Privacy Notice
1. Scope and roles
This Privacy Notice explains how Scan Shield Cloud FZCO processes personal data in connection with this website, access requests and the Scan Shield Cloud B2B platform.
For website visitors, business contacts and applicants, Scan Shield Cloud FZCO acts as a data controller for the information it determines how and why to process. Where the platform processes customer-controlled data solely to provide contracted infrastructure services and on the customer’s documented instructions, the parties may allocate controller and processor responsibilities in the applicable service agreement or data processing addendum.
2. Applicant and business-contact data
When you submit a request, we may process your name, work email address, organization, request category, intended-use description, IP address, user-agent, request identifier and related correspondence.
3. Purposes of processing
- individual verification of B2B access requests and managed registration;
- responding to legal, privacy, security and abuse enquiries;
- fraud, abuse and security prevention;
- service administration, troubleshooting and operational security;
- establishing, exercising or defending legal and contractual rights; and
- meeting applicable legal or regulatory obligations.
4. Customer traffic and service telemetry
When contracted infrastructure processes customer traffic, technical information such as IP addresses, request metadata, routing information, timestamps, service health signals and security events may be processed as necessary to deliver, secure, troubleshoot and operate the service.
Customer payload content is not used for advertising or unrelated profiling. Content may transit or be buffered by infrastructure where technically necessary to provide the service. Any contractual retention, logging and data-processing commitments should be specified in the applicable service agreement or data processing addendum.
5. UAE data protection
Personal-data processing is intended to be handled in accordance with applicable UAE data-protection requirements, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data. Additional data-protection regimes, including the GDPR, apply only where their territorial and substantive scope is met.
6. Sharing and service providers
We do not sell access-request personal data. Data may be processed by infrastructure, hosting, security or communication providers where reasonably necessary to operate the service, or disclosed where required by applicable law, regulation, court order or competent authority.
7. Retention
Applicant, security and operational records are retained only for periods reasonably necessary for the purposes described above, contractual requirements, security investigation, dispute handling and applicable legal obligations.
8. Security
We use technical and organizational measures intended to protect personal data against unauthorized access, alteration, loss or disclosure. No internet-connected service can guarantee absolute security.
9. Requests and contact
Privacy and data-protection enquiries can be submitted through the website contact form by selecting Legal / privacy. Requests are handled individually and may require identity or authority verification.