M.D.N Tech
M.D.N Tech

Privacy Policy

Last Updated: January 20, 2026

1. Introduction

M.D.N Tech FZE ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.mdntech.org and use our services.

Company Details:

  • Legal Name: M.D.N Tech FZE
  • Registration: UAQ Free Trade Zone, United Arab Emirates
  • Address: Al Shmookh Business Center M 1003, One UAQ, UAQ Free Trade Zone, Umm Al Quwain, U.A.E
  • Contact: contact@mdntech.org
  • Data Protection Contact: Martin Jerabek (contact@mdntech.org)

This policy applies to all users globally, including those in the European Union (GDPR compliance) and the United Arab Emirates.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our services, we may collect:

  • Contact Information: Name, email address, phone number, company name
  • Communication Data: Information provided when you schedule a call, including preferred date/time and reason for contact
  • Project Information: Details about your project requirements, technical specifications, and business objectives
  • Account Information: Username, password, and preferences when you create a client account
  • Business Documents: Contracts, agreements, invoices, and other legally required documentation

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

  • Technical Data: IP address, browser type, device information, operating system
  • Usage Data: Pages visited, time spent on pages, navigation patterns, referral sources
  • Analytics Data: Through Google Analytics (when implemented), including session duration, bounce rates, and user interactions
  • Cookies: As described in our Cookie Policy section below

2.3 Information from Third Parties

We may receive information from:

  • Hosting Providers: Vercel (frontend hosting) and Railway (backend hosting)
  • Communication Tools: Email service providers
  • Business Partners: Referral partners or collaborators with your consent

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Delivery

  • Providing IT services including AI/ML development, blockchain solutions, full-stack development, mobile app development, UI/UX design, and game development
  • Managing client accounts and project portals
  • Hosting development environments and providing access to work-in-progress projects
  • Storing and managing project files, source code, and deliverables

3.2 Business Operations

  • Processing invoices and managing payments
  • Communicating about projects, updates, and service-related matters
  • Scheduling consultations and client calls
  • Maintaining business records and documentation as required by UAE law

3.3 Legal Compliance

  • Complying with UAE legal obligations and UAQ Free Zone regulations
  • Maintaining records for tax and accounting purposes
  • Responding to legal requests and preventing fraud
  • Enforcing our Terms & Conditions

3.4 Service Improvement

  • Analyzing website usage to improve user experience
  • Understanding client needs and preferences
  • Developing new services and features
  • Testing and optimizing our platform performance

3.5 Marketing (with your consent)

  • Sending newsletters about our services and industry insights
  • Providing information about new offerings
  • Sharing case studies and project updates (with client approval)

Legal Basis for Processing (GDPR):

  • Contractual Necessity: To fulfill our services agreement with you
  • Legitimate Interest: To improve our services and maintain security
  • Legal Obligation: To comply with UAE and international laws
  • Consent: For marketing communications and non-essential cookies

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored on secure servers located in:

  • Frontend Hosting: Vercel's global infrastructure
  • Backend Hosting: Railway's secure cloud environment
  • Development Environments: Secure, isolated instances for active projects
  • Document Storage: Encrypted cloud storage for business documents

We ensure that all data transfers comply with applicable data protection laws, including GDPR requirements for international data transfers.

4.2 Security Measures

We implement industry-standard security measures including:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access Controls: Role-based access with strong authentication
  • 24/7 Monitoring: Continuous security monitoring of development environments
  • Regular Backups: Automated backup systems to prevent data loss
  • Secure Development: Following secure coding practices and regular security audits
  • Confidentiality Agreements: All team members bound by strict confidentiality obligations

4.3 Data Retention

We retain your personal data only as long as necessary:

  • Active Projects: Duration of the project plus 2 years for warranty and support purposes
  • Business Records: 7 years as required by UAE commercial law
  • Marketing Data: Until you withdraw consent or request deletion
  • Website Analytics: Anonymized after 26 months (Google Analytics default)

When data is no longer needed, it is securely deleted or anonymized.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

5.1 Service Providers

We may share data with trusted third parties who assist in:

  • Hosting Services: Vercel and Railway for infrastructure
  • Communication: Email service providers for business correspondence
  • Payment Processing: Payment processors for invoice payments (when implemented)

All service providers are contractually obligated to protect your data and use it only for specified purposes.

5.2 Legal Requirements

We may disclose information when required by:

  • UAE law or UAQ Free Trade Zone regulations
  • Court orders, legal processes, or government requests
  • Protection of our legal rights or safety of others
  • Investigation of fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

5.4 With Your Consent

We may share information for purposes not listed here with your explicit consent.

6. Your Rights

6.1 Rights Under GDPR (for EU/EEA Users)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for marketing or cookies at any time
  • Lodge a Complaint: File a complaint with your local data protection authority

6.2 Rights Under UAE Law

Under UAE data protection regulations, you have the right to:

  • Access your personal information
  • Request correction of inaccurate data
  • Request deletion of data when legally permissible
  • Object to processing for marketing purposes

6.3 Exercising Your Rights

To exercise any of these rights, please contact us at:

Email: contact@mdntech.org

Attention: Martin Jerabek, Data Protection Contact

We will respond to your request within 30 days (or as required by applicable law).

7. Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services.

7.2 Types of Cookies We Use

Essential Cookies (Always Active):

  • Session management for client accounts
  • Security and authentication
  • Load balancing and performance

Analytics Cookies (When Implemented):

  • Google Analytics for website usage statistics
  • These cookies help us understand how visitors interact with our site

Future Cookies:

As we implement additional features, we may use:

  • Marketing cookies (with your consent)
  • Preference cookies for user settings

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

For Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

8. International Data Transfers

As we serve clients internationally, including in the European Union, your data may be transferred across borders. We ensure such transfers comply with:

  • GDPR Standard Contractual Clauses: For EU data transfers
  • Adequacy Decisions: Transferring to countries with adequate protection
  • Your Consent: Where required by law

All international transfers maintain the same level of protection as guaranteed in the UAE and EU.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify affected individuals within 72 hours (as required by GDPR)
  • Inform relevant supervisory authorities
  • Provide information about the breach and remedial actions
  • Take immediate steps to mitigate risks

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, new legal requirements, service improvements or new features.

Notice of Changes:

  • Updated policy will be posted on www.mdntech.org with a new "Last Updated" date
  • For material changes, we will notify you via email or prominent website notice
  • Continued use of our services after changes constitutes acceptance

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

M.D.N Tech FZE

Al Shmookh Business Center M 1003

One UAQ, UAQ Free Trade Zone

Umm Al Quwain, United Arab Emirates

Email: contact@mdntech.org

Data Protection Contact: Martin Jerabek

Website: www.mdntech.org

14. Supervisory Authority

For EU/EEA Users:

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.

For UAE Users:

You may contact the UAE Telecommunications and Digital Government Regulatory Authority (TDRA) or relevant UAQ Free Trade Zone authorities regarding data protection concerns.

Governing Law: This Privacy Policy is governed by the laws of the United Arab Emirates and the regulations of UAQ Free Trade Zone.

Language: In case of any discrepancy between language versions of this policy, the English version shall prevail.