Information We May Collect
Depending on how you interact with TOSS, we may collect information including:
- your name;
- company or organisation name;
- job role or business information;
- email address;
- telephone or WhatsApp number;
- website URL;
- information contained in emails or other communications with us;
- service requirements, project information and business requirements you voluntarily provide;
- technical information such as browser type, device information, approximate location derived from IP address, access logs and security data;
- cookie or similar technology information where such technologies are used;
- records required to manage a business relationship, proposal, project, support request or legal obligation.
- Please do not send confidential, sensitive or special-category information through the website unless it is required and an appropriate method of transmission has been agreed with TOSS.
Ask TOSS Consultation
Corporate consultation answers and progress are saved in your browser tab using a dedicated CSP session storage key. First names, contact details and contact-form fields are not included in saved progress. Incompatible drafts from an earlier questionnaire may be reset; accepted server enquiries are not deleted. Confirmed enquiry references, without contact details, may remain in the tab to help avoid duplicate submissions. They are not sent to TOSS automatically. Use Start again to clear this consultation.
Submitting the online form sends your contact details, enquiry message, selected category and service, consultation summary and explicit privacy consent to the CSP backend for delivery to TOSS by email. Form fields are not saved in browser storage. Successful submission clears saved consultation progress.
Preparing an email or WhatsApp draft includes the selected service, answers, suggested starting point and CSP source attribution. Review the draft and send it through the external app yourself. TOSS receives that information only if you share it; the external provider handles the draft under its own policies.
Online Enquiry Submission
The Contact and Ask TOSS forms require your consent to use the submitted information to respond to your enquiry. The recipient email includes the consent text and version, server-recorded UTC time, CSP source attribution and an enquiry reference.
A necessary, host-only security cookie supports form tokens and duplicate protection. Private server session files retain request tokens and receipt metadata, not enquiry text. Rate-limit files contain keyed hashes of connection IP addresses and attempt times. These temporary files are maintained for security and cleaned after their retention windows; email records follow the retention policy below.
Confirmation means the configured mail service accepted the enquiry. It does not establish inbox delivery, an approval or a service agreement. If acceptance is uncertain, contact TOSS with the reference before resending.
How We Collect Information
Information may be collected:
- when you submit the Contact or Ask TOSS enquiry form;
- when you contact us by email, telephone, WhatsApp or another agreed channel;
- during project discussions or a business relationship;
- automatically through normal website/server operation;
- from service providers used to operate our website or business systems;
- from publicly available business sources where lawful and relevant to a legitimate business enquiry.
Why We Use Personal Information
TOSS may use personal information to:
- respond to enquiries;
- understand your requirements;
- prepare proposals or discuss potential work;
- provide agreed services;
- communicate about projects or support;
- maintain client and business records;
- improve our website, systems and services;
- protect our website, infrastructure and users against misuse or security threats;
- maintain operational and security logs;
- comply with legal, regulatory, accounting or contractual obligations;
- establish, exercise or defend legal rights;
- send business communications where permitted by applicable law.
- We do not sell personal information to advertisers or data brokers.
Lawful and Fair Processing
TOSS aims to process personal information lawfully, fairly and transparently. Where consent is required by applicable law, we will rely on consent.
Depending on the circumstances, information may also be processed where necessary to respond to your request, enter into or perform an agreement, comply with legal requirements, protect legitimate interests or exercise other grounds permitted by applicable law.
UAE Data Protection
Where applicable, TOSS handles personal information in accordance with the data-protection requirements applicable in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data.
Where another mandatory data-protection regime applies to a particular individual or processing activity, TOSS will seek to comply with those requirements as applicable.
International Data Transfers
Some technology providers used by TOSS may process or store information outside the United Arab Emirates.
Where personal data is transferred internationally, TOSS will take reasonable steps to use appropriate providers, contractual safeguards and other mechanisms required by applicable law.
Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including business, operational, contractual, accounting, security and legal requirements.
Retention periods may therefore differ depending on the nature of the information and relationship. When information is no longer reasonably required, it may be securely deleted, anonymised or otherwise disposed of.
Security
TOSS uses reasonable administrative, organisational and technical measures designed to protect information against unauthorised access, loss, alteration, misuse or disclosure.
No website, email service, cloud service or electronic transmission can be guaranteed to be completely secure. Users should therefore avoid transmitting unnecessary sensitive information through ordinary electronic communications.
Your Rights
Depending on the law applicable to you and the circumstances of processing, you may have rights relating to your personal information, including rights to request access, correction, deletion, restriction, transfer or information about processing, and in appropriate cases to withdraw consent or object to certain processing.
Rights are subject to the conditions, exceptions and limitations provided by applicable law. To make a privacy request, email [email protected]. We may need to verify your identity before fulfilling a request.
Marketing Communications
Where TOSS sends optional promotional communications, recipients may ask us to stop by using an unsubscribe mechanism where provided or by contacting [email protected].
Operational, project, security, billing or legally required communications may still be sent where necessary.
Third-Party Websites
Our website may contain links to third-party websites or platforms. TOSS does not control the privacy practices of those third parties. Their own privacy notices apply when you leave csp.toss.ae.
Children
TOSS provides business and professional services and does not intentionally design its website or services for children.
If we become aware that personal information relating to a child has been submitted inappropriately, we will take reasonable steps to address it.
Changes to This Policy
We may update this Privacy Policy where our website, services, technology or legal obligations change. The latest version will be published on this page with an updated revision date.
Contact
Privacy questions or requests may be sent to TOSS, Dubai, United Arab Emirates.
Email: [email protected]
Telephone: +971 52 813 2262
Website: https://csp.toss.ae/