This policy explains what personal data we collect when you use this website or become a client, why we collect it, how long we keep it and what rights you have. It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL).
Last updated September 2026
This policy is a working draft under legal review and will be finalised before launch.
NexPinnacle Global is an interior design and fit-out company registered in Dubai, United Arab Emirates. Our trade licence number and registered address are published in the footer of every page on this site. For any question about this policy, or to exercise a right described below, contact us using the details on our Contact page.
From the website: your name, email address, telephone number and anything you choose to write in an enquiry or estimate form. Where you upload a floor plan or photographs, we receive those too.
Automatically: your IP address, browser and device type, the pages you viewed and how you arrived, collected through analytics tools. This is described further in our Cookie Policy.
As a client: the information needed to deliver and invoice a project, including site address, property details, correspondence and payment references.
To answer your enquiry and prepare a quotation. To deliver a project you have engaged us for, including coordinating with authorities, suppliers and subcontractors. To meet our legal, tax and accounting obligations in the UAE. To improve the website and understand which pages are useful.
We do not sell personal data, and we do not use it for automated decision-making that produces a legal effect.
We process personal data with your consent where you have given it, where processing is necessary to perform a contract with you, where we have a legal obligation, and where we have a legitimate interest that does not override your rights. You may withdraw consent at any time; doing so does not affect processing that already took place.
We share only what is necessary, and only with: subcontractors and suppliers working on your project; our accountants and auditors; hosting, email and analytics providers acting on our instructions; and government authorities where the law requires it. Every provider is bound to use the data only for the purpose we give them.
Some of our service providers store data outside the United Arab Emirates. Where that happens, we satisfy ourselves that an adequate level of protection applies, in line with the PDPL, before the transfer takes place.
Enquiries that do not become projects are kept for up to twenty-four months and then deleted. Project records are kept for the period required by UAE tax and commercial law, currently five years from the end of the relevant financial year, and longer where a warranty or dispute requires it.
Under the PDPL you may ask us to confirm what data we hold, provide a copy, correct anything inaccurate, delete data where there is no lawful reason to keep it, restrict or object to processing, and receive your data in a portable format. You may also complain to the UAE Data Office. Requests are answered within thirty days; see our Complaints and Data Requests page.
We use access controls, encryption in transit, and providers who maintain recognised security standards. No system is perfectly secure, so we also limit what we collect and how long we keep it. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as the law requires.
This website is not directed at children, and we do not knowingly collect personal data from anyone under eighteen.
We update this policy when our practices change or the law does. The date at the top shows when it was last revised.
Questions about this policy? Write to us on the contact page.