1. Introduction
This Privacy Policy explains how TMA LLC-FZ collects, uses, stores, discloses and protects personal information in connection with the TMA website, business enquiries, proposals, customer communications, payment interactions and related technology services.
This policy has been prepared with reference to the privacy principles reflected in United Arab Emirates Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data and related UAE privacy, cybersecurity, consumer-protection and electronic-transactions requirements, to the extent they apply to TMA's activities.
The TMA website is intended mainly for business users, corporate customers, vendors, partners and professional contacts. By using the website or communicating with TMA, you acknowledge that personal information may be handled as described in this Privacy Policy.
2. Who We Are and How to Contact Us
TMA LLC-FZ is an enterprise technology company based at Meydan Free Zone, Dubai, United Arab Emirates. TMA designs, builds, integrates and supports software systems, application infrastructure, technology operations and software intellectual-property assets for organisations.
For privacy questions, requests or complaints, contact TMA at info@tma.tech. This is the primary contact point for website privacy matters, data-access requests, correction requests, deletion requests, marketing opt-outs and questions about payment-related personal information.
Where TMA determines the purposes and means of processing personal information for its own website, business administration, customer management, billing and communications, TMA acts as the controller of that information. Where TMA processes personal information strictly on behalf of a customer under a written technology services agreement, TMA may act as a processor or service provider for that customer.
3. Personal Information We Collect
TMA may collect identity and contact information such as your name, job title, company name, business email address, telephone number, country, city, billing details and any other contact details you choose to provide.
TMA may collect enquiry and communication information, including messages submitted through the website, emails, meeting notes, proposal requests, procurement information, service requirements, technical questions, customer-support requests and records of correspondence.
TMA may collect commercial and transaction information, including proposal details, accepted scope of work, invoices, payment status, payment references, billing address, tax or accounting information, subscription status, renewal status and records required for finance administration.
TMA may collect technical and usage information when you use the website, including IP address, approximate location derived from technical data, browser type, device type, operating system, referring pages, pages viewed, date and time of access, log files, diagnostics, security events and information necessary to keep the website reliable and secure.
TMA may collect limited payment-related information from payment providers such as Stripe, including transaction status, payment method type, card brand, partial card details such as last four digits where made available, payment reference, receipt status and fraud or risk signals. TMA does not intend to collect or store full card numbers, card verification codes or complete payment credentials through the website.
TMA does not seek to collect sensitive personal information through the public website. You should not submit passports, national identity documents, health information, financial account credentials, biometric data, passwords, confidential customer data or highly sensitive technical data unless TMA has specifically requested it through an appropriate secure channel for a defined business purpose.
4. Sources of Personal Information
TMA may receive personal information directly from you when you submit a contact form, send an email, request a proposal, join a call, use a payment link, subscribe to updates or otherwise communicate with TMA.
TMA may receive personal information from your organisation, including when a colleague lists you as a contact for procurement, finance, technical coordination, legal review, project delivery or support.
TMA may receive personal information from service providers, payment processors, website hosting providers, analytics tools, security tools, communications platforms, professional advisers, public business registries and publicly available corporate or professional sources.
If you provide personal information about another person, you should ensure that you have authority to do so and that the person understands how TMA may use that information.
5. Why We Use Personal Information
TMA uses personal information to respond to enquiries, evaluate business opportunities, prepare proposals, communicate with prospective and current customers, provide requested information and manage professional relationships.
TMA uses personal information to provide and administer technology services, including project scoping, requirements analysis, software engineering, infrastructure work, integrations, implementation coordination, support, maintenance, reporting and operational communications.
TMA uses personal information to process payments, issue invoices and receipts, manage subscriptions or recurring charges where agreed, reconcile accounts, prevent payment fraud, respond to chargebacks and maintain finance and tax records.
TMA uses personal information to operate, secure, monitor and improve the website, including troubleshooting, performance analysis, security logging, abuse prevention, protection against unauthorised access and maintaining business continuity.
TMA uses personal information to comply with applicable laws, regulations, lawful requests, accounting obligations, tax obligations, sanctions or screening requirements, court orders, dispute-resolution needs and recordkeeping obligations.
TMA may use business contact details to send service, administrative or relationship communications. TMA may also send marketing or informational communications about TMA services where permitted by law or with appropriate consent. You may opt out of non-essential marketing communications at any time.
6. Legal Bases and UAE-Oriented Processing Principles
TMA aims to process personal information fairly, transparently, securely and for specific business purposes. TMA seeks to collect only information that is reasonably necessary for the relevant purpose and to keep it accurate and up to date where practical.
Depending on the circumstances, TMA may process personal information because you have given consent, because processing is necessary to respond to your request, because processing is necessary to perform or prepare a contract, because processing is required for legal obligations, because processing is necessary to protect legitimate business interests, because processing is necessary for security or fraud prevention, or because another lawful basis applies under applicable UAE law.
Where TMA relies on consent, you may withdraw that consent where applicable. Withdrawal of consent will not affect processing already carried out before withdrawal and may not prevent TMA from retaining information where retention is required by law, contract, accounting rules, dispute-resolution needs or legitimate business purposes.
Where TMA acts as a processor for a customer, the customer is generally responsible for establishing the lawful basis for the relevant processing and for giving required notices to the relevant individuals. TMA will process such data in accordance with the applicable written agreement and lawful instructions.
7. Cookies, Analytics and Similar Technologies
The TMA website may use cookies, pixels, local storage, server logs or similar technologies to operate the website, remember technical preferences, understand website traffic, measure performance, detect abuse, improve security and support analytics.
Some cookies or similar technologies are necessary for the website to function correctly. Others may help TMA understand how visitors use the website and which pages are most useful. Browser settings may allow you to block or delete cookies, but disabling cookies may affect website performance or functionality.
TMA does not use website cookies to intentionally collect sensitive personal information. If TMA introduces a materially different cookie or advertising technology practice, this Privacy Policy may be updated to explain that practice.
8. Payments and Stripe
TMA may use Stripe or another payment service provider to process payments, checkout pages, payment links, invoices, subscriptions, renewals, receipts, fraud checks and related billing workflows.
When you make a payment, card details and payment credentials are processed by the payment provider under its own terms and privacy notice. TMA receives information needed to confirm payment, administer the customer relationship, issue records, provide support, handle refunds where applicable and meet accounting obligations.
Charges may be made at checkout, through a payment link, on invoice, before work begins, on milestone completion, at renewal or according to another billing schedule agreed with the customer. The applicable proposal, invoice, checkout page, payment link or written agreement will explain the relevant charge timing.
9. When We Share Personal Information
TMA may share personal information with service providers that support website hosting, cloud infrastructure, payment processing, email, customer communications, analytics, security, accounting, document management, project management, legal support, compliance, professional advice and business administration.
TMA may share personal information with a customer's authorised representatives, vendors, integration partners or technical providers where this is necessary for a requested project, support matter, implementation, payment, procurement process or business relationship.
TMA may disclose personal information where required or permitted by law, regulation, court order, government request, law-enforcement request, regulator request, legal process, tax authority requirement, dispute, investigation, debt collection, audit or to protect the rights, property, security or legitimate interests of TMA, customers, users or others.
TMA may share personal information in connection with a restructuring, merger, acquisition, investment, financing, transfer of business, sale of assets or similar corporate transaction, subject to appropriate confidentiality and legal safeguards where applicable.
TMA does not sell personal information as a standalone business. TMA does not knowingly trade website visitor data for unrelated third-party marketing lists.
10. International Transfers
TMA is based in the United Arab Emirates, but its website, payment, cloud, email, security, analytics, professional services and operational providers may process information in the UAE or other countries.
Where personal information is transferred outside the UAE, TMA aims to use appropriate safeguards in light of the nature of the data, the purpose of the transfer, the recipient, contractual protections, security measures and applicable legal requirements.
By communicating with TMA or using the website, you understand that your information may be processed in jurisdictions that may have different data-protection rules from your place of residence, while still being handled under this Privacy Policy and applicable contractual safeguards.
11. Retention
TMA keeps personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contract, tax, accounting, audit, security, dispute-resolution or legitimate business requirements.
Website logs and analytics records are normally kept for a limited period appropriate to security, diagnostics and performance analysis. Enquiry records may be kept for relationship management and follow-up. Customer, invoice, payment and accounting records may be kept for the period required by applicable financial, tax and corporate recordkeeping obligations.
When information is no longer required, TMA may delete it, anonymise it, aggregate it or securely archive it according to the nature of the information and applicable retention requirements.
12. Security
TMA uses reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction. These measures may include access controls, secure hosting practices, encryption where appropriate, monitoring, logging, vendor controls, internal confidentiality controls and incident-response procedures.
No website, payment process, email system, cloud service or electronic transmission can be guaranteed to be completely secure. You should use care when deciding what information to send to TMA and should avoid sending highly sensitive information through ordinary website forms or unsecured email unless TMA has instructed you to do so.
If TMA becomes aware of a personal-data breach that requires notification under applicable law, TMA will take steps to assess, contain and address the incident and will notify affected parties or authorities where required.
13. Your Rights and Choices
Depending on applicable law and the nature of the information, you may have rights to request access to personal information held about you, receive information about processing, correct inaccurate or outdated information, request deletion, restrict processing, object to certain processing, withdraw consent, request portability where technically feasible or complain to a competent authority.
To exercise a right, contact info@tma.tech and describe your request clearly. TMA may need to verify your identity, authority or relationship to the relevant organisation before responding.
Some rights are subject to legal limits. TMA may decline, limit or delay a request where permitted by law, including where disclosure would affect another person's rights, reveal confidential business information, interfere with legal claims, conflict with recordkeeping obligations, compromise security or prevent TMA from fulfilling a contract or legal obligation.
You may opt out of non-essential marketing communications by following the unsubscribe instructions in the communication or by contacting TMA. Service, security, billing, legal and administrative communications may still be sent where necessary.
14. Customer Data Processed Through Services
Some TMA engagements may involve systems, integrations, infrastructure, software, logs, documentation or environments that contain a customer's data. The treatment of that data is governed primarily by the written agreement between TMA and the customer, including any confidentiality, security, data-processing or project-specific terms.
Customers are responsible for ensuring that they have the rights, notices, consents and lawful bases required for any personal information they provide to TMA or make available through systems on which TMA works.
TMA expects customers not to provide unnecessary personal information and not to include sensitive personal information in project materials unless it is necessary, lawful and covered by appropriate contractual and security arrangements.
15. Children's Privacy
The TMA website and services are intended for business and professional users. They are not directed to children. TMA does not knowingly collect personal information from children through the website.
If you believe that a child has provided personal information to TMA through the website, contact TMA so the matter can be reviewed and appropriate steps can be taken.
16. Third-Party Websites and Services
The website may link to third-party websites, payment providers, cloud services, social-media pages, customer portals or external tools. TMA is not responsible for the privacy practices, security or content of third-party services.
You should review the privacy notices and terms of any third-party services you use, including Stripe or any other payment provider used for a transaction with TMA.
17. Updates to This Privacy Policy
TMA may update this Privacy Policy from time to time to reflect changes in law, guidance, website functionality, payment workflows, technology services, vendors or business operations.
The updated policy will be posted on this page with a revised last updated date. If a change is material, TMA may take additional steps to bring it to your attention where appropriate.
18. Contact Details
TMA LLC-FZ
Meydan Free Zone, Dubai, United Arab Emirates
Website: https://tma.tech
Email: info@tma.tech