This Privacy Policy explains how Sardana Technologies ("Company", "we", "us", or "our") collects, uses, discloses, and protects personal data of visitors and users ("you", "your") of the website www.sardana.ae (the "Website"). We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner.

We act as the data controller for the personal data we collect through the Website. Our registered office is located in Dubai, United Arab Emirates.

1. Scope and Applicable Law
   This Privacy Policy applies to personal data we process about visitors of the Website and individuals who contact us through the Website. We process personal data in accordance with:
   UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
   Regulation (EU) 2016/679 (General Data Protection Regulation, or "GDPR"), where applicable to visitors located in the European Economic Area (EEA) or the United Kingdom; and other applicable data protection laws of the jurisdictions in which we operate.
   
   

2. Personal Data We Collect
   We collect the following categories of personal data:
   2.1 Information you provide directly
   When you submit our contact form or otherwise communicate with us, we may collect:
   your name;
   your email address;
   your company name and job title (if provided);
   the content of your message and any other information you choose to share with us.
   2.2 Information collected automatically
   When you visit the Website, we (and our service providers) may automatically collect:
   technical information such as your IP address, browser type and version, device type, operating system, and screen resolution;
   usage data including pages visited, time spent on pages, referring URL, click patterns, and date / time of access;
   cookie identifiers and similar tracking data (see our Cookie Policy for details).
   
   

3. Purposes and Legal Bases for Processing
   We process your personal data for the following purposes:
   3.1 To respond to your inquiries
   When you contact us via the contact form, we use your information to reply to your message and provide the information or services you request.
   Legal basis: performance of a contract or steps prior to entering into a contract; our legitimate interests in responding to inquiries; your consent (where applicable).
   3.2 To operate and improve the Website
   We use analytics data to understand how visitors interact with the Website, identify technical issues, and improve user experience and content.
   Legal basis: your consent (for non-essential cookies and analytics); our legitimate interests in operating and improving our Website.
   3.3 To comply with legal obligations
   We may process personal data to comply with applicable laws, regulations, court orders, or governmental requests.
   Legal basis: compliance with legal obligations.
   3.4 To protect our rights and ensure security
   We may process personal data to detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
   Legal basis: our legitimate interests in protecting our Website, our business, and our users.
   
   

4. Cookies and Similar Technologies
   We use cookies and similar tracking technologies on the Website, including Google Analytics and Google Tag Manager. These tools help us understand how visitors use the Website and improve its performance.
   You can manage your cookie preferences through our cookie consent banner or your browser settings. For detailed information about the cookies we use, please refer to our Cookie Policy.
   
   

5. How We Share Your Personal Data
   We do not sell your personal data. We may share your personal data with the following categories of recipients:
   Service providers: third-party vendors who provide services on our behalf, such as website hosting, analytics (Google LLC), email delivery, and customer relationship management. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
   Affiliates: companies within our corporate group, where necessary for legitimate business purposes.
   Legal and regulatory authorities: where required by law, court order, or to protect our legal rights.
   Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
   
   

6. International Data Transfers
   Our company is based in Dubai, United Arab Emirates. Your personal data may be transferred to, stored in, or processed in countries outside your country of residence, including jurisdictions that may have data protection laws different from those in your country.
   Where we transfer personal data from the EEA, the United Kingdom, or the UAE to a country that does not provide an adequate level of data protection, we implement appropriate safeguards in accordance with applicable law, including Standard Contractual Clauses or equivalent legal mechanisms.
   
   

7. Data Retention
   We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
   contact form submissions and related correspondence: typically up to 24 months from the date of last interaction, unless a longer retention period is required by law or for legitimate business purposes;
   analytics and cookie data: in accordance with the retention settings of the applicable analytics tool (typically up to 14 months for Google Analytics).
   When personal data is no longer needed, we securely delete or anonymize it.
   
   

8. Your Rights
   Subject to applicable law, you may have the following rights with respect to your personal data:
   Access: to obtain confirmation of whether we process your personal data and to receive a copy of such data;
   Rectification: to request correction of inaccurate or incomplete personal data;
   Erasure: to request deletion of your personal data, subject to legal exceptions;
   Restriction: to request restriction of processing in certain circumstances;
   Objection: to object to processing based on our legitimate interests or for direct marketing purposes;
   Data portability: to receive your personal data in a structured, commonly used, machine-readable format;
   Withdrawal of consent: where processing is based on your consent, to withdraw it at any time, without affecting the lawfulness of prior processing;
   Lodge a complaint: to file a complaint with the competent data protection authority, including the UAE Data Office or, for EEA residents, your local supervisory authority.
   To exercise any of these rights, please contact us at info@sardana.ae. We will respond to your request within the timeframes required by applicable law.
   
   

9. Security
   We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
   
   

10. Children's Privacy
    The Website is not directed at children under the age of 18, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us so that we can delete it.
    
    

11. Third-Party Links
    The Website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.
    
    

12. Changes to This Privacy Policy
    We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on the Website and revise the "Effective date" above. Material changes will be communicated through appropriate means.
    
    

13. Contact Us
    If you have any questions, comments, or requests regarding this Privacy Policy or our data practices, please contact us:
    Sardana Technologies
    Dubai, United Arab Emirates, Dubai Silicon Oasis, Dubai Digital Park, Office no. 2SP2, DTEC Building A5
    Email: info@sardana.ae
    Website: www.sardana.ae