Privacy Notice

1. Who we are

Controller:
[Insert legal entity name]
[Insert registered address]
United Arab Emirates

Website: heylease.ae
Privacy contact: [Insert privacy email, for example privacy@heylease.ae]
General contact: [Insert general email]

heylease.ae provides a digital presence for B2B asset finance and leasing related services in or with a connection to the United Arab Emirates. We may act as an introducer, intermediary or business contact between customers, suppliers, leasing companies, finance providers and other professional partners.

We do not make automated credit decisions through this website.

2. Scope of this Privacy Notice

This Privacy Notice applies to personal data processed through heylease.ae and related communication channels, including email, contact forms, registration forms, login areas, business enquiries and partner communication.

This Privacy Notice does not apply to websites, platforms or services of third parties, even if they are linked from our website. Those third parties are responsible for their own privacy practices.

3. Personal data we collect

Depending on how you use our website and services, we may collect the following categories of personal data:

Contact data: Name, business email address, telephone number, company name, job title, country, city and other contact details you provide.

Account and registration data: Login details, account registration details, password related technical information, authentication data and user account status. Passwords should be stored in protected form and not in plain text.

Business enquiry data: Information you provide when requesting leasing related information, including asset type, equipment category, estimated investment amount, preferred lease term, supplier details, company details, project details and correspondence.

Communication data: Emails, messages, meeting notes, call notes, attachments and other information exchanged with us.

Technical data: IP address, browser type, device information, operating system, access times, log files, pages visited, referring website and similar technical information.

Cookie and analytics data: Cookie identifiers, consent preferences, session information and website usage information, where applicable.

Partner and supplier data: Business contact details of leasing companies, finance providers, suppliers, manufacturers, consultants and other cooperation partners.

Sensitive personal data: We do not intentionally collect sensitive personal data through the website. Please do not send us health data, biometric data, criminal record information, political opinions, religious beliefs or similar sensitive information unless we expressly request it and a lawful basis exists.

4. How we collect personal data

We collect personal data directly from you when you register on heylease.ae, log into your account, complete a form, send us an enquiry, email us, request information, communicate with us, provide documents, subscribe to communication or interact with our website.

We may also receive personal data from business partners, suppliers, leasing companies, professional advisers, publicly available sources, company websites, business networks and referrals, where this is lawful and relevant to our business relationship.

5. Why we process personal data

We process personal data for the following purposes: to operate and secure heylease.ae, to manage registrations and login functionality, to respond to enquiries, to assess your request, to prepare or coordinate leasing related information, to introduce customers, suppliers, leasing companies or finance partners, to manage business relationships, to communicate with you, to arrange meetings, to maintain internal records, to improve our website and services, to prevent misuse, fraud or security incidents, to comply with legal obligations, to establish, exercise or defend legal rights and to send business related updates or marketing communication where permitted.

6. Legal basis for processing

We process personal data where one or more of the following bases apply: your consent, where consent is required, the processing is necessary to take steps at your request before entering into a contract, the processing is necessary to perform a contract with you or your company, the processing is necessary to comply with applicable legal obligations, the processing is necessary to establish, exercise or defend legal rights, the processing is necessary to protect your interests or the interests of another person, or another lawful basis or exception under applicable UAE law applies.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Sharing personal data

We may share personal data with leasing companies, finance providers, suppliers, manufacturers, professional advisers, IT providers, hosting providers, CRM providers, email providers, analytics providers, compliance providers, legal advisers, accountants, auditors, business partners and public authorities where required by law.

We only share personal data where this is necessary for the relevant purpose, where we have a lawful basis or where you have requested or authorised the sharing.

Where a third party processes personal data on our behalf, we aim to use contractual arrangements requiring appropriate confidentiality, security and data protection standards.

8. International transfers

Because our business may involve customers, suppliers, leasing companies, finance providers and technology providers in different countries, personal data may be transferred outside the United Arab Emirates.

Where personal data is transferred outside the UAE, we take steps intended to ensure an appropriate level of protection. Depending on the case, this may include transfer to a country with adequate data protection rules, contractual safeguards, your explicit consent where required, transfer necessary for contractual purposes or transfer necessary to establish, exercise or defend legal rights.

9. Cookies and similar technologies

heylease.ae may use cookies and similar technologies to operate the website, keep the website secure, remember preferences, manage sessions, understand website usage and improve our services.

Cookies may include strictly necessary cookies, functionality cookies, analytics cookies and, where used, marketing cookies.

Strictly necessary cookies are required for the website to work. Non essential cookies should only be used where permitted and, where required, based on your consent.

You can manage cookies through your browser settings and, where available, through our cookie settings tool.

10. Data retention

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

As a general internal rule: website logs may be kept for a limited security period, enquiries may be kept for as long as needed to handle the request and follow up, business relationship data may be kept for the duration of the relationship and a reasonable period afterwards, account data may be kept while the account exists and for a reasonable period after closure, and records relevant to legal, tax, accounting or contractual obligations may be kept for the period required under applicable law.

When personal data is no longer required, we will delete, anonymise or securely restrict it, unless continued storage is legally permitted or required.

11. Security

We use technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include access controls, secure hosting, encrypted transmission where appropriate, password protection, role based access, backup procedures, security monitoring and internal confidentiality rules.

No website, email system or online service can be guaranteed to be completely secure. You should also take care when sending information online.

12. Data breaches

If we become aware of a personal data breach that may affect the privacy, confidentiality or security of personal data, we will assess the incident and take appropriate action.

Where required by applicable UAE law, we will notify the competent authority and affected individuals within the required timeframe and provide relevant information about the breach and the measures taken.

13. Your rights

Subject to applicable law, you may have the following rights in relation to your personal data: the right to receive information about the processing of your personal data, the right to request access to your personal data, the right to request correction of inaccurate or incomplete personal data, the right to request deletion of personal data where legally permitted, the right to restrict processing, the right to stop processing in certain cases, the right to withdraw consent where processing is based on consent, the right to request transfer of personal data where technically feasible and legally applicable, the right to object to direct marketing, and the right to object to decisions based on automated processing where such decisions have legal or similarly significant effects.

To exercise your rights, please contact us using the details in section 1.

We may need to verify your identity before responding. We may refuse or limit a request where permitted by law, for example where the request is excessive, conflicts with legal obligations, affects the rights of others, affects security or relates to legal claims.

14. Direct marketing

We may contact business contacts with information about heylease.ae, leasing related services, cooperation opportunities, market updates or similar business topics where permitted by law.

You may object to direct marketing at any time by contacting us or by using any unsubscribe option provided in the communication.

If you object to direct marketing, we will stop using your personal data for that purpose.

15. Automated decision making

heylease.ae does not make automated decisions through the website that produce legal effects or similarly significant effects on individuals.

In particular, we do not use the website to make automated credit approvals, leasing approvals or financing decisions.

Leasing companies, finance providers or other third parties may carry out their own checks and decision making under their own responsibility and privacy notices.

16. Children

Our website and services are intended for business users and adults. We do not knowingly collect personal data from children.

If you believe that a child has provided personal data to us, please contact us so that we can take appropriate action.

17. Complaints

If you believe that your personal data has been processed in violation of applicable data protection law, please contact us first so that we can review and address your concern.

You may also have the right to submit a complaint to the competent UAE data protection authority or another competent supervisory authority, depending on the circumstances.

18. Changes to this Privacy Notice

We may update this Privacy Notice from time to time, for example if our website, services, technology providers, legal requirements or business processes change.

The latest version will be published on heylease.ae with the updated date.

19. Contact

For privacy related questions, requests or complaints, please contact:

[Insert legal entity name]
Email: [Insert privacy email]
Address: [Insert registered address]
Website: heylease.ae