Privacy Policy
Effective Date: September 28, 2025
Version: 1.0
Owner: Data Protection Office, Hemaya
Website: https://www.hemaya.gov.ae
1. Introduction
Hemaya (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our online services, or interact with us digitally.
By using our website, you agree to this Privacy Policy.
2. Scope
This policy applies to personal data collected through our public-facing website and online services.
It does not apply to internal systems such as the Security Hub Attendance App (which is covered by a separate internal notice).
3. Data We Collect
We may collect the following categories of information:
| Category | Examples | Purpose |
|---|---|---|
| Contact Information | Name, email, phone number, organization | To respond to inquiries or service requests |
| Technical Data | IP address, browser type, device info, usage logs | Website operation, analytics, and security |
| Account Information | Login details (if you register for a service) | Authentication and access management |
| Feedback & Forms | Information submitted via contact or feedback forms | Service improvement and communication |
| Cookies | Session and analytics cookies | Performance, preferences, and user experience |
4. How We Use Your Data
We process your data for the following purposes:
- To provide and improve our services and website functionality
- To respond to your questions, feedback, or service requests
- To ensure the security and proper functioning of our systems
- To comply with legal or regulatory obligations
- To analyze usage trends and improve user experience
5. Legal Basis for Processing
We process your personal data based on:
- Your consent (e.g., when you submit a form)
- Performance of a contract or service
- Legal obligations under UAE law
- Legitimate interests, such as IT security and operational improvement
6. Data Retention
We retain personal data only as long as necessary for the purpose collected or as required by law.
When data is no longer needed, it is securely deleted or anonymized.
7. Data Sharing
We do not sell personal data.
We may share limited information only with:
- Authorized Hemaya departments (for operational needs)
- Service providers under strict confidentiality and data protection agreements
- Regulatory or law enforcement authorities where legally required
8. International Transfers
If personal data is transferred outside the UAE, we ensure appropriate legal safeguards are in place (e.g., contractual clauses or transfers to countries with adequate protection standards).
9. Data Security
We implement strong technical and organizational measures, including:
- Encrypted communication and storage
- Access controls and authentication (SSO/MFA)
- Regular audits and security monitoring
- Incident response protocols via security@hemaya.gov.ae
10. Your Privacy Rights
Under UAE data protection laws, you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent (where applicable)
You can exercise these rights by contacting us at privacy@hemaya.gov.ae.
11. Cookies and Tracking
Our website uses cookies to improve performance and enhance user experience.
You can manage or disable cookies through your browser settings.
For more details, please see our [Cookie Notice] (optional link if you have one).
12. Children’s Data
Our website is not intended for minors under 18. We do not knowingly collect data from children.
13. Updates to This Policy
We may update this Privacy Policy periodically. The latest version will always be available on this page, with the effective date clearly indicated.
14. Contact Us
If you have any questions, concerns, or data protection requests, please contact:
Data Protection Office – Hemaya
📧 Email: Info@hemaya.gov.ae
🌐 Website: https://www.hemaya.gov.ae