports
3. Technical Information
- IP address, browser type, and device information
- Usage data and interaction with our platform
- Cookies and similar tracking technologies
- Log files and analytics data
4. Communication Data
- Emails, support tickets, and chat transcripts
- Feedback, survey responses, and consultation requests
- Meeting notes and consultation summaries
How We Use Your Information
We use the collected information for the following purposes:
Service Delivery
- Providing carbon reporting tools and compliance solutions
- Processing emissions calculations and generating reports
- Facilitating NRCC registration and IEQT platform integration
- Delivering consulting services and expert guidance
Account Management
- Creating and maintaining user accounts
- Verifying identity and preventing unauthorized access
- Communicating important service updates and changes
Regulatory Compliance
- Assisting with MOCCAE compliance requirements
- Preparing and submitting mandatory carbon reports
- Maintaining audit trails and documentation
Improvement and Development
- Analyzing usage patterns to enhance our services
- Developing new features and tools
- Conducting research on carbon reporting best practices
- Personalizing user experience and recommendations
Data Sharing and Third Parties
We respect your privacy and only share your information under specific circumstances:
Service Providers
We may engage trusted third-party service providers to assist with business operations, including cloud hosting, data analytics, payment processing, and customer support. These providers are contractually bound to protect your data and use it solely for the services they provide to us.
Regulatory Authorities
We may share information with UAE regulatory bodies such as MOCCAE, NRCC, and other relevant authorities when required for compliance with Federal Decree-Law No. 11 of 2024 and related regulations. This sharing is limited to what is legally necessary.
Verification Bodies
With your consent, we may share emissions data and related documentation with MOCCAE-accredited third-party verification bodies to complete mandatory verification requirements.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change in ownership or control of your personal data.
Legal Requirements
We may disclose information when required by law, court order, or governmental regulation, or when necessary to protect our rights, property, or safety, or that of our users or others.
Data Security
We implement comprehensive security measures to protect your personal and business information:
Technical Safeguards
- Industry-standard SSL/TLS encryption for data transmission
- Advanced encryption at rest for stored data
- Multi-factor authentication (MFA) for account access
- Regular security audits and vulnerability assessments
- Intrusion detection and prevention systems
Organizational Measures
- Access controls based on role and necessity
- Employee confidentiality agreements and training
- Regular security awareness programs
- Incident response and breach notification procedures
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Typically, carbon reporting data is retained for 7 years in accordance with UAE regulatory requirements.
While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We continuously review and enhance our security practices to address evolving threats.
Your Rights (UAE Data Protection)
Under UAE Federal Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL), you have the following rights regarding your personal information:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of receiving a valid request, subject to verification of your identity.
Right to Rectification
If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction or updating of your data.
Right to Erasure
You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent (where applicable). Note that certain regulatory obligations may require us to retain specific data.
Right to Restrict Processing
In certain circumstances, you have the right to request that we limit the processing of your personal data.
Right to Data Portability
Where technically feasible, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another controller.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
International Data Transfers
As a UAE-based organization, we primarily store and process your data within the United Arab Emirates. However, in certain circumstances, your information may be transferred to, stored at, or processed in destinations outside the UAE.
Transfer Safeguards
When we transfer your personal data internationally, we ensure appropriate safeguards are in place to protect your information, including:
- Standard contractual clauses approved by UAE authorities
- Adequacy decisions for countries with equivalent data protection standards
- Binding corporate rules for intra-group transfers
- Certification mechanisms and codes of conduct
Cloud Service Providers
We may use cloud service providers (such as AWS, Microsoft Azure, or Google Cloud) that operate data centers globally. These providers maintain robust security measures and comply with international data protection standards. We ensure that all international transfers comply with UAE PDPL requirements.
Children's Privacy
Our services are designed for businesses and professionals involved in carbon reporting and compliance. We do not knowingly collect personal information from individuals under the age of 18.
If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete such information from our systems. If you believe we may have collected information from a minor, please contact us immediately.
We encourage parents and guardians to monitor their children's online activities and to help enforce this Privacy Policy by instructing their children never to provide personal information through our services without parental permission.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of any material changes by:
- Posting the updated policy on our website with a revised "Last Updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our platform
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated terms.
For significant changes that materially affect your rights or how we process your data, we will seek your explicit consent where required by applicable law.
Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:
Data Protection Officer
UAE Carbon Reporting
Email: privacy@uaecarbonreporting.ae
Email: info@uaecarbonreporting.com
Address:
Dubai, United Arab Emirates
We are committed to addressing your concerns and will respond to privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Protection Authority.
Exercising Your Rights
To exercise any of your data protection rights, please submit a request to our Data Protection Officer with sufficient information to verify your identity and describe your request in detail. We may need to request additional information to confirm your identity before processing your request.
Last Updated
This Privacy Policy was last updated on March 18, 2025.
We regularly review and update our privacy practices to ensure compliance with evolving UAE data protection regulations and international best practices. Please check this page periodically for any changes.