This Privacy Policy explains how Emirates Compliance collects, uses, shares, and protects personal data when you visit our website, request a demo, or use our workforce-compliance platform. We are committed to handling personal data in line with the UAE Personal Data Protection Law and recognised international standards.
Emirates Compliance is a UAE workforce-management and labour-hire compliance platform that helps businesses manage worker onboarding, visa and document tracking, Wage Protection System (WPS) payroll files, site attendance, and audit-ready reporting.
This platform, "Emirates Compliance", is operated by BlackCat Group holdings L.L.C-FZ, a company registered in Dubai, United Arab Emirates, trading as "Emirates Compliance" ("we", "us", "our"). For any privacy matter, contact us at [email protected].
Emirates Compliance handles personal data in two distinct capacities, and it is important to understand which applies to you:
If you are an employee whose data was entered into the platform by your employer, your employer is the controller of that data. Please direct requests about it to your employer — see Requests about worker data.
When our business customers use the platform, they may upload personal data about their workers — such as identity, visa, Emirates ID, labour-card, payroll, training, and attendance data, which can include sensitive categories (for example health or biometric information) and location data. We process this data as a processor on the customer's instructions, as described in section 2.
As a controller, we use personal data to: respond to your enquiries and demo requests; provide, operate, secure, and improve our website and platform; manage accounts and process subscriptions and payments; provide customer support; send service and, where permitted, marketing communications; and comply with our legal obligations.
Under the UAE Personal Data Protection Law, we rely on the following legal bases:
We do not use personal data for automated decisions that produce legal or similarly significant effects about you without a lawful basis and appropriate safeguards.
Some of our service providers operate outside the UAE, so your personal data may be transferred to and processed in other countries.
Where we transfer personal data outside the UAE, we do so in accordance with the UAE Personal Data Protection Law — either to countries recognised as providing an adequate level of protection, or subject to appropriate safeguards (such as standard contractual clauses), or on another lawful basis such as your explicit consent or the necessity of the transfer to perform a contract.
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit and at rest, access controls and role-based permissions, network monitoring, and staff confidentiality obligations. No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent UAE data protection authority and, where required, affected individuals, without undue delay and in accordance with applicable law. Where we act as a processor, we will notify the relevant controller (our customer) so they can meet their own obligations.
We keep personal data only for as long as necessary for the purposes described in this policy, including to provide our services, meet legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it. For data we process on behalf of a customer, retention and deletion are governed by our agreement with that customer, and we return or delete it on termination as instructed.
Subject to applicable law, you have the following rights over your personal data:
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity, and we aim to respond within 15 days or as required by law. Exercising your rights is free unless a request is manifestly unfounded or excessive.
Where your personal data was uploaded to the platform by an employer or agency, that organisation is the data controller and decides how the data is used. In that case we act as a processor and cannot grant access, correction, or deletion requests directly. Please contact your employer or the organisation that manages your record; we will support them in responding to your request as required under our agreement with them.
Our website and platform are intended for businesses and their authorised users, and are not directed to children. We do not knowingly collect personal data from individuals under the age of 18 through our website. If you believe a child has provided us personal data, please contact us so we can take appropriate action.
Where permitted, we may send you information about our products, services, and events. You can opt out at any time by using the unsubscribe link in our emails or by contacting us. Opting out of marketing does not stop essential service communications, such as billing or security notices.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or the law. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this page periodically.
If you have questions about this policy or how we handle personal data, or if you wish to exercise your rights, please contact us. If you are not satisfied with our response, you have the right to lodge a complaint with the competent UAE data protection authority.
We're happy to help with any question about your data or this policy.
