Privacy Policy

We may collect Personal Data from you by electronic and/or physical means in the course of our business, when you contact us or request information from us, when you use our Online Services, or as a result of your relationship with any of our personnel or clients.

The Personal Data that we process includes:

• basic details, such as your first & last name, nationality, date of birth, role/title, employer/s, your relationship to a person, your contact information (such as your email address, physical address, contact details, mobile number & landline number, office number, fax number, P.O. Box Number) and emergency contact details;
• biometric data for the purpose of authentication in mobile apps;
• technical information (including your location, IP address, browser details, traffic data, location data), such as information from your visits to our Online Services;
• information relating to your visits to our offices or our meetings and events, including appointment details or photographic and video images;
• call recording if you reach out to us by phone, for quality and training purposes;
• Personal Data provided to us by or on behalf of our clients/customers, or generated by us in the course of providing services to them, which may include special categories of Personal Data such as health information (“Sensitive Personal Data”);
• any other information relating to you which you may provide to us.

We collect most of this information directly from you, through your use of our Online Services operated by Al Ghurair business, or any service provided by Al Ghurair. We may also receive information about you from third parties (including business partners, vendors, suppliers, sub-contractors, advertising networks, analytics providers, and similar).

The information you provide may be confidential, and we will maintain such confidentiality and protect your information in accordance with our professional obligations and applicable legislation. Where we need to collect your Personal Data by law or in order to process your instructions or provide you with our Online Services and you decide not to provide that information when requested, we may not be able to carry out your instructions or provide certain products and services.

We always process your Personal Data for a specific purpose and only process the Personal Data which is relevant to achieve that purpose. The purposes for which we process your Personal Data include:

• providing professional services where this is necessary or appropriate;
• processing your orders;
• communicating with you in connection to your request;
• verifying your identity and information in your job application; and
• managing the accounts you hold with us.

We may also use your Personal Data to personalise marketing messages and make them more relevant and interesting, as this is in our legitimate business interests. Where required under applicable legislation, we will obtain your consent first.

Whether we receive your Personal Data directly from you or from a third party, we will only use your Personal Data if we have obtained your consent (where this is required under applicable law), or if we have another lawful basis upon which to do so.

Depending on the purpose of the processing activity, the legal basis may include: contractual necessity; legal or regulatory obligations; public interest; vital interests; legitimate interests of Al Ghurair; or prior consent where required by applicable law.

We may process Sensitive Personal Data with your explicit written consent, where we need to carry out our legal obligations, or where it is needed in the public interest.

We may share Personal Data for the purposes indicated in Section 3 with third party service providers and sub-contractors (including IT service providers); any Al Ghurair affiliate; and any competent authorities where legally required.

We do not sell, rent, distribute, or otherwise make Personal Data commercially available to any third party. Where we transfer your data to third party service providers, we take steps to ensure they meet our data security standards so that your Personal Data remains secure.

The Al Ghurair Online Services will be managed and operated from the UAE. The information collected from you via the Online Services will be processed internally and stored on servers based in the UAE. It is not transferred outside the UAE in the usual course of our business.

We will only transfer your data outside of the UAE if the destination provides an adequate level of protection; appropriate safeguards are in place (such as Standard Contractual Clauses); we have your explicit consent after informing you of potential risks; or the transfer is otherwise necessary under applicable legislation.

By providing your Personal Data to the Al Ghurair Online Services, you acknowledge this transfer, storing or processing. For further details email DataProtection.Officer@al-ghurair.com.

Under certain conditions you may have the right to require us to: provide further details on our use of your Personal Data; confirm whether we process Personal Data about you and provide access; update inaccuracies; delete Personal Data we no longer have a legal basis to use; withdraw consent where processing is based on consent; object to processing based on legitimate interests or direct marketing; restrict use whilst a complaint is investigated; and/or transfer your Personal Data in a standardised machine-readable format.

Some rights may be limited where we have an overriding interest or legal obligation. When you submit a request, our team will verify your identity. We aim to respond within the time periods specified under applicable legislation.

If you are not satisfied with our use of your Personal Data or our response, you may lodge a complaint with a competent authority such as the DIFC Commissioner of Data Protection, the UAE Data Office, or the relevant EU Data Protection Authority where you reside.

Cookies are small pieces of information that your browser stores on your computer when requested by a website. You have the option to configure your browser to reject cookies. Please be aware that if you disable or refuse cookies, certain parts of the Online Services may become inaccessible or may not function correctly. For additional information, please refer to our Cookies Policy.

We will retain your Personal Data for the length of time needed to fulfil the purposes for which the Personal Data was collected, unless we specifically agree a longer retention period with you, or a longer retention period is required or permitted by applicable legislation.

At any time, you can ask for your stored information to be deleted from Al Ghurair’s database using the contact details below. However, some of your Personal Data may be retained in some circumstances, such as to resolve disputes, troubleshoot problems, enforce terms and conditions or as required by regulators.

We have implemented reasonable administrative, technical, and physical measures to protect your Personal Data against loss, misuse and alteration. However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Our Online Services may provide links to third-party websites for your convenience. If you access those links, you will leave our Online Services. We do not control those third-party websites or their privacy practices, which may differ from ours. This Privacy Notice does not cover the personal data you choose to give to unrelated third parties.

Whilst this Privacy Notice describes the data protection practices adopted by us generally across the UAE (mainland and DIFC) and EU, local data protection laws may vary and our operations in some countries may mean that we are subject to different, or additional, local data protection requirements. This Privacy Notice will be augmented by jurisdictional specific addendums from time to time as applicable.

We update this Privacy Notice to ensure compliance with the applicable legislation. If we are going to use your Personal Data in a manner different from that stated at the time of collection, we will notify you. All changes will become effective when posted unless indicated otherwise. Please review this Privacy Notice periodically for changes.