Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, and international transfer of personal data by Oki Doki Pro Solutions FZCO, operating under the trade name Oki-Doki ("we," "us," "our," or "the Company"), a free zone company incorporated in the United Arab Emirates (Trade Licence No. 72623, Dubai Silicon Oasis Authority). This Policy applies to all data subjects whose personal data we process, including: • Clients who engage our services through oki-doki.ae or other channels; • Visitors to our website and digital properties; • Business partners and authorised affiliates; and • Prospective clients who submit enquiries. By using our services or submitting personal data to us, you acknowledge that you have read and understood this Policy.

We process personal data in full compliance with: • UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL") and its implementing regulations issued by the UAE Data Office; • EU General Data Protection Regulation (Regulation 2016/679) ("GDPR"), to the extent it applies to data subjects residing in the European Economic Area ("EEA"); and • All applicable sector-specific regulations governing the provision of immigration, visa, and business consultancy services in the UAE. Where the GDPR applies, any reference in this Policy to "lawful basis" shall be construed accordingly. Where the UAE PDPL applies exclusively, processing grounds correspond to the equivalent bases set out in that legislation.

We do not sell, rent, exchange, or otherwise trade your personal data to third parties for their own commercial purposes. Data is disclosed only as set out below.

The nature of visa and immigration services inherently requires the cross-border transfer of personal data to sovereign government authorities worldwide. Such transfers are effected solely for the performance of your contract of service. Where data is transferred to countries that do not provide a level of data protection equivalent to the UAE or the EEA, we rely on one or more of the following safeguards: (a) standard contractual clauses approved by the relevant supervisory authority; (b) the necessity of the transfer for the conclusion or performance of a contract concluded in your interest; or (c) such other approved transfer mechanism as may be applicable.

Our website uses the following categories of cookies and similar tracking technologies: Essential Cookies — Strictly necessary for the operation of the website and cannot be disabled. Performance and Analytics Cookies — Enable us to measure and improve website performance. We use Google Analytics with IP anonymisation enabled. You may opt out via your browser settings. Functional Cookies — Remember your preferences (language, region) to provide an enhanced experience. Marketing and Targeting Cookies — Used to deliver relevant advertising. Activated only upon obtaining your explicit consent. You may manage or withdraw cookie consent at any time through your browser settings.

Subject to the conditions and limitations set out in applicable law, you have the following rights: Right of Access — To obtain confirmation of whether we process your data and to receive a copy, together with information about the processing. Right to Rectification — To have inaccurate or incomplete personal data corrected without undue delay. Right to Erasure — To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Right to Restriction of Processing — To request that we suspend processing in specific circumstances. Right to Data Portability — To receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible. Right to Object — To object at any time to processing for direct marketing purposes or processing carried out on the basis of legitimate interests. Right to Withdraw Consent — Where processing is consent-based, to withdraw at any time without detriment. Right to Lodge a Complaint — With the UAE Data Office (uaedataoffice.gov.ae) or, for EEA residents, with the competent supervisory authority in your country of habitual residence. To exercise any of the above rights, submit a written request to [email protected]. We will respond within thirty (30) calendar days.

We implement appropriate technical and organisational security measures including: • TLS/SSL encryption for all data transmitted to and from our website; • Encrypted storage of sensitive documents and client files; • Role-based access controls limiting internal access on a strict need-to-know basis; • Regular staff training on data protection and information security; • Periodic security assessments and vulnerability reviews. In the event of a personal data breach likely to result in high risk to your rights, we will notify you and the relevant supervisory authority without undue delay.

Our services are not directed at individuals under the age of eighteen (18). Where minor data is submitted by a parent or legal guardian as part of a family visa application, such processing is conducted solely on the instruction of the applicant exercising parental responsibility, for the express purpose of the relevant application only.

We reserve the right to amend this Policy at any time. The revised Policy, together with its updated effective date, will be published at oki-doki.ae/privacy-policy. Where amendments are material, we will provide prominent notice on our website or notify you directly by email.