Privacy Policy

MorDev Arcane (FZE), a free zone establishment registered at Block B-845-062, SRTIP, Sharjah, UAE under Licence No. 8961, is the controller of the personal data described here. “We”, “us” and “our” mean that company.

For anything to do with your data, write to info@mordevarcane.com. A named person handles these messages and we do not use an automated queue for them.

Our primary regime is UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”), because that is where we are established.

We market and sell internationally. Where you are in the European Economic Area, the EU General Data Protection Regulation (GDPR) applies to our processing of your data, and where you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply. This policy sets out the additional rights and legal bases those regimes give you. Where any of them conflict, we apply whichever gives you the stronger protection.

We do not collect special category data — health, race, religion, political views, biometrics — and we ask that you do not send it to us. We do not buy contact lists.

Where we rely on your consent, you can take it back at any time and it costs you nothing to do so. That does not undo anything we did lawfully beforehand.

Nothing that reaches another company — no video, no advertising signal — is loaded until you have made a choice, anywhere in the world. Whether anonymous analytics starts before you choose depends on where you are visiting from, and section 3 of the Cookie Policy sets that out country by country. The full register — every cookie, who sets it, and how long it lasts — is on our Cookie Policy page.

You can change your mind whenever you like: Cookie Preferences.

We share personal data only with the companies below, only so far as they need it, and only under a written agreement requiring them to protect it. We do not sell, rent or trade personal data, and we do not disclose it for anyone else’s advertising.

When we run advertising for a client, the relevant platform — Meta, Google, LinkedIn or TikTok — also processes data. In that arrangement our client is normally the controller of their own customers’ data and we act on their instructions. Those responsibilities are set out in our Client Services Terms.

We will also disclose data where a court, regulator or law properly requires it, and to our professional advisers where we need advice. If the business is ever sold or restructured, data may transfer to the buyer under the same protections.

Some of the companies above are outside the UAE, mainly in the European Union and the United States. Under PDPL Article 22 we transfer personal data abroad only where the destination has adequate protection, or under contractual safeguards that give your data equivalent protection to UAE law.

Where GDPR applies and data leaves the EEA, we rely on the European Commission’s Standard Contractual Clauses, or on the EU–US Data Privacy Framework where the recipient is certified under it. You can ask us for a copy of the safeguards that apply to a particular transfer.

When a period ends, we delete the data or strip it of anything that identifies you.

Everything is served over encrypted connections. Our database enforces row-level access rules, administrative access requires a separate sign-in restricted to named people, and the credentials that can read your data are held only on our servers and never sent to a browser. We keep the number of people who can reach personal data as small as the work allows.

No system is perfectly secure. If a breach happens that is likely to put you at real risk, we will notify the UAE Data Office and, where the GDPR applies, the relevant supervisory authority — and we will tell you directly without undue delay.

Under the PDPL you have the right to:

• Ask what personal data we hold about you and get a copy of it
• Have anything inaccurate or incomplete corrected
• Ask us to delete it
• Ask us to stop or limit how we use it
• Receive it in a portable, machine-readable form
• Object to processing that causes you harm
• Withdraw consent you previously gave

If the GDPR or UK GDPR applies to you, you have the same rights plus the right to object to processing based on our legitimate interests, and the right not to be subject to a decision made purely by automated means. We do not make any automated decisions about people, and we do not profile you.

To use any of these, email info@mordevarcane.com. We will reply within 30 days. We may ask you to confirm who you are first — not to obstruct you, but so we do not hand your data to someone else. Exercising a right is free; we will only charge if a request is clearly excessive or repetitive, and we will tell you before we do.

This site and our services are for businesses and adults. We do not knowingly collect data about anyone under 18 without verified consent from a parent or guardian. If you believe we hold data about a child, tell us and we will delete it.

Please come to us first at info@mordevarcane.com — most things are fixed quickly. If you are not satisfied, you can complain to a regulator:

• In the UAE, the UAE Data Office
• In the European Economic Area, the data protection authority in your country
• In the United Kingdom, the Information Commissioner's Office (ICO)

If we change what we collect or who we share it with, we will update this page, change the date at the top, and — because your cookie choice is tied to the version of this policy — ask you to make that choice again. We will not quietly widen what we do with data you have already given us.

MorDev Arcane (FZE)
Block B-845-062, SRTIP, Sharjah, UAE
Licence No. 8961
info@mordevarcane.com
+971 55 382 3616