Privacy Policy

Last updated: 1 August 2026. This privacy policy explains what personal data UAE Debt Collection collects through this website, why we collect it, who we share it with, how long we keep it and what rights you have. It applies to uaedebtcollection.com and to any enquiry, live chat message, telephone call or email that reaches us through this site.

It is written to reflect the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies to a particular individual, the EU or UK GDPR.

Who We Are and Who Controls Your Data

UAE Debt Collection (UDC) is a debt recovery and legal services provider operating across the United Arab Emirates. Our website address is https://uaedebtcollection.com. For the personal data described in this policy, UDC is the data controller: we decide what is collected and why. Where we act only on a client’s instructions in relation to that client’s own records, we act as a processor for that client.

For any privacy question, to exercise the rights set out below, or to reach our data protection contact point, write to us through our contact page and mark your message “Data Protection”. We will route it to the person responsible for privacy compliance.

What Personal Data We Collect

We only collect what we need in order to answer an enquiry and, where you instruct us, to run a recovery file.

• Information you give us. Name, company, email address, telephone number, country, the amount and nature of the debt, and anything else you type into an enquiry form, live chat or email.
• Information collected automatically. Your IP address, the approximate location derived from that IP address, browser and device type, operating system, the page you submitted a form from, the page that referred you to our site, your search or campaign parameters (for example utm_source, utm_medium, utm_campaign, gclid), and the date and time of the request.
• Case documents. Contracts, invoices, statements of account, cheques, delivery notes and correspondence that you choose to send us in support of a claim. These often contain personal data about third parties, including your debtor, its officers and its guarantors.
• Cookies and similar technologies. A first-party cookie records the page and campaign that first brought you to the site so that an enquiry can be attributed correctly. See our Cookie Policy for the full list.

We do not ask for sensitive personal data as defined by the UAE Personal Data Protection Law — such as data revealing health, religious or philosophical beliefs, race, ethnic origin, political opinions, criminal records or biometric data — and we ask you not to send it.

If sensitive data reaches us inside a case document, we process it only to the extent necessary to establish, exercise or defend a legal claim, and we restrict access to it.

Why We Collect It and Our Lawful Basis

• To respond to your enquiry and provide a quote or case assessment — taking steps towards a contract at your request.
• To provide debt recovery, amicable settlement, litigation and enforcement services once instructed — performance of a contract.
• To establish, exercise or defend legal claims, including preparing pleadings, filings and enforcement applications — a lawful basis expressly recognised under the UAE Personal Data Protection Law.
• To keep a record of where enquiries come from and which channels work — our legitimate interest in operating and improving the business.
• To detect and prevent fraudulent, abusive or automated submissions, including logging the IP address of each submission — our legitimate interest in the security of our systems.
• To meet legal, regulatory, anti-money-laundering, tax and court-filing obligations — compliance with a legal obligation.
• To send you commercial updates where you have asked for them — your consent, which you may withdraw at any time.

Where we rely on consent, that consent is specific, informed and recorded, and withdrawing it is as easy as giving it. Withdrawal does not affect processing already carried out, or processing that rests on another lawful basis.

If You Are a Debtor or a Named Third Party

If you have reached this policy because UDC has contacted you about a debt, please read this section. We received your details from our client, the creditor, or from public records, court files or the documents underlying the debt. We process them in order to establish, exercise or defend a legal claim, to comply with legal obligations, and for the legitimate interests of our client in recovering a lawful debt.

We did not need your consent to do so, and we will not use your details to market to you.

The categories we typically hold are your name, the name of the company you represent, contact details, the amount and history of the debt, the documents evidencing it, and a record of our contacts with you.

You have the same rights over that data as anyone else, described below, although the right to erasure and the right to object are limited while a claim is live or while the law requires us to keep records. If you believe the debt is not owed, or that our records about you are wrong, tell us and we will record your position on the file and put it to our client.

How Enquiries Are Stored

Enquiries submitted through this website are delivered by email to our team and stored in our customer relationship management system, which is hosted on our own infrastructure. The record includes the details you submitted together with the technical and source information listed above. Access is restricted by role to staff who need it to handle your matter, and administrative accounts are individually held and logged.

Automated Processing and Profiling

We do not make decisions about you by purely automated means that produce legal effects for you. Our systems apply simple automated rules — for example routing an enquiry to the right team by country or debt type, scoring a lead by source, or blocking a submission that looks like spam. A person always reviews a case assessment before it is sent to you.

You may object to automated processing and ask for human review.

Cookies

Our site uses a small number of cookies. Essential cookies keep the site working and protect forms against automated abuse. An attribution cookie stores the first page and campaign parameters of your visit for up to 90 days so an enquiry can be credited to the right source. Analytics cookies, where enabled, help us understand aggregate traffic patterns.

You can delete or block cookies in your browser settings; the site will still function, but form attribution and some conveniences will not. Full details are in our Cookie Policy.

Embedded Content From Other Websites

Pages on this site may include embedded content such as videos, maps, live chat or social posts. Embedded content from another website behaves exactly as if you had visited that website, and those providers may collect data about you, use cookies and track your interaction with the embedded content under their own privacy policies.

Who We Share Your Data With

We do not sell personal data and we do not share it for third-party advertising.

We share it only where necessary: with the advocates, court agents, process servers, translators and experts engaged to progress your file; with correspondent recovery partners in other jurisdictions where your debtor is located; with our hosting, email, live chat and CRM providers acting on our documented instructions and under confidentiality obligations; with our auditors and professional advisers; and with courts, regulators, banks or law enforcement where we are legally required or permitted to do so.

Where We Send Your Data

Our infrastructure and some of our service providers are located outside the United Arab Emirates. The UAE Personal Data Protection Law permits transfers abroad where the destination provides an adequate level of protection, or where appropriate safeguards are in place.

Where we transfer personal data outside the UAE we rely on the destination’s adequacy status where one has been determined, and otherwise on contractual safeguards with each provider, on the necessity of the transfer for the performance or defence of a claim, or on your explicit consent. Cross-border recovery instructions necessarily involve sharing file data with partners in the debtor’s jurisdiction.

We can tell you which safeguard applies to a particular transfer on request.

How Long We Retain Your Data

Enquiries that do not become instructions are retained for up to 24 months and are then deleted or anonymised. Files where we were formally instructed are retained for the period required by UAE law and by our professional, tax and anti-money-laundering obligations, generally not less than five years from closure, and longer where a judgment remains enforceable or a limitation period is still running.

Attribution and analytics records are aggregated after 26 months. Marketing consents are retained until you withdraw them, plus a short record of the withdrawal itself so that we can honour it.

What Rights You Have Over Your Data

Subject to the conditions and exceptions in the applicable law, you may: ask what personal data we hold about you and obtain a copy; ask us to correct data that is inaccurate or incomplete; ask us to delete data we no longer have a lawful reason to keep; ask us to restrict processing while a matter is investigated; object to processing that rests on our legitimate interests; object to automated processing and ask for human review; ask for your data in a structured, machine-readable format or to have it transferred to another controller; and withdraw any consent you have given.

Send your request through our contact page. We may need to verify your identity first, so that we do not disclose someone’s data to the wrong person. We will respond within the period required by law — normally one month from a valid request, extendable where the law allows and where we tell you why. There is no charge for a reasonable request.

If you are not satisfied with our response, you may complain to the competent supervisory authority. In the United Arab Emirates that is the UAE Data Office established under the federal data protection framework; if the EU or UK GDPR applies to you, you may also complain to your local supervisory authority.

How We Protect Your Data and What Happens If Something Goes Wrong

The site is served over encrypted connections. Access to enquiry records and case files is restricted by role, administrative accounts are individually held, credentials are not shared, and our systems and plugins are kept updated. Case documents are stored in access-controlled locations rather than circulated by attachment where that can be avoided.

If a personal data breach occurs that is likely to prejudice your privacy, confidentiality or security, we will notify the competent supervisory authority without undue delay after becoming aware of it, and we will notify you directly where the law requires it or where we judge that you need to know in order to protect yourself. We keep an internal record of breaches and of the steps taken in response.

Children

Our services are directed at businesses and adult creditors. We do not knowingly collect personal data from children, and we do not target them. If you believe a child has sent us personal data, tell us and we will delete it unless we are required to keep it.

Changes to This Policy

We may update this policy to reflect changes in our processing, our systems or the law. The version published on this page, with the date shown at the top, is the version that applies. Where a change materially affects how we use your data, we will take reasonable steps to tell you.

Please read this policy together with our Disclaimer and Terms of Use.