Privacy policy
Last updated
Who we are
Kestrel Engineering FZ-LLC (licensed in Dubai Internet City, trade licence no. 000000 (demo)) runs this website and is the controller of the personal data you share with us here: we decide how it is used, and we are responsible for protecting it. Our address is Office 401, Building 3, Dubai Internet City, Dubai, United Arab Emirates. For anything about your data, email hello@kestrel.ae.
We handle your information under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the PDPL), which applies to businesses licensed in UAE free zones other than the DIFC and ADGM.
What we collect
- What you send us through a form, email, phone or WhatsApp: usually your name, contact details and your message.
- If you allow analytics cookies: which pages you visit, roughly where you are and what device you use, without your name.
Why we use it
- To reply to you and give you the service you asked for: we need it to take the steps you ask for before a contract, and to perform the contract.
- To keep the records UAE law requires, such as invoices and tax records (to meet our legal obligations).
- To establish, exercise or defend our legal rights, if a dispute ever arises.
- To see how this website is used, only through the analytics cookies you allow (your consent).
- To send news or offers, only if you have said yes (your consent). You can withdraw it at any time.
Who we share it with
Only the people and services that help us work: our email provider, our IT and hosting providers, and professional advisers such as our accountant. Each may only use it to do that job for us.
We never sell your information. We share it with government authorities only when the law requires us to.
Where it is kept
Some of our providers store data outside the UAE. We only transfer personal data to countries the UAE recognises as protecting it adequately, under a contract that holds the provider to the standard the PDPL requires, with your consent, or where another exception in the law applies.
How long we keep it
- Enquiries that don’t lead to work: up to 12 months.
- Client and booking records: for as long as you are a client, then as long as the law requires (usually five years for business and tax records).
- Analytics: no longer than 14 months.
Your rights
You can ask us what information we hold about you and how we use it, and for a copy; to correct or complete it; to delete it; to restrict how we use it; to stop using it, including for marketing; to send it to you or to another business in a structured, machine-readable form; and not to be subject to a decision made only by automated processing that significantly affects you.
Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before. Email hello@kestrel.ae and we will reply within 30 days.
If you are unhappy with how we have handled your information, please tell us first. You can also complain to the UAE Data Office.
Keeping it safe
We protect your information with access controls, encryption where our providers offer it, and by letting only the people who need it see it. If a breach could put your information at risk, we report it to the UAE Data Office and tell you if it affects you, as the law requires.
Job applicants
If you apply for a role, we use your CV, links and messages only to assess your application, and share them only with the people involved in hiring. We keep unsuccessful applications for 12 months so we can contact you about similar roles, then delete them. Ask us at jobs@kestrel.ae to delete yours sooner.
Data we process for clients
When we work on a client’s systems we may have access to personal data the client controls. We process it only on the client’s instructions, under a data processing agreement, and it is covered by that client’s privacy notice rather than this one.
Changes to this policy
We update this page when the way we use information changes. The date at the top shows the latest version.