Privacy Policy

MDX Solutions Middle East is an ICT solutions and services provider operating across the UAE, KSA, Qatar and the wider region, with its head office in Dubai. MDX Solutions Middle East is the controller of the personal information described in this policy — that is, we decide why and how it is handled.

Where a service is delivered through another MDX entity or an affiliate, that entity may act as a joint controller for the information relating to that service. Contact details are given in section 12.

We collect personal information in two ways: information you submit directly, and information generated automatically when you visit the site.

• Contact Us form. Your name, an email address or phone number, and the message you write. You choose whether to give us an email address or a telephone number; we do not require both.
• Careers applications. Your first name, last name, email address, mobile number, a short description of yourself, and the CV file you upload, together with the role you applied for.
• Direct correspondence. If you email or telephone us using the addresses and numbers listed on the Contact Us page, we keep the details you provide in that conversation.
• Technical data. Standard server and security logs — IP address, browser type, device type, and the pages requested — which our hosting provider records automatically for operation and abuse prevention.

We do not ask for sensitive personal information (such as financial accounts, national identifiers, or health data) through this website, and we ask that you do not include it in your message or CV.

We use the information you submit only for the purpose you provided it for:

• Contact enquiries — to respond to your message, prepare a proposal, and continue the conversation if you ask us to.
• Careers applications — to assess your application, contact you about interviews, and, where relevant, onboard you if you are offered a role.
• Site operation and security — to keep the website available, diagnose faults, and detect and prevent misuse.
• Legal obligations — where we are required by law or a competent authority to retain or disclose information.

We do not sell your personal information, and we do not use the contents of your message or CV for unrelated marketing. If we ever need to use your information for a purpose beyond the one you gave it to us for, we will tell you first and, where the law requires it, ask for your consent.

Where applicable data protection law requires a legal basis for processing, we rely on: your consent (given when you submit a form); steps taken at your request before entering into a contract, such as responding to a job application or preparing a quotation; our legitimate interests in running and securing our business, balanced against your rights; and compliance with legal obligations that apply to us in the United Arab Emirates and any other jurisdiction in which we operate.

We share your information only where necessary and with parties who need it for the purposes described above:

• Our teams across MDX Solutions Middle East who handle sales, technical pre-sales, and recruitment.
• Service providers who host this website, run our CRM and file storage, and deliver our email — including our technology partners, acting under contract and on our instructions.
• Professional advisers and auditors where needed for legitimate business or compliance purposes.
• Authorities where disclosure is required by law, regulation, court order, or to protect the rights, property, or safety of MDX, our clients, or others.

Information may be processed in countries other than the one you submit it from. Where that happens, we take reasonable steps to ensure an appropriate level of protection for your information.

We keep personal information only for as long as it serves the purpose it was collected for, and then delete or anonymise it.

• Contact enquiries are kept for up to 24 months from our last meaningful exchange, unless you ask us to erase them sooner or a longer period is needed for an ongoing engagement.
• Careers applications are kept for up to 12 months from the close of the recruitment process, so that we can consider you for related roles. We delete CV files once that period ends.
• Server and security logs are retained for a short operational period by our hosting provider.

This website does not use advertising or profiling cookies, and it does not embed third-party tracking or analytics scripts. We do not set cookies to build a profile of you across other websites.

The site uses strictly necessary storage only where a feature cannot work without it — for example, keeping you signed in to the careers administration area if you are a member of our staff. You can block or delete storage through your browser settings; doing so may stop those features from working.

Our website may contain links to third-party sites, such as our technology partners. Those sites have their own privacy policies, and we are not responsible for their practices. We encourage you to read them before submitting any information.

We protect personal information with reasonable technical and organisational measures: encrypted transport (HTTPS) between your browser and our server, restricted access to the systems that store submissions, and authenticated access to the areas where enquiries and applications are reviewed. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we review our safeguards on a regular basis.

Subject to applicable law, you have the right to:

• ask what personal information we hold about you and how it is used;
• request correction of information that is inaccurate or incomplete;
• request deletion of your information, where we have no continuing need to keep it;
• object to, or restrict, certain processing of your information;
• withdraw any consent you have given, at any time, without affecting processing carried out beforehand; and
• lodge a complaint with the data protection authority in your jurisdiction.

To exercise any of these rights, contact us using the details in section 12. We may need to verify your identity before acting on a request, and we will respond within the period required by applicable law.

This website is directed at businesses and professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under the age at which they can give valid consent. If you believe a minor has submitted personal information to us, please contact us and we will remove it.

We may update this Privacy Policy to reflect changes in how we collect or handle information, in our service providers, or in applicable law. The date shown at the top of this page is the date the policy last took effect. Material changes will be highlighted on this page; we encourage you to review it periodically.

Continued use of the website after an update means you accept the revised policy, to the extent permitted by law.

Questions about this policy, or requests relating to your personal information, can be sent to us in any of the ways below. Please do not include sensitive personal information in an unencrypted email.