Privacy Policy

The Elevator Factory (“TEF”, “we”, “us”) is the controller responsible for your personal data — the party that decides how and why it is processed.

Controller: [TEF legal entity name]. Registered address: [registered office address, Emirate, United Arab Emirates]. For any privacy question, or to exercise your rights, contact our privacy team at [privacy contact email] or hello@theelevatorfactory.com.

Information you give us: when you submit an enquiry, request a site visit, or contact us (including via WhatsApp or email), we collect your name, phone number, email address, and any details you choose to share about your property or project.

Information we collect automatically: when you browse the site we collect limited technical and usage data — such as IP address, approximate location, device and browser type, referring pages, and the pages you view — through cookies and similar technologies. See our Cookie Policy for details.

We do not intentionally collect special-category data (for example health, religion, or biometric data) through this website, and ask that you do not send it to us.

To respond to your enquiry and prepare a proposal, and to take steps at your request before entering into a contract — legal basis: performance of a contract / steps prior to a contract, and your consent where required.

To communicate with you about your project and our services — legal basis: our legitimate interest in responding to and servicing enquiries, or your consent.

To operate, secure, and improve the website and understand how it is used — legal basis: our legitimate interests and, for non-essential analytics cookies, your consent.

To send marketing about our lifts and services — only where you have consented; you can withdraw consent at any time.

To comply with legal, regulatory, tax, and record-keeping obligations, and to establish or defend legal claims — legal basis: compliance with a legal obligation and our legitimate interests.

We use cookies and similar technologies to run the site, remember your preferences, and — with your consent — measure how the site is used (for example with Google Analytics). Non-essential cookies are set only after you accept them, and you can change or withdraw your choice at any time. Full details, including the cookies we use and how to manage them, are in our Cookie Policy.

We do not sell your personal data. We share it only where necessary, with: service providers who process data on our behalf under contract — including website hosting and infrastructure ([e.g. AWS]), analytics ([e.g. Google]), and communications/messaging tools; our professional advisers (such as legal and accounting); and public authorities or regulators where we are required to do so by law.

Any provider that processes personal data for us is bound by contract to protect it and to use it only for the purposes we specify.

Some of our service providers store or process data on servers outside the United Arab Emirates (and potentially outside your own country). Where personal data is transferred across borders, we take steps to ensure it remains protected — for example by using providers that offer an adequate level of protection or by putting appropriate contractual safeguards (such as standard contractual clauses) in place, consistent with the UAE PDPL and GDPR.

We keep personal data only for as long as necessary for the purposes set out above. Enquiry and contact details are typically retained for [e.g. 24 months] after our last contact, unless we enter into a contract with you (in which case related records are kept for the period required by UAE law), or a longer period is needed to meet a legal obligation or resolve a dispute. When no longer needed, data is securely deleted or anonymised.

We apply reasonable technical and organisational measures — including access controls, encryption in transit, and trusted infrastructure providers — to protect personal data against loss, misuse, and unauthorised access. No online transmission or storage is ever completely secure, but we work to protect your data and to review our measures regularly.

Subject to the conditions in applicable law, you have the right to: access the personal data we hold about you; have inaccurate data corrected; request deletion of your data; restrict or object to certain processing; request that your data be transferred to you or another provider (data portability); and withdraw consent at any time where processing is based on consent (without affecting processing already carried out).

To exercise any of these rights, contact us at [privacy contact email] or hello@theelevatorfactory.com. We will respond within the timeframes required by law. You may also lodge a complaint with the UAE Data Office (the federal supervisory authority) or, if you are in the EU/EEA, your local data protection authority.

This website is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time to reflect changes in our practices or the law. The “Last updated” date above shows when it was last revised. Material changes will be made clear on this page.