Last updated
Who is responsible
MTR INVESTMENT - FZCO operates this website under the MTR Group name. The company is licensed by the Dubai Integrated Economic Zones Authority, licence number 89156, and has company registration number 82395. It is responsible for the personal information described in this notice.
The address on the company licence is DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. Our Dubai office and correspondence address is Emirates Financial Towers, DIFC, Dubai, United Arab Emirates.
For privacy questions or requests, email contact@mtr.ae or call +971 4 331 7007. Please tell us that your enquiry concerns privacy so it can be directed to the appropriate person.
Information you provide
When you email or call us, we receive the information you choose to share. This may include your name, business contact details, organisation, role, the opportunity you wish to discuss and the contents of our correspondence.
You can browse the website without submitting an enquiry. Providing business contact details is voluntary, but we need a way to contact you if you would like a response. Please begin with a brief introduction and share only information relevant to your enquiry. Agree a suitable channel with us before sending identity documents, financial account details or confidential project material.
The website currently directs enquiries to email and telephone. It does not accept web-form submissions, payments or visitor account registrations.
How we use information
We use enquiry information to respond, understand the opportunity you have raised, arrange follow-up discussions and manage the resulting business correspondence. Depending on the purpose and applicable law, the basis may be your consent, steps you request before entering into a contract, a legal obligation or, where permitted, legitimate interests in responding to business enquiries balanced against your privacy rights. Where consent is required, we ask for it and explain how it can be withdrawn.
We may also use information to resolve complaints, protect our communications and systems, and establish or defend legal claims. We will explain any further purpose if a discussion develops into a relationship requiring additional personal information.
Contacting us does not subscribe you to a newsletter or give blanket consent for unrelated marketing. This website has no newsletter sign-up, advertising profile or automated decision-making service.
Website information and cookies
Delivering a page involves receiving technical information from your browser, such as the requested address and connection details. Website hosting services may also process IP addresses, request details and operational or security logs to deliver and protect the service. We have not added optional audience analytics, advertising pixels, cross-site tracking or embedded third-party maps, videos or chat tools to the website. Its photographs and brand assets are served through the website.
The restricted content-administration area uses authentication cookies for authorised staff. These are separate from ordinary browsing of the public pages. The website does not use browser local storage or session storage to track visitors.
If we introduce optional analytics, advertising or other tracking, we will explain the change and provide the choices required by applicable law before activating it.
Access and sharing
Information may be accessed by the MTR team members who need it to handle your enquiry, and by service providers supporting the relevant communications, technology or professional advice. We limit disclosure to what is needed for the purpose. Information may also be disclosed where a lawful request or legal obligation requires it, or where necessary to establish or defend legal rights.
Microsoft 365 hosts our business email, including contact@mtr.ae, and processes the messages and contact details sent to that address. Microsoft records the United Arab Emirates as the current and committed location for our Exchange Online email data at rest. Our selected website providers are Vercel for hosting, Neon for database services and Cloudinary for photograph storage and delivery.
Following a link to an external source or photography licence takes you to another organisation's website. Its own privacy practices apply there. Starting an email or telephone call also involves the email or telecommunications services you use.
Transfers and retention
Our email, website, database and photograph-storage providers operate internationally. Personal information may be processed in the UAE and other countries, depending on the service, configuration and support arrangements. Transfers are subject to the requirements of the data-protection law applicable to the information and processing concerned. You can contact us for details about a transfer relevant to your enquiry and the safeguards that apply.
We keep personal information only for as long as it is needed for the enquiry and any resulting business relationship, taking account of applicable record-keeping duties, unresolved complaints and legal claims. These factors determine the retention period. We will delete or anonymise information when it is no longer needed for these purposes.
Your choices and rights
Depending on the applicable law and circumstances, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on legitimate interests and to direct marketing. Where processing depends on consent, you may withdraw it without affecting processing that was lawful before withdrawal.
To make a request, email contact@mtr.ae or call +971 4 331 7007. You do not need an account. We may ask for proportionate information to confirm your identity and understand the request. We will explain the outcome and any applicable legal reason that prevents us from fulfilling it.
You may raise a concern with the data-protection authority responsible under the law that applies to the processing. For matters governed by the UAE federal personal-data protection law, the relevant authority is the UAE Data Office. For matters governed by DIFC data-protection law, it is the DIFC Commissioner of Data Protection. Contacting us first does not limit your right to approach the relevant authority or seek an available legal remedy.
Changes to this notice
We will update this notice when the website or our handling of enquiries changes. The date above identifies the latest version. Material changes will be explained in a way appropriate to the information and processing affected.