Data Protection & Commercial IP Safeguards
Under UAE PDPL Law
This policy explains how MCSL Technical Services (Mask Control Systems Limited) collects, uses, protects, and handles personal and project information across our industrial automation, control panel, and engineering operations throughout Dubai, the UAE, and the Middle East.
1. Who We Are (Data Controller)
In this Privacy Policy, “we”, “us”, “our”, or “MCSL” refers to MCSL Technical Services (Mask Control Systems Limited). We operate as the official Data Controller responsible for your personal and commercial inquiry information in compliance with UAE Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (PDPL) and applicable international standards.
B-59, Ibrahim Hussain Ahli - 101, Al Muteena, Dubai, United Arab Emirates
Telephone: +971 54 780 5411
Email: ahalsall@maskcontrols.ae
2. Information We Collect
Depending on your interactions with MCSL, we may collect and process the following categories of information:
A. Contact & Commercial Identification
Full name, business job title, corporate email address, business telephone number, and employer/company name provided when requesting an automation quotation or contacting our engineering team.
B. Industrial Engineering & Project Specifications
CAD schematics, machine mechanical specifications, PLC hardware requirements, plant delivery addresses across the UAE and GCC, and operational briefs shared during project scoping and design.
C. Technical & Website Usage Data
Internet Protocol (IP) addresses, browser type, device identifiers, operating system, and navigation telemetry collected via strictly necessary session cookies to maintain site security and performance.
3. Lawful Basis for Processing Your Data
Under the UAE Personal Data Protection Law (PDPL), we only process your personal data where a clear lawful basis exists:
Processing is required to prepare engineering proposals, manufacture custom IEC 61439 control panels, program industrial PLCs, or execute on-site commissioning agreements.
To communicate with industrial clients across the UAE and GCC, protect our technical infrastructure against cyber threats, and maintain service reliability.
To comply with UAE commercial laws, Federal Tax Authority (FTA) corporate accounting mandates, workplace safety standards, and ISO 9001/17025 verification.
Where you explicitly opt in to receive non-transactional technical newsletters or case studies (which can be withdrawn at any time).
4. Data Security & Confidentiality
We apply rigorous physical, electronic, and managerial safeguards to protect your confidential machinery designs and personal data from unauthorized access, accidental alteration, disclosure, or destruction:
- Full TLS 1.3 encryption across all web traffic
- Strict role-based access controls for engineering staff
- Enterprise encrypted cloud infrastructure and secure storage
- Comprehensive bilateral NDAs for proprietary client IP
5. How Long We Retain Your Data
We retain personal and project data only for as long as necessary to fulfill the operational purposes for which it was collected:
6. Your Legal Rights Under UAE PDPL
As a data subject, you hold statutory rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021) regarding how your personal information is stored and handled:
Right of Access
You have the right to request a complete copy of the personal data we hold about you and your organization.
Right to Rectification
You can request immediate correction of any inaccurate or incomplete personal or corporate contact information.
Right to Erasure
You have the right to request deletion of your personal data where it is no longer legally necessary for contractual or statutory compliance.
Right to Restrict Processing
You may ask us to suspend processing your personal data while an accuracy contest or legal dispute is verified.
Right to Data Portability
You can request to receive your structured personal data in a readable digital format to transfer to another controller.
Right to Object
You have the right to object at any time to processing based on legitimate business interests or direct commercial communications.
To exercise any of these rights, please contact our Data Protection Team at ahalsall@maskcontrols.ae. We will respond without undue delay and within thirty (30) days.
7. Third-Party Sharing & Non-Sale Pledge
We do not sell, rent, trade, or monetize your personal or industrial data under any circumstances.
We only share relevant information with vetted operational partners where essential for project fulfillment, such as specialist freight carriers delivering control cabinets, secure cloud infrastructure providers, or accredited quality registrars auditing our ISO 9001/17025 accreditations under binding non-disclosure agreements.
8. Cookies & Tracking Technologies
Our website uses strictly necessary technical cookies to enable secure page routing, navigation state, and form submissions. We do not deploy intrusive third-party cross-site advertising or tracking cookies. You may configure your web browser to reject cookies, though certain technical functions of the site may be impaired.
9. Regulatory Governance & Inquiries
If you have concerns about our data handling, we encourage you to contact us directly so we can promptly address the issue. You also hold the right to contact the relevant UAE competent supervisory authorities, including the UAE Data Office established under Federal Decree-Law No. 44 of 2021.
10. Contacting Our Data Protection Team
For any questions regarding this Privacy Policy, your rights, or to submit a data request, please contact our engineering headquarters: