Privacy Policy

PRIVACY POLICY

Last Updated: 30 June 2026

  1. WHO WE ARE

QubeSys (“Company,” “we,” “us,” “our”) is an IT services company based in Dubai, UAE. We provide website design and development, graphic design, branding, SEO, PPC advertising, social media management, website hosting, photography, video production, and IT support services.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website (www.qubesys.com), use our services, or interact with us.

Data Controller: QubeSys
Address: Dubai, UAE
Email: cs@qubesys.com

  1. LEGAL FRAMEWORK

We process personal data in accordance with:

  • Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations (Cabinet Decision No. 44 of 2022)

  • Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes

  • Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services

  • Federal Law No. 15 of 2020 on Consumer Protection

  • Federal Decree-Law No. 26 of 2025 on Child Digital Safety

  • All other applicable UAE federal and local data protection regulations

  1. PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

Information you provide to us:

  • Name, email address, phone number, and business details when you request a quote, place an order, or contact us

  • Content, images, login credentials, and other materials you provide for your projects

  • Payment and billing information

  • Communications between you and us (emails, support tickets, phone calls)

Information we collect automatically:

  • IP address, browser type, operating system, and device information

  • Pages visited, time spent, referral source, and browsing behaviour on our website

  • Cookie and similar technology identifiers (see Section 9)

Information from third parties:

  • Analytics data from tools such as Google Analytics

  • Payment confirmation from payment processors

  1. HOW AND WHY WE USE YOUR DATA

We process your personal data only where we have a lawful basis to do so under the PDPL. The lawful bases we rely on are:

Performance of a contract: To deliver the services you have engaged us for, process payments, communicate about your projects, and provide customer support.

Legitimate interest: To improve our website and services, analyse usage patterns, prevent fraud, protect our legal rights, and market our services to existing clients.

Legal obligation: To comply with UAE laws and regulations, respond to lawful requests from authorities, and maintain business records as required.

Consent: Where we rely on your consent (for example, to send you marketing communications or use non-essential cookies), you may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

  1. DATA SHARING

We do not sell your personal data.

We may share your data with:

  • Service providers who help us deliver our services (e.g. hosting providers, payment processors, analytics tools, email platforms), bound by contractual obligations to protect your data

  • Professional advisors (legal, accounting, auditing) where necessary

  • UAE government authorities, regulatory bodies, or law enforcement where required by law

  • A successor entity in the event of a merger, acquisition, or sale of our business assets, with prior notice to you

All third-party processors are required to implement appropriate safeguards in accordance with the PDPL.

  1. CROSS-BORDER DATA TRANSFERS

Some of our service providers may process data outside the UAE. We will only transfer personal data outside the UAE where:

  • The receiving country provides an adequate level of data protection as determined by the UAE Data Office; or

  • Appropriate safeguards are in place, such as contractual clauses ensuring equivalent protection; or

  • You have given explicit consent to the transfer after being informed of the potential risks; or

  • The transfer is necessary for the performance of a contract with you.

  1. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Active client data: for the duration of our business relationship plus 5 years

  • Financial and billing records: as required by UAE commercial and tax law

  • Website analytics data: up to 26 months

  • Marketing consent records: until consent is withdrawn

When data is no longer required, we securely delete or anonymise it so that it can no longer be linked to you.

  1. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (SSL/TLS)

  • Access controls limiting data access to authorised personnel

  • Regular security assessments of our systems

  • Secure storage of physical and digital records

No system is completely secure. In the event of a data breach that poses a risk to your rights and privacy, we will notify the UAE Data Office immediately and notify affected individuals without undue delay, as required by the PDPL.

  1. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies to:

  • Ensure the website functions properly (essential cookies)

  • Analyse website traffic and usage patterns (analytics cookies)

  • Remember your preferences (functional cookies)

Essential cookies are necessary for the website to operate and do not require consent. For analytics and functional cookies, we will obtain your consent before placing them.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

Third-party analytics tools (such as Google Analytics) may set their own cookies. These are governed by the respective third party’s privacy policy.

  1. YOUR RIGHTS

Under the UAE PDPL, you have the following rights regarding your personal data:

  • Right of access: Request confirmation of whether we process your data and obtain a copy of it.

  • Right to rectification: Request correction of inaccurate or incomplete data.

  • Right to erasure: Request deletion of your data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

  • Right to restrict processing: Request that we limit how we use your data in certain circumstances.

  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.

  • Right to object: Object to processing based on legitimate interest or for direct marketing purposes.

  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

  • Right related to automated decisions: Not be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

  • Right to lodge a complaint: Submit a complaint to the UAE Data Office if you believe your data has been processed in violation of the PDPL.

To exercise any of these rights, contact us at cs@qubesys.com. We will respond within 14 days of receiving your request. We may ask you to verify your identity before processing your request.

  1. CHILDREN’S PRIVACY

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from children. In accordance with Federal Decree-Law No. 26 of 2025 on Child Digital Safety, if we become aware that we have collected personal data from a child without appropriate parental or guardian consent, we will delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at cs@qubesys.com.

  1. DIRECT MARKETING

We may send you marketing communications about our services if you are an existing client or have given us your consent. Every marketing communication will include a clear option to unsubscribe. You can opt out at any time by:

  • Clicking the unsubscribe link in any marketing email

  • Contacting us at cs@qubesys.com

We will process your opt-out request promptly and without charge.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our practices or applicable law. When we make material changes, we will:

  • Post the updated policy on our website with a revised “Last Updated” date

  • Notify you by email or through our website where the changes are significant

We encourage you to review this page periodically.

  1. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, contact us at:

QubeSys
Dubai, UAE
Email: cs@qubesys.com
Website: www.qubesys.com