Legal
Privacy Policy
This Privacy Policy explains how The Production Office FZ LLC, a free zone limited liability company registered in Fujairah Creative City, Media Free Zone, United Arab Emirates, under licence number 18461/2022 ("TPO", "we", "us", or "our"), collects, uses, shares, and protects personal data.
It applies when you visit our website at production.ae, complete our scorecard or join our waitlist or giveaway, or use the Production Office platform and related services (the "Service").
Please read this Policy together with our Terms of Use. Terms used but not defined here have the meaning given in the Terms of Use.
1. Who is responsible for your data
- 1.1For personal data we collect about visitors to our website, people who complete our scorecard or join our waitlist, and account holders, The Production Office FZ LLC is the data controller.
- 1.2The Service is used by businesses ("Organisations"). When an Organisation uploads drawings, documents, or other Customer Content that contains personal data, the Organisation is the controller of that personal data, and we process it on the Organisation's behalf under our Terms of Use and any separate data processing terms. If your personal data appears in an Organisation's Customer Content and you wish to exercise your rights over it, you should contact that Organisation, and we will assist them as needed.
2. The personal data we collect
- 2.1Information you provide to us:
- (a) Account and profile data: your name, email address, the Organisation you belong to, your role, and your password.
- (b) Scorecard and waitlist data: your name, email address, company, and the answers you give when you complete our scorecard or join our waitlist or giveaway.
- (c) Billing data: the details needed to take payment. Card payments are processed by our payment provider, and we do not store full card numbers.
- (d) Communications: the content of messages you send us, for example by email or through support.
- 2.2Information we collect automatically when you use the website or the Service:
- (a) Usage and activity data, including actions you take in the Service such as uploads, version changes, comments, review assignments, approvals, and rejections, with the time of each action and the document version it relates to. This activity data forms part of the Audit Trail described in our Terms of Use.
- (b) Technical data, including your IP address, device and browser type, and log data.
- (c) Cookies, pixels, and similar technologies, as described in clause 4.
- 2.3Customer Content: the drawings, documents, and other material that you or your Organisation upload may contain personal data, such as the names of people involved in a project or an approval chain. We process that personal data on the Organisation's behalf, as set out in clause 1.2.
3. How and why we use your data
- 3.1We use personal data to:
- (a) provide, operate, and maintain the Service, including creating accounts and authenticating Users;
- (b) create and maintain the Audit Trail and the records that are a core function of the Service;
- (c) process payments and manage Tokens;
- (d) communicate with you about the Service, including service messages, security alerts, and support;
- (e) respond to your scorecard or waitlist entry, and, where you have agreed or where we are otherwise permitted, send you marketing about the Service, which you can opt out of at any time;
- (f) measure and improve our advertising, as described in clause 4;
- (g) keep the Service and our users secure, and prevent and investigate misuse;
- (h) improve the website and the Service; and
- (i) comply with our legal obligations.
- 3.2Depending on the purpose, we rely on one or more of the following grounds for processing: your consent; the performance of our contract with you or your Organisation; our legitimate business interests in operating, securing, marketing, and improving the Service; and compliance with our legal obligations. Where we rely on your consent, you can withdraw it at any time.
- 3.3We may create aggregated and de-identified data from personal data and from data about how the Service is used, and use it to operate, improve, and develop the Service and to understand trends in our market. This data does not identify you, your Organisation, or any other individual, our de-identification measures are designed to prevent re-identification using reasonable technical and organisational safeguards, and we may use and retain it without restriction. Your Customer Content remains yours.
4. Cookies, pixels, and similar technologies
- 4.1We use cookies and similar technologies to operate the website and the Service. Strictly necessary cookies are required for core functions, such as keeping you signed in and keeping your session secure.
- 4.2Our website at production.ae uses the Meta Pixel, provided by Meta Platforms. The Meta Pixel places a cookie in your browser and sends Meta information about your visit, such as the pages you view, your IP address, browser details, and, if you are signed in to a Meta service, an identifier that lets Meta match the visit to your account. We use this to measure whether our advertising on Facebook and Instagram is working, to build audiences for that advertising, and to show our advertising to people who have visited our website. Meta may also use this data for its own purposes as set out in Meta's privacy policy at facebook.com/privacy/policy.
- 4.3The Meta Pixel loads when you visit production.ae. You can stop the Meta Pixel and other non-essential cookies in several ways: by blocking third party cookies or scripts in your browser settings; by using a content blocking extension; by adjusting your advertising preferences in your Meta account settings at facebook.com/adpreferences; or, in the European Economic Area, the United Kingdom, or Switzerland, through youronlinechoices.com. Blocking some cookies may affect how the website or the Service works.
- 4.4Our scorecard at scorecard.production.ae is operated on a third party platform that also uses the Meta Pixel and its own cookies. That platform's cookie notice applies alongside this Policy.
5. How we share your data
- 5.1We share personal data with service providers who help us run the website and the Service, under contracts that require them to protect it and to use it only for the purposes we set. These include:
- (a) cloud hosting, content delivery, and infrastructure providers that host our website, application, and databases (including Cloudflare);
- (b) an object storage provider that stores uploaded documents (Cloudflare);
- (c) an email delivery provider that sends service and notification emails (Postmark);
- (d) a payment provider that processes payments (Stripe);
- (e) our scorecard and marketing platform that handles scorecard and waitlist entries (ScoreApp); and
- (f) our advertising measurement provider (Meta Platforms), as described in clause 4.
- 5.2We may also share personal data with our professional advisers, with authorities or other parties where required by law or to protect our rights, and with a buyer or successor if we reorganise or sell our business.
- 5.3We do not sell your personal data.
6. International transfers
- 6.1Some of our service providers are located outside the United Arab Emirates, and your personal data may be transferred to, stored, or processed in other countries. For example, our payment, email, and advertising measurement providers operate from the United States, our hosting and storage provider operates an international network, and our scorecard provider operates from the United Kingdom.
- 6.2Where we transfer personal data to another country, we take steps to make sure it continues to receive a level of protection consistent with the law that applies to us. Those steps include contractual safeguards with each provider that cover confidentiality, information security, notification of any breach, the use of sub-processors, and onward transfers, together with recognised transfer clauses where the destination country requires them.
7. How long we keep your data
- 7.1We keep personal data for as long as we need it for the purposes set out in this Policy.
- 7.2Account data is kept while your account is active. After your account is closed, we make your Customer Content, including the Audit Trail, available for export for thirty days, after which we may delete it, subject to clause 7.3.
- 7.3We keep financial and transaction records for as long as the tax and accounting law that applies to us requires, which is currently five years.
- 7.4Scorecard and waitlist data is kept until you ask us to remove it or you opt out, or for a reasonable period after the relevant campaign ends.
8. How we protect your data
- 8.1We use technical and organisational measures to protect personal data, including encryption of data in transit and at rest, access controls, separation of each Organisation's data, and limits on who can access data.
- 8.2No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. If a data breach affects your rights, we will act in line with our legal obligations.
9. Your rights
- 9.1Subject to applicable law, you have the right to ask us to: give you access to your personal data; correct it; delete it; restrict or object to how we use it; provide it in a portable form; and stop sending you marketing. Where we rely on your consent, you can withdraw it at any time.
- 9.2To exercise your rights, contact us at info@production.ae. We may need to verify your identity, and we will respond within the time required by law.
- 9.3If your personal data is held within an Organisation's account, see clause 1.2, as some requests may need to be directed to that Organisation.
- 9.4You also have the right to complain to the data protection authority in the country where you live, or where you believe a breach of your rights occurred, if you have concerns about how we handle your personal data.
10. Children
- 10.1The Service is for business and professional use and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps.
11. Changes to this Policy
- 11.1We may update this Policy from time to time. Where a change is material, we will give reasonable notice, for example by email or through the Service. The date at the top of this Policy shows when it was last updated.
12. How to contact us
- 12.1If you have questions about this Policy or how we handle your personal data, contact us at info@production.ae, or write to The Production Office FZ LLC, P.O. Box 4422, Fujairah, United Arab Emirates. Our representative for data protection matters is Wei Li, General Manager.