Privacy Policy

1.1. In this Privacy Policy, the following definitions apply:

“Authorised User” means any individual whom a Client permits to access or use the Platform, including administrators, supervisors and monitored personnel;

“Client” means the organisation that has entered into an agreement with WorkVerse for access to the Platform;

“Client Data” means all data uploaded to, generated within, or collected through the Platform by or on behalf of a Client, including activity and performance data relating to Authorised Users;

“PDPL” means the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations;

“Personal Data” means any data relating to an identified or identifiable natural person;

“Platform” means the WorkVerse software platform and related services;

“Website” means the website located at https://workverse.me/.

1.2. This Privacy Policy covers two very different situations, and it is important to understand which one applies to you:

1. when you visit or interact with the Website, WorkVerse is the controller of your Personal Data and decides how it is used, as described in clause 3; and
2. when Personal Data is processed within the Platform (including Client Data relating to Authorised Users), the Client is the controller and decides why and how that data is processed. WorkVerse acts only as a processor, on the Client's documented instructions, as described in clause 4.

1.3. Where WorkVerse acts as a processor, the relevant Client's own privacy notice governs the processing, and any questions about that processing should be directed to the Client.

2.1. This Privacy Policy is directed at visitors to the Website, representatives of Clients and prospective Clients, and any other individual whose Personal Data WorkVerse processes as a controller.

2.2. If you are an Authorised User being monitored through the Platform, your Personal Data is processed under the control of your employer or the relevant Client, not WorkVerse. Please refer to that organisation's privacy notice.

3.1. When you interact with the Website or with WorkVerse directly, we may collect:

1. identity and contact data, such as your name, job title, employer, email address and telephone number;
2. account and login data, where you register for or administer access to the Platform;
3. communications data, such as the content of enquiries, support requests and correspondence with us;
4. technical and usage data, such as IP address, device and browser information, and how you use the Website, collected through cookies and similar technologies; and
5. marketing and preference data, such as your communication preferences.

3.2. We collect this data directly from you, automatically through your use of the Website, and, where relevant, from your employer or from publicly available sources.

3.3. Where you do not provide Personal Data that we reasonably need, we may be unable to provide you with access to the Website or the Platform or to respond to your enquiry.

4.1. When WorkVerse provides the Platform to a Client, it processes Client Data, which may include Personal Data relating to Authorised Users such as activity and performance data, and, where the Client enables the relevant optional features, location (GPS) data and workplace selfie images.

4.2. WorkVerse processes such data only to provide, maintain, secure and support the Platform, on the Client's documented instructions, and as required by applicable law. WorkVerse does not decide the purposes for which this data is processed and does not use it for its own purposes.

4.3. The Client is solely responsible for establishing a lawful basis for its processing, providing all required notices to and obtaining all required consents from Authorised Users (including explicit consent where required for biometric or sensitive Personal Data), and for responding to requests from individuals regarding their data. Where WorkVerse processes Personal Data on behalf of a Client, that processing is governed by the WorkVerse Data Processing Agreement.

5.1. As controller, we use your Personal Data to:

1. provide, administer and secure access to the Website and the Platform;
2. respond to your enquiries and provide customer and technical support;
3. manage our relationship with Clients and prospective Clients, including billing and account administration;
4. understand and improve the Website and our services;
5. send you service communications and, where permitted, marketing communications about our products and services; and
6. comply with our legal and regulatory obligations and protect our legal rights.

6.1. Under the PDPL, we rely on one or more of the following bases when processing your Personal Data as controller:

1. your consent, which you may withdraw at any time;
2. the performance of a contract with you or with the Client you represent, or steps taken at your request before entering into a contract;
3. compliance with a legal obligation to which we are subject; and
4. our legitimate interests in operating, securing, promoting and improving our business, where these are not overridden by your interests and rights.

6.2. Where we rely on your consent, including for certain marketing or non-essential cookies, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

7.1. We may share your Personal Data with:

1. our service providers and processors who support the operation of the Website, the Platform and our business, such as hosting, analytics, communications and payment providers;
2. the Client or employer you are associated with, where relevant to your access to the Platform;
3. professional advisers, auditors and insurers;
4. competent authorities, regulators, courts or law enforcement, where required by law or to protect our rights; and
5. any actual or prospective purchaser in connection with a corporate transaction involving WorkVerse.

7.2. We require our service providers to process Personal Data only on our instructions and to protect it appropriately. We do not sell your Personal Data.

8.1. Your Personal Data may be transferred to, and processed in, countries outside the UAE where our service providers or systems are located.

8.2. Where we transfer Personal Data outside the UAE, we do so in accordance with the PDPL, ensuring that an adequate level of protection exists or that appropriate safeguards, or another lawful transfer basis such as your explicit consent, are in place.

9.1. We implement appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, and unauthorised access or disclosure. These measures include access controls, encryption where appropriate, and internal policies and staff training.

9.2. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

10.1. We keep Personal Data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, regulatory or reporting requirements.

10.2. When Personal Data is no longer required, we securely delete or irreversibly anonymise it. Where WorkVerse acts as a processor, retention of Client Data is determined by the relevant Client.

11.1. Subject to and in accordance with the PDPL, you have the right to:

1. be informed about, and request access to, the Personal Data we hold about you;
2. request the correction of inaccurate or incomplete Personal Data;
3. request the erasure of your Personal Data in certain circumstances;
4. request the restriction of, or object to, the processing of your Personal Data;
5. request the transfer of your Personal Data in a structured, machine-readable format, where applicable; and
6. withdraw your consent at any time where we rely on consent.

11.2. Where WorkVerse acts as a processor, requests relating to Personal Data processed within the Platform should be directed to the relevant Client, and we will support that Client in responding.

11.3. To exercise any of your rights, please contact us using the details in clause 14. We may need to verify your identity before responding. You also have the right to lodge a complaint with the UAE Data Office.

12.1. The Website uses cookies and similar technologies. For details of the cookies we use and how to manage them, please see our Cookie Policy.

13.1. We may update this Privacy Policy from time to time for operational, legal or regulatory reasons. The revised version will be posted on the Website with an updated “Last updated” date, and we encourage you to review it periodically.

14.1. If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

14.2. Data Protection Officer contact details will be added if a DPO is appointed.