Privacy Policy

Trade licence No. 1488092  |  Department of Economy and Tourism, Dubai, UAE

Last updated: 01.09.2026

Ammara One For Building Contracting CO. L.L.C S.O.C, trade licence No. 1488092, registered at Office 208-101, Al Raffa, Dubai, United Arab Emirates, operates ammaraone.webflow.io and is the controller of the personal data described in this Policy.

Privacy enquiries and requests under clause 10 should be sent to info@ammaraone.ae.

If we appoint a Data Protection Officer, that person’s contact details will be published here. The absence of a separately named officer does not affect your ability to contact us or to exercise your rights.

This Policy applies to personal data we process through the Website, our enquiry and quotation forms, and correspondence by email, telephone and messaging services, including during the preparation of a quotation.

Where we carry out works under a signed contract, that contract and any notice given under it govern the processing carried out for those works. This Policy continues to apply to everything not covered by such a contract, and nothing in a contract reduces a right you have under applicable law.

This Policy does not apply to third-party websites we link to.

3. 1 Information you provide. Your name, telephone number and email address; the address or location of the property concerned; the type and scope of works you are enquiring about; your budget range and preferred timing where you give them; drawings, photographs, floor plans and specifications you send us; the content of the correspondence that follows; and your recorded consent and marketing choices.

3. 2 Information collected during a site visit. Where you ask us to survey a property, we record measurements, site conditions and photographs, together with access arrangements and the contact details of the person who will attend.

3. 3 Information collected automatically. Your IP address, the approximate location derived from it, device and browser information, operating system, referring page, pages viewed, timestamps, interaction records, cookie identifiers and security logs. Non-essential technologies are used only in accordance with the choices you make under our Cookie Policy.

3. 4 Information from other sources. Where relevant and permitted by law, we may receive personal data from companies within our group, from your architect, designer, property manager or representative, and from publicly available sources. If you provide us with personal data about another person, including a tenant, a co-owner or a member of your household, you confirm that you are authorised to do so and that you have informed that person of this Policy where it is appropriate to do so.

3. 5 Data we do not collect through the Website. We do not request, and the Website is not configured to receive, identity document numbers, title deeds, payment card or bank account details. Please do not submit such information through a Website form.

3. 6 Sensitive personal data. We do not seek sensitive personal data as defined in Federal Decree-Law No. 45 of 2021, and we ask that you do not include it in an enquiry. If sensitive personal data reaches us despite this, we restrict access to it, use it only so far as necessary for the purpose for which it was sent, and delete it once that purpose has ended.

Our processing is subject to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. We process personal data only for a specified purpose and on a ground permitted by that Decree-Law, which includes your consent; steps taken at your request before entering into a contract; performance of a contract; compliance with a legal obligation; the establishment, exercise or defence of a legal claim; and the protection of our legitimate interests where this does not prejudice your rights.

The purposes are:
‍
• responding to your enquiry and arranging a call or a site visit;
• surveying a property, preparing a quotation and agreeing a scope of works;
• performing and administering a contract, including scheduling, site access, procurement, subcontracting, invoicing and payment;
• obtaining permits and approvals from authorities, developers, master communities and owners associations;
• handling snagging, warranty and defect claims, and complaints;
• publishing images of completed projects, in accordance with clause 13;
• operating, securing and improving the Website and our business systems;
• sending you information about our services, where you have separately consented;
• establishing, exercising or defending legal rights, and protecting people, systems and property; and
• complying with the applicable law of the United Arab Emirates and with lawful orders and requests of competent authorities, including the Department of Economy and Tourism and Dubai Municipality.

Visiting the Website or sending an enquiry is not by itself treated as consent to anything beyond handling that enquiry. Where we rely on consent, we ask for it clearly and specifically, we keep a record of it, and you may withdraw it at any time without affecting processing already lawfully carried out. Consent to marketing is asked for separately from a request for services, and separately from consent to publish images under clause 13.

You are not obliged to give us personal data. If you withhold information we need in order to survey a property, to price the works, to obtain an approval, or to perform a contract, we may be unable to provide a quotation or to carry out the works.

6. 1 Internal access is limited to personnel and contractors who need the data for a purpose in clause 4 and who are subject to confidentiality obligations.

6. 2 We may disclose personal data to:

• subcontractors, suppliers, consultants and installers engaged on your project, to the extent needed to price or carry out the works;
• the developer, master developer, owners association or property manager of the building concerned, where their approval or access permission is required;
• Dubai Municipality, the Department of Economy and Tourism, civil defence, utility providers and any other competent authority, where an approval, inspection or disclosure is required;
• companies within our group, where they are involved in responding to your enquiry or in delivering the works;
• providers acting on our instructions, including website hosting, form processing, CRM, email, cloud storage, project management, communications, analytics and cybersecurity providers;
• our banks and payment service providers, auditors, insurers and professional advisers;
• a court, prosecutor, notary or law enforcement authority, in response to a lawful order or request; and
• a purchaser, investor or successor in connection with a genuine corporate transaction, subject to confidentiality.

6. 3 We do not sell personal data and we do not disclose it for the marketing purposes of third parties.

6.4 We require providers who process personal data on our behalf to act only on our documented instructions, to apply appropriate security measures, to restrict their use of sub-processors, and to assist us with deletion, with requests under clause 10, and with incidents. Personal data we hold must not be used by a technology provider to train general-purpose models unless we have expressly approved that use and have a lawful basis for it.

Some of the providers we use may store or process personal data outside the United Arab Emirates. Before a transfer we assess the destination, the recipient, the purpose and the safeguards available.

We transfer personal data only where Articles 22 and 23 of Federal Decree-Law No. 45 of 2021 permit it, which includes transfer to a jurisdiction recognised as providing an adequate level of protection, transfer under contractual undertakings securing a comparable level of protection, and transfer with your express consent.

Current principal hosting and processing locations: United Arab Emirates. You may ask us for further information about the safeguards relevant to your data, subject to confidentiality and security limitations.

We keep personal data only for as long as it is needed for the purpose for which it was collected, and then for any further period required by law. The following periods apply unless a different period is required by law or is justified for a documented reason:

• enquiries and quotations that do not lead to a contract: 24 months after our last substantive contact with you;
• project records, including drawings, specifications, site records, photographs, variations and handover documents: for the duration of the works and for at least 10 years after completion, reflecting the decennial liability of a contractor under the UAE Civil Code (Federal Law No. 5 of 1985, as amended) and the limitation periods that apply to claims arising from it;
• warranty, snagging and defect records: for the length of the applicable warranty or defects liability period and for a reasonable period afterwards;
• accounting, tax and transaction records: for the periods required under Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses, Federal Decree-Law No. 28 of 2022 on Tax Procedures and the regulations issued under them;
• consents to publish images: for as long as the image remains published and for a reasonable period afterwards, so that we can demonstrate that consent was given;
• marketing preferences and opt-out records: while marketing continues and for a reasonable period afterwards;
• security and access logs: ordinarily 12 months, unless a longer period is needed to investigate an incident; and
• cookies and analytics identifiers: as stated in our Cookie Policy.

At the end of the applicable period, personal data is securely deleted, anonymised, or isolated from routine use. Deletion from encrypted backups takes effect through the normal backup rotation cycle. Where a legal hold applies, routine deletion is suspended only for as long as the hold is necessary.

Where the law requires us to keep a record, we keep it even if you ask us to erase it, and we restrict its use to that legal purpose.

9. 1 We apply technical and organisational measures appropriate to the nature of the data and to the risk. These include access control on a need-to-know basis, encryption of data in transit, role-based permissions, logging, secure backups, confidentiality obligations on personnel and subcontractors, assessment of providers, and incident response procedures.

9. 2 No method of transmission over the internet and no method of electronic storage is completely secure. We do not warrant that personal data sent to us or held by us will remain free from unauthorised access in all circumstances.

9. 3 If a personal data breach occurs that may prejudice the privacy, confidentiality or security of personal data, we will investigate, contain and document it, and we will make any notification to the UAE Data Office, to another competent authority, and to the individuals affected that is required by Federal Decree-Law No. 45 of 2021 and the regulations issued under it, within the period and in the manner prescribed.

9. 4 If you believe that data you sent us has been compromised, please tell us at info@ammaraone.ae as soon as you can.

Subject to the conditions and exceptions in Federal Decree-Law No. 45 of 2021, you may ask us to:

• confirm what personal data we process about you and give you information about the purposes, the recipients, the retention periods and the safeguards applied to any international transfer;
• provide a copy of the personal data you gave us in a structured, commonly used and machine-readable format, or transfer it to another controller where this is technically feasible;
• correct or complete personal data that is inaccurate or incomplete;
• erase personal data, subject to clause 8;
• restrict processing in the circumstances provided by law, including while a request under this clause is being considered;
• stop processing carried out for direct marketing, or processing that is not necessary for the purpose for which the data was collected;
• withdraw a consent you have given, including a consent to publish an image; and
• review or object to a decision taken solely by automated processing that produces legal or similarly significant effects for you.

10. 1 To exercise a right, write to info@ammaraone.ae and describe your request. We may ask for proportionate proof of identity and, where you act for someone else, of authority.

10. 2 We aim to respond within 30 days of receiving a complete request. Where a request is complex, or where you have made several requests, we may extend that period and will tell you if we do.

10. 3 We do not ordinarily charge a fee. Applicable law may permit us to refuse a request, or to charge a reasonable fee, where a request is manifestly unfounded or excessive.

10. 4 We may decline a request, in whole or in part, where the Decree-Law permits, including where compliance would conflict with a legal obligation, prejudice an investigation, or affect the rights of another person. If we decline, we will explain why.

We do not take decisions producing legal or similarly significant effects for you solely by automated processing. We may use technology to assist with tasks such as document text extraction, translation, measurement from drawings, search and workflow prioritisation. Substantive decisions, including pricing and acceptance of a project, remain subject to human review.

Where we send direct marketing, we keep it separate from communications about an enquiry or a project, and we send it only where you have consented or where the applicable law otherwise permits. You may opt out at any time using the unsubscribe method in the message, or by writing to us. Opting out does not stop necessary communications about a quotation, a project, a payment, a warranty matter, a safety matter or a legal obligation.

13. 1 We photograph properties in connection with works we carry out, for our own records and, where permitted, for publication on the Website and in our marketing materials.

13. 2 Before we publish an image of a property, we obtain written consent from the owner or occupier, or from the party that commissioned the works. Consent is specific to the intended use, is recorded, and is separate from any other consent you give us.

13. 3 We do not publish the address of a private property, the name of its owner or occupier, or an image in which a person is identifiable, unless that person has given written consent. An image in which a person is identifiable is personal data.

13. 4 You may withdraw consent at any time by writing to info@ammaraone.ae. We will remove the image from the Website within a reasonable period and will not republish it. We may retain a copy in our project records where a legal or evidential reason requires it, in which case its use is restricted to that purpose.

13. 5 Where a design was prepared by a third party, or images were taken by a third-party photographer, we publish them with the permission of the rights holder.

The Website is directed at persons aged 18 and over. We do not knowingly collect personal data from a person under 18 through the Website. If you believe that a child has provided us with personal data, write to us at info@ammaraone.ae and we will delete it.

If you are not satisfied with how we have handled your personal data, please write to us first at info@ammaraone.ae so that we can investigate.

You may also complain to the UAE Data Office, which supervises compliance with Federal Decree-Law No. 45 of 2021. Complaints about our services as a consumer may be made to the Department of Economy and Tourism, Dubai. Exercising either right does not affect any other remedy available to you.

We may update this Policy to reflect changes in law, in our services, in the technology we use, or in how we process personal data. The current version and its effective date are published on the Website. Where a change materially affects processing of personal data you have already given us, we will take reasonable steps to bring it to your attention and, where the law requires it, to obtain your consent.

This Policy is published in English.

Ammara One For Building Contracting CO. L.L.C S.O.C

Office 208-101, Al Raffa, Dubai, United Arab Emirates

info@ammaraone.ae

+971 58 515 5190