Privacy notice.

01 Controller

Who is responsible for your data.

The controller is the entity named in the block below. It decides why and how personal data reaching NOVA RFL is handled, and it answers for that on the telephone shown.

NOVA RFL Logistics Holding Company Ltd
+971 4 388 0037
privacy@novarfl.com

02 Scope

What this notice covers.

It covers personal data we receive through this website, through the mailboxes published on it, and in the correspondence and meetings that follow from either. It applies to everyone who writes to us: landowners and their agents, occupiers, shippers, investors, suppliers, journalists and candidates.

03 What we collect

Three kinds of data, and no more.

What you send us. Your name, the organisation you act for, your email address and telephone number, and the content of your message together with anything attached to it — title documents, site plans, requirement briefs, cargo details, mandates.

What follows from it. Our correspondence with you, meeting notes, and the record of where a matter stands, kept so the next person you speak to already knows the facts.

What the servers record. Standard technical logs generated when a page is requested: the IP address of the request, the time, the page, and the browser's own user-agent string. These are security and reliability records.

04 Why we use it

Purposes, stated one by one.

• To answer you, and to carry the conversation forward across the people who need to take part in it.
• To assess a site, a requirement, a cargo flow or an investment proposition against our published criteria.
• To negotiate, enter into and perform contracts, and to administer them afterwards.
• To keep the corporate, tax, accounting and anti-money-laundering records that UAE law requires us to keep.
• To keep this website available, secure and correct.

05 Lawful basis

The ground each purpose stands on.

Under the PDPL we rely on the performance of a contract, or steps taken at your request before entering one, for the commercial correspondence above; on compliance with a legal obligation for the statutory records; and on our legitimate interest in running, securing and developing the business for the remainder. Where consent is the right basis — a mailing you have asked to receive — we ask for it, and you may withdraw it at any time without affecting what was done before.

06 Sharing

Who else sees it.

Our professional advisers — legal, tax, audit and technical consultants — under their own duties of confidence. Service providers who host our systems and deliver our email, bound by written processing terms that permit them to act on our instructions only. Counterparties to a transaction you are part of, and the authorities and regulators entitled by UAE law to ask. Personal data is never sold, rented or traded.

07 Transfers

Data that leaves the Emirates.

Some of our providers operate outside the United Arab Emirates. Where personal data moves to another jurisdiction we transfer it to a country the UAE recognises as providing an adequate level of protection, or under the contractual safeguards the PDPL requires, and we hold the provider to the same standard of care that applies here.

08 Retention

How long we keep it.

For as long as the purpose it was collected for is live, and then for the period the applicable UAE statutes require records to be retained. Commercial correspondence that leads nowhere is reviewed and cleared on a regular cycle. Server logs are held for a short operational window and then discarded.

09 Your rights

What you can ask us to do.

• Information and access. To be told what we hold about you and how it is being used, and to receive a copy.
• Correction and erasure. To have inaccurate data put right, and data we no longer have a basis to hold deleted.
• Restriction. To have processing paused while a question about accuracy or basis is resolved.
• Portability. To receive the data you gave us in a structured, machine-readable form, or to have it passed to another controller.
• Objection. To object to processing carried out on the basis of legitimate interest, and to any decision produced by automated processing alone.
• Withdrawal of consent. Where consent is the basis, to withdraw it at any time.
• Complaint. To bring the matter to the UAE Data Office if our answer does not satisfy you.

Write to privacy@novarfl.com. We answer within the period the PDPL allows, and we will say what we have done and why.

10 Cookies and measurement

This site is quiet.

These pages set no cookies, run no third-party analytics and carry no advertising or social tracking scripts. The typeface is served from this domain, so requesting a page here contacts this domain and nothing else.

11 Security

How it is protected.

Transport is encrypted. Access to correspondence and documents is granted to the people who need it for the matter in hand, on named accounts with multi-factor authentication, and is reviewed as roles change. Documents you send us — title, drawings, mandates — are held on the same terms as our own.

12 Changes

Keeping this notice current.

When our handling of personal data changes, this notice changes with it and the revised text is published here. Where a change materially affects you and we hold a route to reach you, we will use it.