Privacy Notice

Prime Alley Technology LLC is responsible for the personal data described in this notice. Our headquarters is at 2208 Burlington Tower, Business Bay, Dubai, United Arab Emirates, with offices in London, Doha and Islamabad.

Privacy questions and rights requests can be sent to info@primealley.com or by post to the Dubai address above. Please write ‘Privacy request’ in the subject line so it reaches the appropriate team.

When you submit an enquiry, we collect the name, organisation, work email, telephone number and message you provide, together with the page from which the enquiry was sent.

Our hosting and security systems may process technical request information such as IP address, browser or device details, timestamps and request headers. The enquiry endpoint also uses an IP address briefly to limit repeated submissions and reduce abuse.

The site stores one small preference value in your browser: whether you dismissed the website storage notice. The cookie policy explains this value, and the Google Maps embed on the contact page, in more detail.

We use enquiry information to respond, understand the requested work, arrange meetings, prepare a proposal and maintain a record of the commercial conversation. We use technical information to deliver the site, diagnose faults, protect the form and investigate misuse.

Depending on the context, the lawful basis is taking steps at your request before a contract, performing a contract, complying with a legal obligation, consent for an optional feature, or our legitimate interests in operating a secure business website and responding to business enquiries. We consider the effect on your rights before relying on legitimate interests.

Access is limited to Prime Alley personnel who need the information for sales, engineering discovery, operations, finance, legal or security purposes.

We may use hosting, email delivery, workflow or CRM providers to operate the website and deliver an enquiry. The form is configured to send enquiries through an approved webhook, the Resend email service, or both. Professional advisers and public authorities may receive information where reasonably necessary or legally required.

The contact page embeds Google Maps, which loads with the page. Google receives the technical information needed to deliver the map and applies its own privacy terms.

Prime Alley operates from the UAE, United Kingdom, Qatar and Pakistan, and a relevant team member may need to access an enquiry from one of those locations. Some service providers may also process information in other countries.

Where data-protection law requires a transfer mechanism, we use an applicable adequacy decision, contractual safeguards or another lawful mechanism and assess the protection available for the transfer. You may ask us for further information about the safeguard used for your data.

We keep website enquiries only for as long as needed to respond, manage a potential or active business relationship, meet legal and accounting duties and resolve disputes. Enquiries that do not become a customer relationship are normally reviewed for deletion or anonymisation no later than 24 months after the last substantive contact, unless a legal or security reason requires longer retention.

Short-lived security and rate-limiting information may be retained for a much shorter period. Records connected to a customer contract follow the retention terms and legal requirements applicable to that relationship.

Depending on where you are and which law applies, you may have rights to receive information, access personal data, correct it, ask for deletion or restriction, object to processing, receive portable data and withdraw consent. A request may be limited where an exemption or another person's rights apply.

You have an explicit right to object to direct marketing at any time. Use the unsubscribe method in the message or contact info@primealley.com. You may also complain to the relevant supervisory authority, including the UK Information Commissioner’s Office where UK data-protection law applies or the competent UAE data-protection authority where applicable.

We may follow up on a business enquiry or send relevant business communications where the law permits. We do not sell personal data, and we do not use the public website enquiry form to make a decision about you based solely on automated processing that produces legal or similarly significant effects.

You can stop marketing messages at any time without affecting service or operational communications connected to an active request or contract.

We use technical and organisational measures appropriate to the nature of the website data, including access limitation, validation, abuse controls and protected service-provider connections. No internet service can promise absolute security.

This business website is not directed at children and the enquiry form is intended for people acting in a professional capacity. Do not submit children's or other sensitive personal information through the general enquiry form.

We update this notice when the website, suppliers or legal requirements change. The date above shows the latest revision. Material changes will be explained prominently where appropriate.