Information We Collect
We collect only personal data that is necessary to operate our business, deliver services, evaluate talent, or respond to enquiries.
This may include contact details, professional information, communications submitted through our website forms, project-related artefacts, and correspondence history. When you submit information via a contact form, the data you provide is collected explicitly for the purpose stated at the time of submission.
For website analytics and platform telemetry, we collect aggregated and anonymised usage data to improve performance and reliability. We do not sell or rent personal data.
Lawful Basis & How We Use Data
Personal data is processed in accordance with the UAE Personal Data Protection Law (PDPL) and applicable regulations.
We process personal data based on one or more of the following lawful bases:
- Your explicit consent
- The performance of a contract or pre-contractual steps
- Compliance with legal or regulatory obligations
- Our legitimate business interests, where these do not override your rights
Data submitted via our contact forms is used to respond to enquiries, provide requested information, and, where relevant, to follow up regarding our services. By submitting a contact form, you acknowledge that we may contact you using the details provided for these purposes.
We do not use contact form submissions for unsolicited marketing unrelated to the original enquiry.
Data Storage, Third Parties & Transfers
Personal data may be stored and processed using trusted third-party service providers acting as data processors on our behalf. This includes providers for cloud infrastructure, communication tools, customer relationship management, and recruitment systems.
All third parties are subject to contractual data protection obligations and are permitted to process personal data only for specified purposes and in accordance with our instructions.
Data may be stored or processed within the UAE, the European Union, or other jurisdictions that provide an adequate level of data protection. Where cross-border transfers occur, appropriate safeguards are applied, including contractual protections and encryption of data in transit and at rest.
Contact & Communication
If you contact us through our website or other channels, we may use your contact details to respond to your enquiry, provide follow-up information related to your request, and continue professional communication where a legitimate interest exists.
You may opt out of further communications at any time by contacting us or using unsubscribe mechanisms where provided.
Your Rights
In accordance with the UAE PDPL, you have the right to request access to your personal data, request correction of inaccurate or incomplete data, request deletion of your data where legally permissible, withdraw consent where processing is based on consent, and object to or restrict certain processing activities.
Requests can be made by emailing privacy@trueforge.ae. We will respond within the timeframes required by applicable law.
Retention & Security
Personal data is retained only for as long as necessary to fulfil its intended purpose or to comply with legal, contractual, or regulatory obligations. Engagement-related records are typically retained for no longer than seven years unless otherwise required.
We apply appropriate technical and organisational security measures, including access controls, network segmentation, encryption, and continuous monitoring, to protect personal data against unauthorised access, loss, or misuse.