Privacy Policy

1. Information we collect

Information you give us. When you fill in a form, request a demo, create an account or contact our team, we collect the details you provide, such as:

• Your full name, company name and job details;
• Contact details, including your email address and mobile number;
• Business information, such as company type, team size, services offered and trade license details;
• Project information, such as what you are looking for, project requirements and messages you send us;
• Any other information you choose to share with us.

Information collected automatically. When you use the Services, we and our service providers automatically collect certain technical information, such as your IP address, device and browser type, operating system, language, referring pages, the pages you view and the actions you take. We collect this through cookies and similar technologies, as described in section 5.

Information from others. We may receive information about you from business partners, app stores and publicly available sources, for example to verify a professional's trade license or business registration.

2. How we use your information

We use personal data to:

• Provide, operate and maintain the Services, including creating and managing accounts;
• Respond to your enquiries and demo requests, and contact you about the next steps;
• Connect project owners with relevant construction professionals;
• Verify the identity and credentials of professionals using the platform;
• Send service-related messages and, where permitted, information about Inchaa;
• Understand how the Services are used and improve them;
• Protect the Services, prevent fraud and enforce our terms;
• Comply with legal and regulatory obligations.

3. Legal bases for processing

Depending on the situation, we process personal data because it is necessary to provide the Services you request or to take steps before entering into a contract with you; because we have a legitimate interest in operating, securing and improving our business; because we must comply with a legal obligation; or because you have given us your consent, which you can withdraw at any time.

4. How we share information

We do not sell your personal data. We share it only as described below:

• With other users, when you choose to share it, for example when a project owner and a professional connect through the platform;
• With service providers that work on our behalf, such as cloud hosting, customer relationship management, communication and analytics providers, who may only use the data to provide their services to us;
• With professional advisers, such as lawyers and auditors, where necessary;
• With authorities, regulators or courts, where required by law or to protect our rights, users or the public;
• In connection with a merger, acquisition or sale of all or part of our business, subject to this policy.

5. Cookies and analytics

We use cookies and similar technologies to keep the Services working, remember your preferences and understand how visitors use our website. We use Google Tag Manager and Google Analytics to measure traffic and usage; these services may set cookies and process information such as your IP address and device identifiers in accordance with Google's privacy policy.

You can block or delete cookies through your browser settings, and you can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Blocking some cookies may affect how the Services work.

6. International data transfers

Some of our service providers are located outside the United Arab Emirates and Saudi Arabia. When personal data is transferred to another country, we take steps to ensure it receives an adequate level of protection, in line with applicable data protection laws.

7. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to provide the Services, resolve disputes and meet legal, accounting and reporting requirements. When it is no longer needed, we delete or anonymise it.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and secure hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the Saudi Personal Data Protection Law, you may have the right to:

• Access the personal data we hold about you and receive a copy;
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your data;
• Object to or restrict certain processing;
• Withdraw your consent at any time, where we rely on consent;
• Request a copy of your data in a portable format.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. You also have the right to lodge a complaint with the competent data protection authority.

10. Children's privacy

The Services are intended for adults and businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Third-party links

The Services may link to third-party websites and services, such as app stores and social networks. Their privacy practices are governed by their own policies, and we are not responsible for them.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last updated” date above and, where the changes are significant, notify you through the Services or by email.

13. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at:

privacy@inchaa.com