Privacy Policy
How we handle personal data on this website and across our enterprise platforms — written plainly, kept current.
Last updated · 22 May 2026
1. Who we are
3 IRIS IT Solutions (“3 IRIS”, “we”, “us”) is an enterprise technology company registered in the United Arab Emirates, operating from Meydan Free Zone, Meydan Grandstand, 6th Floor, Al Meydan Road, Nad Al Sheba 1, Dubai, UAE. This policy applies to personal data collected through our website (3irisitsolutions.ae), our chatbot, demo and contact forms, and any platform we operate under the brands AUDRA, IRIS, FOVEA, and OCR Intelligence.
2. What we collect
- You give us directly: name, work email, phone / WhatsApp number, company name, role, and the content of messages you send through the chatbot or contact forms.
- Collected automatically: IP address, device type, browser, pages viewed, referrer, and basic usage metrics. We do not use third-party advertising cookies on this site.
- From integrations you authorise: if you trial AUDRA, IRIS, FOVEA, or OCR Intelligence, the data processed inside those platforms is governed by a separate data processing agreement with your organisation.
3. Why we use it
- To respond to demo requests, sales enquiries, and support tickets.
- To operate and improve our products and this website.
- To send relevant product updates and event invitations — only if you have asked to receive them. You can unsubscribe at any time.
- To meet our legal, regulatory, and audit obligations in the UAE and any jurisdiction where we operate.
4. Legal basis (UAE PDPL)
We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. Our lawful bases include your consent (forms and chatbot), the performance of a contract (active customers and pilots), our legitimate interests (running a B2B website), and legal obligations.
5. Where it is stored
Personal data submitted through this website is stored on infrastructure we control, with regional preference for UAE and GCC data centres. Backups are encrypted at rest. We never sell personal data. Where we use sub-processors (for example, an email-delivery provider), we contract them under confidentiality and security obligations consistent with the PDPL.
6. How long we keep it
Lead records from demo and contact requests are retained for up to 24 months from last contact, then archived or deleted. Active customer data is retained for the term of the agreement plus any statutory retention required by UAE law.
7. Your rights
Subject to PDPL, you may request access, correction, deletion, restriction, or portability of your personal data, and you may withdraw consent for marketing communications. To exercise any right, email info@3irisitsolutions.ae. We will respond within 30 days.
8. Security
We follow industry-standard practices: HTTPS everywhere, HSTS, least-privilege access controls, encrypted transport for outbound email, audited backups, and role-based access on lead and customer records. No system is perfectly secure — please report suspected incidents to info@3irisitsolutions.ae.
9. Children
Our services are intended for businesses and adult professional users. We do not knowingly collect personal data from anyone under 18.
10. Changes
We may update this policy as our services evolve or to reflect regulatory change. We will revise the “Last updated” date above and, for material changes, notify customers via email.
11. Contact
Data Protection enquiries: info@3irisitsolutions.ae
Phone / WhatsApp: +971 54 179 1230
Postal address: Meydan Free Zone, Meydan Grandstand, 6th Floor, Al Meydan Road, Nad Al Sheba 1, Dubai, UAE
This page is a plain-language summary intended for transparency. It is not legal advice. For binding terms applicable to a specific engagement, refer to the master agreement or DPA signed with 3 IRIS.