AquaFence Privacy Policy

Last Updated: August 23, 2026

Privacy at a glance

Primary controller: AquaFence AS, Beddingen 8, 0250 Oslo, Norway. Depending on your relationship with AquaFence, a regional AquaFence entity may also act as a controller and will be identified when personal data is collected or in the relevant communication.

Purposes: responding to enquiries, assessing projects, preparing proposals, providing products and services, managing professional relationships, operating and protecting the website, analytics and, where permitted, marketing communications.

Legal grounds: consent and the other grounds permitted by applicable law, including steps requested before entering into a contract, performance of a contract, compliance with legal obligations, protection of rights and legal claims, and other lawful interests recognised by the relevant regime.

Your rights: subject to applicable law, you may request information, access or transfer of your data, correction or erasure, restriction or cessation of processing, withdrawal of consent and review of certain automated decisions. Contact info@aquafence.com with the subject line “UAE Privacy Request.”

Full information is provided below.

1. Scope and applicable privacy laws

AquaFence and its affiliated entities, including AquaFence AS, AquaFence USA, Inc. and other regional AquaFence companies (together, “AquaFence,” “we,” “us” or “our”), respect your privacy.

This UAE Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit AquaFence.com, contact us, request information, submit a project enquiry, communicate with our team, apply for a role or otherwise interact with us in connection with our products and services.

AquaFence supplies deployable flood-protection systems and related solutions for commercial, municipal, industrial, infrastructure, residential and other projects.

This policy applies to personal data processed through the website and related business communications directed to or involving individuals in the United Arab Emirates (“UAE”). Customer or supplier contracts, recruitment processes and specific regional services may include additional privacy notices.

This UAE version supplements AquaFence’s general English Privacy Policy. It is intended to reflect, where applicable, UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data (“UAE PDPL”) and related implementing requirements. Certain processing may instead be governed by sector-specific rules or by a financial free-zone regime, including the DIFC Data Protection Law No. 5 of 2020 or the ADGM Data Protection Regulations 2021. Where another mandatory regime applies, this policy will be interpreted in accordance with that regime and any more specific notice we provide.

2. Controller and contact details

The primary controller for the processing described in this policy is:

AquaFence AS
Beddingen 8
0250 Oslo, Norway
Email: info@aquafence.com
Recommended subject line: UAE Privacy Request

The AquaFence UAE team may receive or assist with local enquiries at salesuae@aquafence.com. Where an enquiry is referred to a regional AquaFence entity to respond or manage a project, that entity may process personal data as a separate controller or, depending on the circumstances, jointly with AquaFence AS. We will provide further information at the point of collection or in the relevant communication when required.

If AquaFence is required to appoint a data protection officer for a particular processing activity, the officer’s contact details will be made available as required by applicable law.

3. Personal data we collect

We collect personal data directly from you, automatically through the website and, in appropriate cases, from legitimate professional or public sources.

3.1 Data you provide

Contact details: name, email address, telephone number, company, job title, postal address, country, emirate or region.
Project and enquiry data: project type and location, flood-protection requirements, property or facility type, timescale, technical requirements, drawings, attachments, comments and other submitted information.
Professional relationship data: information concerning customers, suppliers, contractors, distributors, consultants, engineers, architects, intermediaries, public bodies and partners.
Communications: emails, forms, meeting requests, call notes, support enquiries and other correspondence.
Marketing preferences: subscriptions, event interests, preferred contact channel and opt-out choices.
Recruitment data: curriculum vitae, employment history, education, qualifications, references, portfolio and other information provided for career opportunities.
Other data: any other information you choose to provide.

Please do not provide sensitive personal data unless it is strictly necessary and there is an appropriate legal basis and safeguard. Sensitive personal data may include, among other things, health, biometric, genetic, racial or ethnic, religious, criminal or security-related information.

3.2 Data collected automatically

When you visit AquaFence.com, we may collect:

IP address, browser type, operating system, device type, language and referring URL;
pages viewed, links selected, visit duration, navigation path, date, time and interactions;
approximate location inferred from the IP address; and
cookie identifiers, pixels, tags, scripts, analytics identifiers and similar technologies.

3.3 Data received from other sources

We may receive data from AquaFence affiliates, distributors and representatives; business and professional partners involved in a project; public sources such as company websites, public registers, professional directories and industry publications; CRM, marketing, analytics or business-development providers; and social or professional networks when you interact with AquaFence content.

Where required, we will provide the information applicable to data obtained indirectly within the period required by the relevant law.

4. Purposes and lawful grounds

We process personal data only where permitted by applicable law. Depending on the processing and the legal regime, the relevant ground may include your consent; steps requested by you before entering into a contract; performance of a contract; compliance with law; employment-related requirements; establishment, exercise or defence of legal claims; protection of public interests or the interests of the data subject; processing of data you have made public; or another ground expressly permitted by law.

4.1 Enquiries and project assessment

We use data to answer questions, route an enquiry to the appropriate team or regional office, and assess requirements, site conditions, feasibility, product suitability, technical needs and proposal scope.

Ground: consent where required; steps requested before entering into a contract; performance of a contract; or another ground permitted for responding to legitimate professional enquiries.

4.2 Products, services and professional relationships

We use data to prepare quotations, proposals, designs and documents; coordinate projects, installation and training; provide support; and manage relationships with customers, contractors, distributors, suppliers, consultants and advisers.

Ground: steps requested before entering into a contract; performance of a contract; compliance with legal obligations; consent where required; and other grounds permitted by applicable law.

4.3 Marketing and business development

We may send newsletters, updates, invitations, product information and case studies where you have consented or another lawful permission applies. You may opt out at any time using the link in a message or by contacting us.

Ground: consent or another permission available under the laws governing the communication.

4.4 Website operation, analytics and improvement

We use data to provide website functions, remember preferences, measure use and performance, detect errors and improve the service. Non-essential tracking technologies are activated only where the necessary consent or other lawful permission has been obtained.

Ground: consent where required; performance of a service requested by you; security and operational necessity; or another ground permitted by applicable law.

4.5 Security, misuse prevention and legal claims

We may process data to protect the website, systems, operations, personnel and users; prevent misuse; investigate incidents; and establish, exercise or defend legal claims.

Ground: protection of rights and legal claims; compliance with law; protection of the data subject or public interests where applicable; and other grounds permitted by law.

4.6 Recruitment and employment

We process data to assess applications, communicate with candidates and manage recruitment.

Ground: steps requested before employment, employment-related requirements, consent where necessary, compliance with law and other grounds permitted by applicable law.

4.7 Compliance and corporate transactions

We may process data to comply with laws, orders, legal processes, contractual duties and accounting or recordkeeping requirements, and to assess or complete a merger, acquisition, financing, restructuring or transfer of assets.

Ground: legal obligation; contract; legal claims; consent where required; and other grounds permitted by applicable law, with appropriate safeguards.

Where processing is based on consent, you may withdraw consent at any time for future processing. Withdrawal does not affect the lawfulness of processing completed before withdrawal. Some processing may continue where another lawful ground or a legal retention duty applies.

5. Cookies and similar technologies

AquaFence.com may use cookies and similar technologies to:

enable essential functionality, security, navigation and form submission;
remember preferences;
understand traffic, visitor behaviour and performance; and
support advertising, campaign measurement or retargeting, where used.

Where consent is required, it must be clear, specific and capable of being withdrawn. Non-essential analytics, personalisation or advertising technologies that require consent will remain disabled until you make an affirmative choice. The preference tool should provide clear options to accept, reject or configure relevant technologies and allow you to change or withdraw your choice.

Strictly necessary technologies may operate without consent where their use is required to provide a service you request, maintain security or otherwise falls within a lawful exception.

Please refer to the Cookie Policy for information about specific technologies, providers, purposes and retention periods.

6. Recipients of personal data

We may disclose personal data, where necessary, to:

AquaFence affiliates and regional offices;
providers of website hosting, CRM, analytics, email, marketing automation, IT support, cybersecurity, cloud storage, communications, project management, logistics and professional services;
distributors, contractors, engineers, architects, consultants, installation partners, property representatives and other participants in assessing or delivering a project;
lawyers, auditors, insurers, financial institutions, accountants and other advisers;
courts, public authorities, regulators, law-enforcement bodies or other parties where disclosure is required by law or is legitimately and proportionately necessary; and
potential purchasers, financiers or other parties to a corporate transaction, subject to appropriate safeguards.

Service providers acting as processors must handle data only for authorised purposes, maintain confidentiality and security, and comply with the contractual and legal controls applicable to the processing. We do not sell personal data for money.

7. International transfers

AquaFence operates through entities and service providers in several countries. Personal data may be processed in or transferred to the UAE, Norway, other EEA countries, the United States and other locations where AquaFence, its affiliates or providers operate.

Where the UAE PDPL applies, a transfer outside the UAE will be made in accordance with its cross-border transfer rules, including transfer to a jurisdiction providing an adequate level of protection or the use of a contract, agreement, consent or another safeguard or exception permitted by law.

Where the GDPR or another EEA regime also applies, we use a valid transfer mechanism such as an applicable adequacy decision or the European Commission’s Standard Contractual Clauses together with supplementary measures where necessary. Where DIFC or ADGM rules apply, we use a transfer ground recognised under the relevant free-zone regime.

You may request information about the transfer mechanism and a copy of relevant safeguards by contacting info@aquafence.com. Confidential or commercially sensitive information may be redacted where necessary.

8. Retention

We retain personal data for as long as necessary for the purposes described and afterwards for periods required or permitted by law.

When setting retention periods, we consider the nature and sensitivity of the data; the processing purpose; the duration of the relationship; contractual, warranty, tax, accounting, insurance and limitation periods; security and dispute-resolution needs; and deletion requests, subject to legal exceptions.

In general:

analytics and cookie data are retained according to the cookie preference settings, the Cookie Policy and operational requirements;
enquiries are retained while they are handled and for a reasonable period afterwards to document the response and a possible business relationship;
customer and project files are retained throughout the relationship and for periods needed for contracts, warranties, compliance, insurance, accounting and legal defence;
marketing preferences are retained until opt-out, while minimal suppression information may be kept to respect the choice; and
recruitment data is retained during the process and for a reasonable period consistent with employment and equality requirements, unless valid permission is obtained for future opportunities.

When data is no longer required, we securely delete or anonymise it, or restrict access where continued blocked retention is legally required.

9. Security and personal data breaches

We implement technical and organisational measures appropriate to the risks to protect personal data against destruction, loss, alteration, unauthorised disclosure or access. Measures may include access controls, secure hosting, encryption where appropriate, provider management, personnel controls, monitoring and incident-response procedures.

No system, transmission method or storage process is completely secure. We therefore review and adapt safeguards according to the nature of the processing and identified risks.

Where a personal data breach must be reported, we will notify the UAE Data Office, the competent DIFC or ADGM authority, affected data subjects or another regulator in the manner and within the period required by the applicable regime.

10. Your privacy rights

Subject to the applicable UAE regime and any lawful exceptions, you may have rights to:

obtain information and access: receive information about processing and obtain a copy of relevant personal data;
data transfer or portability: receive or transfer data in accordance with applicable requirements;
correction: correct inaccurate or outdated personal data;
erasure: request deletion where the legal conditions are met;
restriction or cessation: restrict or stop processing in circumstances recognised by law;
withdraw consent: withdraw consent for future processing;
object to certain automated decisions: request human review or object where an automated decision has legal or serious effects; and
complain: submit a complaint or grievance to the UAE Data Office, the DIFC Commissioner of Data Protection, the ADGM Commissioner of Data Protection or another competent authority, depending on the applicable regime.

To exercise a right, email info@aquafence.com with the subject “UAE Privacy Request” and identify the right concerned. We may request only the additional information reasonably necessary to verify your identity and authority. We will respond within the period required by applicable law. Rights may be limited where an exception applies, and we will explain the basis where required.

11. Marketing communications

You may opt out of marketing emails through the unsubscribe link in each message or by contacting us. Opting out does not prevent necessary non-marketing communications, including responses to enquiries, project or transaction information, legal notices and security alerts.

12. Automated decision-making and profiling

We do not make decisions based solely on automated processing that produce legal or similarly serious effects on you unless we inform you and have a valid basis under applicable law. We may perform limited business segmentation based on professional interests or website interactions. Where non-essential technologies are used for this purpose, the required consent will be obtained.

13. Children

The website is intended primarily for adult commercial, municipal, industrial, professional and residential users. We do not seek to collect personal data from children.

In the UAE, personal data of a child under 13 must not be collected or used unless the requirements of the applicable child digital-safety legislation are met, including clear consent from a parent or guardian, an accessible means to withdraw that consent and a clear explanation of the purpose and use. Such data must not be used for targeted advertising or commercial purposes prohibited by law.

If you believe a child has provided data improperly, please contact us so that we can take appropriate action.

14. Third-party websites and services

The website may link to third-party sites, social networks, videos, maps, tools or services that we do not control. This policy does not govern their practices. Please review each third party’s privacy information before providing data to it.

15. Changes to this policy

We may update this UAE Privacy Policy to reflect legal, technical or operational developments. When we do, we will revise the “Last Updated” date. If changes are material, we will provide an appropriate additional notice, for example on the website or through direct communication.

16. Contact

For questions about this policy or the processing of your personal data:

AquaFence AS
Beddingen 8
0250 Oslo, Norway
Email: info@aquafence.com
Recommended subject line: UAE Privacy Request

Local business enquiries may be directed to salesuae@aquafence.com.