Privacy Policy

This Privacy Policy describes how Zolak Group FZE ("Zolak Group", "we", "us", "our"), a company registered in the Sharjah Publishing City Free Zone, United Arab Emirates, under commercial license 4306697.01, collects, uses, stores, shares, and protects personal data of visitors, prospects, customers, and end users of our website, services, and software products. By accessing our website or engaging our services, you confirm that you have read and understood this Policy. If you do not agree, please discontinue use of our website and services.

We collect personal data that you voluntarily provide to us, including: (a) identity data such as your full name, role, and organization; (b) contact data such as corporate email, telephone, and country; (c) technical data automatically collected by our servers and cookies, including IP address, browser type, operating system, device identifiers, referring URLs, and pages visited; (d) communication data when you contact us via email, forms, or other channels; (e) project data you share with us under NDA for the purpose of evaluating, scoping, or executing engineering work. We do not knowingly collect special categories of personal data (race, religion, health, sexual orientation, etc.) nor personal data of minors under the age of 16.

We process personal data only for legitimate purposes, including: (i) responding to inquiries and communicating with you about our services; (ii) preparing quotations, NDAs, master services agreements, and other commercial documents; (iii) delivering, supporting, and maintaining the bespoke software and infrastructure we engineer for you; (iv) improving our website, marketing, and product offerings through aggregated analytics; (v) complying with applicable legal, tax, accounting, and regulatory obligations; (vi) protecting our legal rights, enforcing our Terms of Service, and preventing fraud or abuse. We do not sell personal data to third parties for marketing purposes, and we do not engage in behavioral advertising across third-party networks.

Where the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases: (a) performance of a contract or steps taken at your request prior to entering into a contract; (b) our legitimate interests in operating, securing, and improving our business, balanced against your rights and freedoms; (c) compliance with a legal obligation; (d) your explicit consent, which you may withdraw at any time without affecting prior lawful processing. Where the California Consumer Privacy Act (CCPA/CPRA) applies, you have the right to know, delete, correct, and limit the use of sensitive personal information.

Our website uses a minimal set of cookies and similar technologies. Strictly necessary cookies are required for core site functionality, security, and language preference. We do not currently use third-party analytics, advertising, or social media tracking cookies. If we add such technologies in the future, we will request your prior consent through a cookie banner and update this Policy accordingly. You may block or delete cookies via your browser settings; doing so may affect site functionality.

We do not sell, rent, or trade personal data. We share personal data only with: (a) service providers that act as processors on our behalf under written data processing agreements (hosting, email delivery, customer relationship management); (b) professional advisors (lawyers, auditors) under confidentiality; (c) competent authorities when required by law or to protect our legal rights. All third-party processors are vetted for security and compliance with applicable data protection laws.

Zolak Group is headquartered in the United Arab Emirates. Personal data may be transferred to and processed in countries other than your country of residence, including the UAE, the European Economic Area, the United Kingdom, and the United States. When transferring data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or transfers to jurisdictions deemed adequate by applicable regulators.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Contact form submissions are retained for up to 24 months unless you request earlier deletion. Project-related data under NDA is retained for the duration of the engagement plus a reasonable archive period (typically 7 years) to comply with contractual and statutory obligations.

Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate or incomplete data; (c) request deletion of your data, subject to legal retention requirements; (d) restrict or object to certain processing activities; (e) request portability of your data in a structured, machine-readable format; (f) withdraw consent at any time where processing is based on consent; (g) lodge a complaint with a competent supervisory authority. To exercise any of these rights, contact us at [email protected].

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption in transit (HTTPS/TLS) and at rest, access controls based on the principle of least privilege, regular backups, security audits, and incident response procedures. No system is perfectly secure; we cannot guarantee absolute security of your data.

Our website and services are not directed to children under the age of 16 (or such higher age as required by applicable law). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. The "Last updated" date at the top indicates when the latest revisions came into effect. Material changes will be highlighted on our website. Your continued use of our website or services after such changes constitutes acceptance of the revised Policy.

For any questions, requests, or complaints regarding this Privacy Policy or our handling of your personal data, please contact our Data Protection contact at:

Zolak Group FZE
Business Centre, SPC Free Zone
Sharjah, United Arab Emirates
Email: [email protected]