Privacy Policy

This Privacy Policy explains how SiteSync ("we", "us", "our") collects, uses, and protects personal data when you use our website and platform (the "Service"). We are committed to protecting personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable laws.

1. Who we are

SiteSync is a construction workforce management platform for Gulf contractors. Where we process personal data on behalf of our customers (for example, worker records), we act as a data processor under our Data Processing Agreement. Where we process data about our own website visitors and account contacts, we act as a data controller.

2. What we collect

When you visit our website:

• Device and usage information (via cookies; see our Cookie Policy)
• Information you submit through forms, such as name, work email, company, and workforce size

When you use our platform:

• Account information (name, email, role)
• Worker records you upload (name, passport/visa details, salary, attendance, nationality, job role), processed on your behalf as a processor
• Payroll and productivity data you enter or import

3. How we use data

• To provide and operate the Service (payroll calculation, WPS file generation, visa tracking, leave and gratuity)
• To communicate with you about your account, updates, and support
• To improve the Service and ensure security
• To comply with legal obligations

4. Legal basis

We process website visitor and account data based on your consent (where collected via consent forms) or our legitimate interests in operating and securing the Service. We process worker data on behalf of our customers, who are responsible for establishing the legal basis for that processing.

5. How we share data

• We do not sell personal data.
• We share data with service providers who process it on our behalf, limited to what they need to provide services (hosting, email, analytics, support). A current list is in our Subprocessor list.
• We may share data where required by law, or to protect our rights or the safety of others.

6. Data retention

• We retain platform data for as long as your account is active and for a reasonable period afterward to allow re-activation, unless you ask us to delete it.
• We retain website form-submission data for lead-management purposes for up to 24 months unless you opt out.
• We may retain records where required by law (e.g., financial records and audit logs).

7. Your rights

Subject to applicable law, you (and your workers, where you facilitate requests) have rights to access, correct, or delete personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@sitesync.ae. We will respond within 30 days.

8. Data transfers

Where data is transferred outside the UAE (for example, to cloud infrastructure providers with servers in other regions), we rely on appropriate safeguards, including contractual protections in our DPA.

9. Security

We apply organisational and technical measures to protect personal data, including encryption in transit and at rest, access controls, and monitoring. See our Security & Data Protection Statement for details.

10. Children

The Service is not directed at children under 18, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates the latest revision.

12. Contact

Data protection queries: privacy@sitesync.ae