Effective date: 15 September 2025

1. Who We Are and Scope

This Privacy Policy applies to ironbond.ae (the “Website”), operated by IRONBOND BRIDGES & DAMS CONTRACTING L.L.C., Dubai, United Arab Emirates (“IRONBOND”, “we”, “us”, or “our”).

It explains how we collect, use, disclose, retain, and protect personal data when you visit the Website, contact us, submit an inquiry or project document, apply for a vacancy, submit your CV for future opportunities, or use another feature made available through the Website.

Third-party websites and services linked to or embedded in the Website are governed by their own privacy notices.

We handle personal data in accordance with applicable UAE data-protection requirements, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where it applies.

2. Personal Data We Collect

Information You Provide

Depending on the Website feature you use, we may collect:

• Contact details, such as your name, email address, telephone number, and current location.
• Professional information, such as your company, organisation, job title, business relationship, qualifications, employment history, years of experience, availability, visa status, and driving-licence information.
• Inquiry information, including the subject and contents of your message and any follow-up correspondence.
• Documents and project information you choose to upload, such as an RFP, BOQ, tender document, drawing, specification, or other project material.
• Recruitment information and documents you choose to submit, such as your CV, supporting certificates, position applied for, and short introduction.
• Comment information, profile details, media, or other content you submit when those Website features are enabled.
• Account information you provide if public user registration or account functionality is enabled.
• Records of your consent, preferences, requests, and communications with us.

Information Collected Automatically

When you use the Website, our hosting, security, content-delivery, analytics, anti-spam, or similar service providers may automatically collect limited technical information, such as:

• Internet Protocol (IP) address and approximate location derived from it.
• Browser type, browser user-agent string, device type, operating system, language, and screen information.
• Pages viewed, referring page, date and time of access, and Website interaction data.
• Cookie identifiers, security logs, diagnostic information, and information used to detect spam or misuse.

The exact information collected depends on the Website features, plugins, integrations, and cookies that are enabled.

Sensitive and Unnecessary Information

The Website is not intended to collect passwords, payment-card details, government identification numbers, medical information, or other unnecessary sensitive personal data through general inquiry, recruitment, or document-upload forms. Please submit only information relevant to your request and that you are authorised to disclose.

3. Comments and Public Content

If comments are enabled and you leave a comment, we may collect the information shown in the comment form together with your IP address and browser user-agent string to support spam detection and Website security.

An anonymised string created from your email address, sometimes called a hash, may be sent to the Gravatar service to determine whether you use that service. Gravatar is operated by Automattic. You can review the Automattic Privacy Policy. After a comment is approved, your profile picture may be publicly visible beside the comment.

Comments, display names, profile images, and other content you choose to publish may be visible to the public. Visitor comments may also be checked through an automated spam-detection service.

4. Media and File Uploads

If a Website feature allows you to upload images, avoid uploading images that contain embedded location information, including EXIF GPS data. Visitors may be able to download publicly displayed images and extract location information from them.

Files submitted through inquiry, project, or recruitment forms are intended for review by IRONBOND and relevant service providers. Do not upload malicious files, unnecessary personal data, or material you are not authorised to share.

5. How and Why We Use Personal Data

We may use personal data to:

• Receive, review, and respond to inquiries, requests for information, requests for quotation, proposals, and potential project opportunities.
• Review project documents voluntarily submitted to us and assess whether we can assist with a request or project.
• Receive and assess job applications and CVs, communicate with applicants, and consider profiles for current or future opportunities.
• Administer comments, accounts, logins, password resets, or other WordPress functions when those features are enabled.
• Operate, maintain, secure, cache, troubleshoot, and improve the Website and its forms.
• Measure Website performance and understand general usage, where permitted and subject to any required cookie choice.
• Detect and prevent spam, fraud, malicious files, unauthorised access, misuse, or other security incidents.
• Comply with applicable laws, lawful authority requests, record-keeping duties, and legal or regulatory obligations.
• Establish, exercise, or defend legal rights and resolve disputes.

Depending on the circumstances and applicable law, we process personal data with your consent, at your request before entering into a potential agreement or employment relationship, as necessary for an agreement, to comply with a legal obligation, or under another lawful ground permitted by applicable law. Where processing depends on consent, you may withdraw that consent without affecting processing already carried out lawfully.

6. Cookies and Similar Technologies

The Website may use cookies and similar technologies. Essential cookies may be required for security, basic operation, form functionality, caching, or remembering privacy choices. Optional cookies, such as analytics cookies, should be activated only in accordance with the choices presented through the Website’s cookie controls and applicable requirements.

When the relevant WordPress features are enabled, the following standard cookies may be used:

• Comment cookies: If you choose to save your name, email address, and website when leaving a comment, convenience cookies may retain those details for one year.
• Login-page test cookie: A temporary cookie may be used to determine whether your browser accepts cookies. It contains no personal data and is discarded when you close the browser.
• Login and display cookies: Login cookies generally last for two days and screen-display preference cookies for one year. If you select “Remember Me”, your login may remain active for two weeks. Login cookies are removed when you log out.
• Publishing cookie: If you edit or publish an article, a cookie containing the article’s post ID may be stored for one day. It contains no personal data.

You can manage non-essential cookies through the Website’s cookie settings, where available, and through your browser settings. Blocking some cookies may affect Website functionality. A separate Cookie Notice may provide details about the cookies actually active on the Website, including their providers, purposes, and durations.

7. Embedded Content from Other Websites

Pages or articles may include embedded content such as videos, images, maps, or articles. Embedded content behaves in the same way as if you visited the third-party website directly.

Those third parties may collect information about you, use cookies, add tracking technologies, and monitor your interaction with the embedded content, including when you have an account with that third party and are logged in. Their own privacy policies apply to that processing.

8. Website Caching and Content Delivery

The Website uses caching to improve response times and user experience. Caching may temporarily store duplicate copies of publicly displayed web pages. Cache files are temporary, expire according to settings controlled by the Website administrator, and may be purged earlier when necessary.

Our caching or content-delivery configuration may use QUIC.cloud services to process and cache Website data temporarily. Cache information may be accessed where necessary to provide the service or obtain technical support. For more information, review the QUIC.cloud Privacy Policy.

9. When We Share Personal Data

We do not sell or rent personal data. We may disclose it only when reasonably necessary for the purposes described in this Privacy Policy, including to:

• Website-hosting, maintenance, security, caching, content-delivery, email, cloud-storage, analytics, communication, recruitment, and form-processing service providers acting for us.
• Comment, Gravatar, and automated spam-detection services when comments or related features are enabled.
• Professional advisers, insurers, auditors, consultants, or other specialists where necessary and subject to appropriate confidentiality duties.
• Competent government authorities, regulators, courts, law-enforcement bodies, or other parties when disclosure is required or permitted by law.
• A prospective or actual buyer, investor, successor, or transaction adviser in connection with a merger, restructuring, financing, sale, or transfer of all or part of our business, subject to appropriate safeguards.
• Other parties when you direct us to disclose the information or give valid consent.

If account and password-reset functions are enabled and you request a password reset, your IP address may be included in the reset email as part of the standard WordPress process.

Service providers are expected to use personal data only for the services they provide and to apply appropriate security and confidentiality measures.

10. International Data Transfers

Some service providers or technical systems used for website hosting, email, cloud storage, caching, content delivery, security, analytics, recruitment, or communication may process personal data outside the UAE. Where personal data is transferred internationally, we take reasonable steps to use a transfer mechanism and safeguards required by applicable law.

11. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including responding to inquiries, assessing potential projects, reviewing recruitment submissions, maintaining business and security records, complying with legal obligations, and establishing or defending legal claims.

Retention periods may vary depending on the type of information, the status of the inquiry, application, or commercial relationship, applicable limitation periods, and legal or regulatory requirements.

If comments are enabled, a comment and its metadata may be retained indefinitely so follow-up comments can be recognised and approved automatically rather than held in moderation. If public user registration is enabled, profile information may be stored while the account exists; users may be able to view, edit, or delete profile information, except for fields such as the username that WordPress may not permit them to change. Website administrators may also view and edit account information where necessary.

Cache files are temporary and expire or may be purged according to the Website’s caching configuration. When other personal data is no longer required, we will delete it, anonymise it, or securely restrict its use, as appropriate.

12. Data Security

We apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, use, alteration, disclosure, loss, or destruction. Measures may include access controls, secure hosting configurations, malware protection, backups, spam filtering, and appropriate handling procedures.

No internet transmission or storage system can be guaranteed to be completely secure. Please use appropriate care when sending information online and avoid submitting information that is not necessary for your inquiry, application, or request.

13. Your Privacy Rights

Subject to applicable law and any lawful exceptions, you may have the right to:

• Obtain information about how your personal data is processed and request access to it, including an exported file where applicable.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data in circumstances permitted by law.
• Request restriction or suspension of certain processing.
• Object to certain automated processing or decisions, where applicable.
• Request transfer of personal data in an organised and machine-readable format, where applicable.
• Withdraw consent where consent is the basis for processing.
• Submit a complaint to the competent UAE data-protection authority.

These rights do not require us to delete information that we must retain for administrative, legal, security, or legitimate record-keeping purposes. To protect personal data, we may ask you to verify your identity and clarify your request. A request may be limited or refused where permitted or required by law.

The Website is not intended to make decisions about individuals solely through automated processing that produces legal or similarly significant effects.

14. Children

The Website is intended for business and professional users and is not directed to children. We do not knowingly request personal data from children through the Website. If you believe a child has provided personal data to us, please contact us so we can review and, where appropriate, delete it.

15. Third-Party Links and Services

The Website may contain links to or integrations with third-party websites and services, such as maps, hosting, analytics, caching, content-delivery, recruitment, communication, embedded-media, Gravatar, or anti-spam providers. We do not control their privacy practices. Please review the privacy notice of each third party before providing information to it.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Website, enabled WordPress features, plugins, service providers, our practices, or applicable requirements. The revised version will be posted on this page with a new effective date. Material changes may also be highlighted through the Website where appropriate.

17. Contact Us

For privacy questions, requests, or concerns, please contact us through our Contact Us page.