Last updated: 10 October 2026

1. Who we are

INFOCORE COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE TRADING CO. L.L.C ("Infocore", "we", "us" or "our") is a company licensed in Dubai, United Arab Emirates under Commercial Licence No. 1218559.

Our approach to privacy is intended to reflect applicable requirements under the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data, which has been in force since 2 January 2022, together with other applicable legal and regulatory requirements.

This Privacy Policy explains how Infocore collects, uses, discloses, stores and protects personal data when individuals:

visit our websites;
contact us or submit an enquiry;
communicate with our sales, support or project teams;
attend an event or meeting involving Infocore;
use an Infocore product, application, portal, API or hosted service where this Policy is referenced;
apply for a role with Infocore; or
otherwise interact with us in a context where Infocore determines the purposes and means of processing.

Where Infocore processes personal data only on the documented instructions of a business customer, that customer normally acts as the Controller and Infocore normally acts as the Processor. In those situations, the customer's privacy notice and the applicable agreement with Infocore govern Customer Data.

Privacy enquiries: privacy@infocore.ai

2. Scope

This Policy applies to personal data processed by Infocore as a Controller. It also explains at a high level how we handle data when we act as a Processor for customers.

Different or additional notices may apply to specific products, recruitment, projects, events or jurisdictions. If a specific notice conflicts with this general Policy, the more specific notice will govern for that activity.

3. Personal data we may collect

Depending on how you interact with us, we may collect:

Identity and contact data

Name, company, job title, business email, telephone number, country, contact preferences and similar information.

Enquiry and relationship data

Messages, meeting notes, project requirements, proposal history, support communications, feedback and records of our relationship.

Account and authentication data

Usernames, account identifiers, access permissions, authentication records and security-related account information.

Technical and usage data

IP address, browser and device information, approximate location derived from IP, timestamps, diagnostic information, application logs, security events, pages/features used and similar technical data.

Commercial and transaction data

Quotations, purchase orders, contracts, subscriptions, invoices, payment-status information and product/service history. We generally use regulated payment providers rather than intentionally storing full payment-card data ourselves.

Project and customer data

Where customers provide data to us for implementation, support, integration, hosting or development, that data may include personal data determined by the customer. This can vary significantly by project.

AI interaction data

Where an Infocore solution includes AI functionality, data may include prompts, instructions, files, retrieved content, tool calls, system events, model outputs and feedback, depending on the configuration of the solution.

Images and other media

Photographs, video, audio or other media may be processed in specific projects, events, support cases or security contexts.

Sensitive or biometric data

Infocore does not seek sensitive or biometric data through its general website. Certain customer projects may involve sensitive data, images, facial features, fingerprints or other biometric/identification data. Such processing must be specifically authorised, contractually defined, appropriately secured and handled under a project-specific privacy and compliance assessment.

Recruitment data

CVs, work history, qualifications, portfolio links, interview notes, availability and other recruitment information.

4. How we collect data

We may receive personal data:

directly from you;
from your employer or organisation;
through our website, forms, applications and support channels;
from business partners, resellers, implementation partners or event partners where permitted;
from publicly available professional sources;
automatically through website/application technologies;
from customer systems that Infocore is engaged to integrate, support or operate; and
from service providers acting on our behalf.

5. Why we process personal data

We may process personal data to:

respond to enquiries and communicate with you;
prepare proposals and enter into contracts;
deliver, configure, integrate, host, support and improve technology solutions;
create and administer accounts;
provide customer support;
secure our systems, detect misuse, investigate incidents and prevent fraud;
manage suppliers, partners and business relationships;
bill customers and maintain financial records;
operate our website and understand its performance;
send requested or permitted business communications;
recruit and evaluate candidates;
comply with legal, regulatory, tax, accounting and contractual obligations;
establish, exercise or defend legal rights;
maintain business continuity, backups and audit records; and
use AI-enabled functions where relevant to a product or service.

We process personal data only where there is an appropriate basis under applicable law, which may include consent, necessity to perform or prepare a contract, compliance with legal obligations, protection of rights or other grounds permitted by applicable law.

6. Controller and Processor roles

Infocore as Controller

We generally act as Controller for our website, business contacts, sales activity, billing, supplier management, security, recruitment and our own corporate operations.

Infocore as Processor

When a customer determines why personal data is processed and asks Infocore to process that data to build, host, integrate, support or operate a solution, Infocore generally acts as Processor.

In Processor situations:

the customer is responsible for ensuring it has authority and an appropriate legal basis to collect and use the data;
Infocore processes the data according to documented instructions and the applicable contract;
Infocore uses subprocessors only under appropriate contractual safeguards; and
data is returned or deleted in accordance with the contract, applicable law and technical backup cycles.

7. AI, agentic systems and automated processing

Infocore develops and integrates AI-enabled solutions, including systems that may use large language models, retrieval-augmented generation, automation and software agents.

Depending on the project, an AI system may process prompts, documents, business data or other customer-provided information. Infocore may use third-party AI or cloud providers for model inference, hosting or related functionality.

Unless expressly agreed in writing:

Infocore does not use customer confidential data to train a general-purpose model for unrelated customers;
AI output is not guaranteed to be accurate, complete or unique;
material decisions affecting individuals are not made solely from AI output without appropriate human review where required; and
high-risk AI uses are subject to additional review, controls and contractual terms.

If a system uses automated processing that may have legal or similarly significant effects on an individual, Infocore and the relevant customer must determine their respective legal obligations before deployment.

8. Biometrics, facial recognition and identification technology

Some technology projects may include identity-verification, biometric or image-based functionality. These functions are not part of ordinary website analytics.

Where such functionality is used, Infocore will require the project to define:

the purpose of processing;
Controller and Processor roles;
the legal basis and any required consent;
categories of biometric or identifying data;
access rights;
storage location;
retention and deletion;
security controls;
third-party providers; and
whether a Data Protection Impact Assessment or Data Protection Officer is required.

Infocore will not treat a general Privacy Policy as blanket permission for a customer to collect or process biometric data.

9. Sharing personal data

We may disclose personal data to:

cloud, hosting and infrastructure providers;
business software, email, collaboration and support providers;
AI/model providers where used for a relevant service;
professional advisers such as lawyers, accountants and auditors;
implementation partners, subcontractors and suppliers where necessary;
payment providers;
government, regulatory, law-enforcement or judicial authorities where disclosure is legally required or permitted;
parties involved in a merger, restructuring, financing or sale of all or part of the business, subject to appropriate safeguards; and
other parties where you or the relevant customer directs or authorises us to do so.

We do not regard personal data as a product for sale and do not sell personal information as a standalone commercial activity. We do not treat disclosure to a service provider acting on our instructions as a sale of personal data.

10. Subprocessors and third-party service providers

Infocore may use third-party providers to support hosting, AI functionality, communications, analytics, security, customer support, development and other operations.

For customer-processing activities, applicable subprocessors are identified in the relevant contract or provided to the customer on request.

11. International data transfers

Technology services may involve processing in countries other than the country where the data was collected.

Where personal data is transferred outside the UAE or another relevant jurisdiction, Infocore will apply the transfer mechanism required by applicable law. Depending on the circumstances, this may include transfer to a jurisdiction recognised as providing adequate protection, contractual safeguards, consent where legally valid and appropriate, or another lawful transfer mechanism.

12. Retention

Infocore keeps personal data only for as long as reasonably necessary for the purpose for which it was collected, to satisfy contractual obligations, maintain security and audit records, comply with legal/accounting/tax requirements, or establish and defend legal rights.

Our retention schedule normally applies the following periods:

general website enquiries: normally up to 24 months after the last meaningful interaction unless the enquiry becomes a customer relationship;
customer business contacts: during the relationship and for a reasonable period afterwards;
support records and project communications: according to the contract and our retention schedule;
recruitment records for unsuccessful applicants: normally up to 12 months unless a longer talent-pool period is separately agreed;
accounting, tax and key commercial records: for the applicable statutory period, commonly seven years under our retention schedule where this safely covers overlapping UAE requirements;
security logs: according to system risk, contract and our security/retention schedule;
backups: according to rolling backup cycles;
biometric or other highly sensitive project data: only for the shortest documented period needed for the project or as instructed by the Controller, with no indefinite retention by default.

Where data is subject to a legal hold, dispute, investigation, audit or regulatory requirement, deletion may be suspended until the hold ends.

13. Security

Infocore uses technical and organisational measures appropriate to the nature and risk of the processing. Depending on the system, measures may include:

access control and least privilege;
multi-factor authentication;
encryption in transit and, where appropriate, at rest;
secure development practices;
logging and monitoring;
vulnerability and patch management;
backup and recovery controls;
separation of production and development access;
confidentiality obligations;
vendor security review; and
incident-response procedures.

No internet-connected system can be represented as absolutely secure. Infocore therefore focuses on reasonable, risk-based safeguards and continuous improvement.

14. Cookies and similar technologies

Our website may use necessary, preference, analytics or other technologies depending on the current site configuration.

Non-essential technologies are used in accordance with applicable consent requirements and user preferences. Further details are available in our Cookie Policy.

15. Marketing communications

Where required, Infocore obtains appropriate consent before sending marketing communications.

You may unsubscribe using the method provided in the communication or by contacting privacy@infocore.ai. We may keep a minimal suppression record so that we can respect an opt-out.

SMS or other telecommunications marketing must also comply with applicable UAE telecommunications marketing requirements, including consent and unsubscribe obligations.

16. Your rights

Depending on the law applicable to you, you may have rights relating to your personal data, including rights to:

obtain information about processing;
access personal data;
request correction of inaccurate data;
request deletion where applicable;
restrict or stop certain processing;
object to direct marketing;
obtain portable data where applicable;
object to certain automated decisions and request human review where applicable; and
withdraw consent where processing is based on consent.

To make a request, contact privacy@infocore.ai.

We may need to verify identity before acting on a request. Some rights are subject to legal exceptions, retention obligations, contractual restrictions or the role Infocore is performing.

Where Infocore acts only as a Processor, we may redirect the request to the relevant customer/Controller or assist that customer in responding.

17. Children

Infocore's general corporate website and business services are principally directed toward organisations and professional users and are not designed for the intentional collection of personal data directly from children.

Where a specific customer project involves minors, appropriate requirements concerning authority, notices, consent, safeguarding and data protection should be addressed as part of that project's design and contractual arrangements before the applicable processing is undertaken.

18. Third-party websites and services

Our website or solutions may link to or integrate third-party services. Those third parties may process personal data under their own terms and privacy notices. Infocore is not responsible for independent third-party processing that is outside Infocore's control.

19. Government and legal requests

Infocore may disclose data where required by applicable law, a valid court order, lawful regulatory request or other legally binding process. Where legally permitted and appropriate, Infocore will seek to limit disclosure to what is required.

20. Changes to this Policy

We may update this Policy to reflect changes in our services, technology, law or business practices.

The current version will show its last-updated date. Material changes may be communicated through the website or other appropriate channels.

21. Contact

Privacy enquiries:privacy@infocore.ai

Legal enquiries:legal@infocore.ai

Security matters:security@infocore.ai

General enquiries:hello@infocore.ai

Company:

INFOCORE COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE TRADING CO. L.L.C

Dubai, United Arab Emirates

Commercial Licence No. 1218559