Privacy Policy

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you visit our website www.ohmydesk.com (the "Website") or interact with our services.

Company information

Oh My Desk Business Center LLC

Trade licence No. 1232559, issued by the Dubai Department of Economy and Tourism · Tax Registration Number (TRN) 104146117700003

Address: Al Fattan Downtown, facing City Walk, Dubai, United Arab Emirates

Telephone: +971 4 304 4222 · General enquiries: contact@ohmydesk.com · Data & privacy requests: privacy@ohmydesk.com

Information we collect

Information you provide directly

• Name, email address, phone number, and company name, submitted via contact forms or membership enquiries
• Booking and order details: the service purchased, dates and times, location, and any preferences or notes you provide
• Billing information: billing name, billing address and, where applicable, company and tax details
• Identity documents: a copy of your passport, visa page and/or Emirates ID, where these are required for a Virtual Office & Ejari order, for a day pass, or to comply with UAE building access and regulatory requirements

Data collected automatically

• Usage data: pages visited, time spent, clicks, and interactions
• Technical data: browser type, device type, operating system, and IP address
• Cookies and tracking data, collected via first-party and third-party cookies — see the section on cookies below

We do not collect or process sensitive personal data, including health information, religious beliefs, or biometric data.

We do not store your full card number. Card payments are processed directly by our payment provider; we receive only a transaction reference, the amount, the outcome, and the last four digits of the card.

How we use your information

• To respond to your enquiries and provide customer support
• To process, confirm and deliver the bookings, passes and services you purchase, and to issue invoices and receipts
• To verify your identity and prepare regulatory filings where a service requires it, in particular Ejari registration
• To improve our Website and services based on usage patterns
• To analyse marketing campaign effectiveness and measure audience engagement
• To comply with applicable UAE laws and regulations
• To detect and prevent fraud, abuse, or security threats

We will never sell, rent, or trade your personal data to any third party for commercial purposes.

Legal basis for processing

All personal data is collected and processed in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL), which applies to us as a company established in Dubai mainland. We rely on the following legal bases depending on context:

• Consent — when you voluntarily submit your information via a form or expressly agree to cookies
• Performance of a contract — where processing is necessary to provide a service you have ordered and paid for
• Legitimate interests — for website analytics and operational improvements, where these do not override your rights
• Legal obligation — where processing is required to comply with UAE law

Cookies and tracking technologies

Our Website uses cookies and similar tracking technologies from both first-party and third-party providers.

A cookie consent banner appears on your first visit, giving you the ability to accept, reject, or customise each category. You may update your preferences at any time via the cookie settings link in the footer.

For full details on cookies used, their duration, and how to opt out, please refer to our Cookie Policy.

Third-party service providers

We do not share your personal data with third parties for their own commercial use. Certain trusted service providers process data on our behalf, strictly for the purposes described in this Policy:

• Gandi.net — website hosting and server infrastructure. Your data may be stored on servers located within the European Economic Area. Where data is transferred internationally, standard contractual clauses and appropriate safeguards apply.
• Google LLC (Google Analytics, Google Ads) — website traffic analysis and advertising measurement, via cookies, under Google's data processing terms. You may opt out via your cookie preferences or Google's opt-out browser add-on.
• Meta Platforms Ireland Ltd (Meta Pixel) — advertising performance measurement. Activated only with your consent.
• Our payment provider — processes card payments and fraud checks on our behalf.
• Our booking and workspace management platform — manages availability, bookings, invoices and member records.

All third-party providers are contractually required to handle your data securely and only for the purposes we specify.

We may also disclose personal data to competent UAE authorities where required by law, including where an Ejari registration or building access record must be filed.

International data transfers

Our Website is hosted by Gandi.net, whose servers are located outside the UAE, primarily in France and Luxembourg. By using our Website, your data may be transferred to and stored in jurisdictions outside the United Arab Emirates.

In such cases, we ensure appropriate safeguards are in place, including standard contractual clauses, in accordance with the cross-border transfer provisions of Federal Decree-Law No. 45 of 2021.

Data storage and security

We apply industry-standard technical and organisational security measures to protect your data against unauthorised access, alteration, disclosure, or destruction:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Access controls limiting data access to authorised personnel only
• Regular security reviews and system monitoring

Identity documents are stored separately, with access restricted to the staff who need them to complete your order or filing.

While we take every reasonable precaution, no method of data transmission or storage is completely secure. Please contact us immediately if you suspect any unauthorised access to your information.

Data retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law.

• Contact form submissions: up to 24 months from the date of submission
• Analytics and usage data: up to 26 months
• Technical logs: up to 12 months, for security and operational purposes
• Booking, invoice and payment records: for the period required by UAE tax and commercial law
• Identity documents: only for the period required to complete and support the relevant filing or regulatory obligation, then securely deleted

When data is no longer required, it is securely deleted or anonymised.

Your data rights

Under Federal Decree-Law No. 45 of 2021 (the UAE PDPL), you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete information
• Right to erasure — request deletion of your personal data, subject to legal obligations
• Right to withdraw consent — withdraw consent at any time, where processing is based on consent
• Right to object — object to processing of your data for direct marketing or analytics purposes

To exercise any of these rights, contact privacy@ohmydesk.com. We aim to respond within 30 calendar days. We may need to verify your identity before processing your request.

Minors

Our Website and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, contact privacy@ohmydesk.com and we will delete it promptly.

External links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any external website you visit.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Any updates will be posted on this page with a revised effective date. Where changes are material, we will take reasonable steps to notify you.

Contact us

Oh My Desk Business Center LLC — Email: privacy@ohmydesk.com · Telephone: +971 4 304 4222 · Address: Al Fattan Downtown, facing City Walk, Dubai, United Arab Emirates

We aim to acknowledge all privacy requests within 5 business days and provide a full response within 30 calendar days.