This Privacy Policy applies to personal data processed by Digital Prime Works (“DPW,” “we,” “us” or “our”) through digitalprimeworks.com (the “Website”), enquiries, quotations, project communications and delivery of our services.

For the processing described here, Digital Prime Works generally acts as the data controller—the organisation deciding why and how personal data is used. When we process data strictly on a client’s documented instructions as part of an agreed service, the Client may be the controller and we may act as its processor. Additional project-specific data terms may apply in that situation.

The information collected depends on how you interact with us.

Sensitive information

We do not intentionally request sensitive personal data through general Website forms. Please do not send identity documents, health details, financial account credentials or other sensitive information unless we specifically request it through an appropriate secure method for a legitimate project need.

We may receive personal data:

• Directly from you when you complete a contact form, request a quotation, call, email, message us through WhatsApp, attend a meeting or approve a project.
• From your organisation when a colleague or authorised representative includes you in an enquiry, project or support request.
• Automatically from the Website through essential cookies, server logs, security tools and similar technologies.
• From service providers where needed to operate communications, hosting, security or agreed project services.
• From public or professional sources where relevant to a genuine business enquiry and permitted by law.

If you provide another person’s information, you must be authorised to do so and ensure they receive any notice required by applicable law.

We process personal data for specific and reasonably necessary purposes, including:

• Responding to enquiries and arranging calls or meetings.
• Understanding requirements and preparing quotations or proposals.
• Entering, administering and delivering service agreements.
• Providing IT support, web, design, hosting-related and other agreed digital services.
• Managing invoices, payments, accounting and business records.
• Communicating about projects, changes, maintenance and support.
• Securing the Website, systems, accounts and communications; detecting misuse or technical problems.
• Improving service quality, Website usability and internal processes using appropriately limited information.
• Sending relevant business follow-ups where permitted, with a clear way to opt out.
• Complying with legal obligations and establishing, exercising or defending legal claims.

We do not use your information for a materially incompatible purpose without providing appropriate notice and, where required, obtaining consent.

Depending on the circumstances and applicable law, we process personal data:

• With your consent, where consent is required and has been validly provided.
• To take steps at your request before entering a contract or to perform a contract with you.
• To comply with legal, regulatory, accounting or lawful authority requirements.
• To protect rights and interests permitted by law, including system security, fraud prevention and the establishment or defence of legal claims.
• In other circumstances expressly permitted by applicable data-protection law.

Where processing relies on consent, you may withdraw that consent. Withdrawal does not affect processing that was lawful before withdrawal and may not prevent processing required on another lawful basis.

Cookies are small files or similar browser technologies used by websites. Our Website and infrastructure may use:

• Strictly necessary technologies for core operation, security, traffic management, form functionality, preference storage and administrative sessions.
• Server and security logs that record technical events to maintain reliability, investigate errors and protect the Website.
• Preference technologies that remember choices where such functions are enabled.
• Analytics technologies only where a measurement tool is enabled and its use is permitted, including obtaining consent where required.
• Third-party technologies when you choose to interact with an embedded feature or external service.

At the date of this Policy, we do not identify a particular non-essential analytics or advertising platform as an established Website practice. If such a platform is activated, we will update the relevant notice and cookie controls before relying on it.

You can control cookies through available Website settings and your browser. Blocking necessary technologies may affect Website functions. Browser “Do Not Track” signals are not interpreted consistently across the industry; we respond to legally recognised preference mechanisms where required.

We do not sell or rent personal data. We may disclose limited information where reasonably necessary to:

• Authorised Digital Prime Works team members and specialists involved in the enquiry or project.
• Website hosting, domain, DNS, content-delivery, security, backup and technical service providers.
• Email, productivity, cloud, communication and customer-support providers.
• WhatsApp and its provider when you choose to communicate through that service.
• Professional advisers, insurers, auditors, banks and accounting providers where necessary.
• Government bodies, regulators, courts, law-enforcement authorities or other recipients where disclosure is lawfully required.
• A genuine purchaser, successor or adviser in connection with a business reorganisation, subject to appropriate confidentiality and legal safeguards.

Service providers are expected to use information only for authorised purposes and apply appropriate protections. Some providers act as independent controllers under their own privacy terms.

Digital Prime Works is based in Dubai and works with international specialists. Personal data may therefore be accessed or processed in the United Arab Emirates and, where relevant to an enquiry or project, countries including Japan, Egypt, Italy, France and South Korea. Technology providers may also operate infrastructure in other locations.

Where personal data is transferred internationally, we take reasonable steps required by applicable law. Depending on the circumstances, these may include assessing the destination’s protection, using contractual or organisational safeguards, limiting access, obtaining consent where appropriate, or relying on another lawful transfer mechanism.

Access is limited to people who reasonably need the information for the authorised purpose.

We retain personal data only for as long as reasonably necessary for the purpose collected, including service delivery, support, security, accounting, legal obligations and dispute management. Typical working targets are:

• General enquiries: normally up to 24 months after the last meaningful communication, unless a longer period is justified.
• Client, contractual and invoice records: for the engagement and the applicable legal, tax, accounting and claims period afterwards.
• Project access and credentials: only while reasonably needed for authorised work, handover or support, then returned, removed or securely retained if legally necessary.
• Business follow-up preferences: until you opt out or the information is no longer useful or appropriate.
• Technical and security logs: for a proportionate period based on security, troubleshooting and provider settings.

Retention may be extended where information is relevant to a legal claim, investigation, unresolved account, security incident or lawful preservation requirement. When retention is no longer justified, information is deleted, anonymised or securely archived with restricted access.

We use reasonable technical and organisational measures appropriate to the nature and risk of the information. Measures may include access controls, strong authentication, encryption in transit where supported, software updates, security monitoring, backups, least-necessary access and confidentiality expectations.

No website, email, messaging service, storage platform or internet transmission can be guaranteed completely secure. You should protect your own devices and accounts, use strong unique passwords, enable multi-factor authentication where available and avoid sending sensitive credentials through ordinary email or public forms.

If we become aware of a personal-data incident, we will investigate, contain and document it and provide notifications where required by applicable law.

Subject to applicable law, identity verification and relevant exemptions, you may have rights concerning your personal data.

You may also ask about automated processing and challenge a decision based solely on automated processing where applicable. Digital Prime Works does not currently use Website data to make solely automated decisions producing legal or similarly significant effects.

How to make a request

Email info@digitalprimeworks.com with “Privacy Request” in the subject line and explain the request. We may ask for proportionate information to verify identity and authority. We will respond within the period required by applicable law and explain any lawful limitation or refusal.

You may also raise a complaint with the competent UAE data-protection authority where that right is available. We encourage you to contact us first so we can try to resolve the concern directly.

If you make a business enquiry, we may send limited and relevant follow-up communication about the requested or closely related services where permitted by law. Service messages about an active quotation, project, invoice, security matter or support request are not promotional marketing.

Promotional communication will include a reasonable way to opt out. You can ask us to stop business follow-ups at any time by replying “unsubscribe,” using an available unsubscribe method or emailing info@digitalprimeworks.com. We may retain a minimal suppression record so that your preference is respected.

Opting out of promotional messages does not stop necessary contractual, account, support, legal or security communications.

The Website and our commercial services are not directed to children. We do not knowingly collect personal data from a child through the Website without appropriate authorisation. If you believe a child has provided information improperly, contact us so we can investigate and take appropriate action.

The Website may link to external websites, platforms or communication services. Their privacy practices are controlled by their operators, not Digital Prime Works. Review the relevant third party’s privacy information before providing personal data or enabling an integration.

Choosing a link to WhatsApp or another external platform may allow that provider to receive device, account or interaction data under its own terms.

We may update this Policy when our Website, services, providers or legal requirements change. The revised version will be posted here with a new “Last updated” date. Where a change materially affects how existing personal data is used, we will provide additional notice or obtain consent where required.

Privacy contact

• Digital Prime Works
• Dubai, United Arab Emirates
• Email: info@digitalprimeworks.com
• Telephone and WhatsApp: +971 50 894 7821

For project terms, payments, cancellations and service responsibilities, please also read our Terms and Conditions.