Privacy Policy

1. Who this policy covers

Golden Triangle Engineering Consultancy (المثلث الذهبي للاستشارات الهندسية), referred to as Golden Triangle or the Company, operates this client portal. This policy explains the handling of personal information when you register, request engineering services, communicate with the team or manage projects. It also covers information entered by authorised staff or project representatives to administer client relationships. Project agreements may contain additional confidentiality obligations.

2. Information handled

Depending on the services and features used, information may include:

• Account details: name, email, telephone or WhatsApp number, verified contact details and permissions.
• Project records: location, requirements, drawings, ownership or identity documents where provided, proposals, budgets, schedules and approvals.
• Communications and media: messages, documents, photographs, recordings, site observations and camera content where enabled and used.
• Financial records: invoices, amounts, payment status, receipts, references and supporting documents.
• Technical and security records: sign-in and session times, IP address, browser or device information, verification requests and audit records.
• Automated-assistance data: inputs submitted to enabled AI features and the resulting responses, analyses or summaries.

3. Sources and optional Google sign-in

Information may come from you, authorised Company staff, project participants or services you choose. Contact details in the client register may be matched to your verified account to provide access to assigned projects. Optional Google sign-in or sign-up supplies identity information such as an account identifier, verified email and basic profile details. The identity token is used for verification; this integration does not request access to Gmail messages, Google Drive files, contacts or calendars, and does not grant administrator permissions.

4. Purposes of processing

Information supports account verification, correct project assignment, permissions and session management, proposals, agreed engineering services, project coordination, reports, recorded decisions, invoices, payment administration and enquiries. Contact and technical records also support verification-code delivery, service messages, misuse prevention, security investigations and relevant legal, accounting or audit obligations. The lawful basis depends on the circumstances, including an agreement, a legal requirement, consent where required or another basis permitted by applicable law.

5. Access and sharing

Project information is available according to account permissions and project responsibilities. Relevant records may be accessed by authorised Company staff, consultants, contractors and other participants where required and permitted for the agreed work. Configured providers may process information necessary for hosting, communications, email or WhatsApp delivery, identity verification, payment services where offered, and automated assistance. Disclosure to competent authorities may occur where required or otherwise permitted by law. Do not upload information you lack authority to share.

6. AI features and project media

When an AI feature is used, relevant messages, documents or project information may be processed by the platform and configured AI providers to generate responses or summaries. Submit only necessary information and avoid unnecessary sensitive personal details. Automated output may be inaccurate and requires appropriate human review. Site media and camera features, where enabled, support the relevant project workflow. Participants must obtain necessary permissions for capture and sharing and must not use them for unrelated monitoring or distribute media beyond authorised recipients.

7. Cookies and browser storage

The portal uses browser storage for application sessions, preferences and temporary workflow state. Secure cookies may recognise a verified browser and support account security. Session records support management and security auditing. You can manage stored site data through browser settings; blocking or clearing required storage may sign you out, remove temporary verification state or require verification again. Third-party sign-in services may apply their own cookie and privacy settings.

8. Security

Account permissions, verification controls and audit records help protect access. Account passwords and verification codes are stored in hashed form rather than as readable credentials. Electronic transmission and storage are not risk-free. Protect your password and codes, sign out on shared devices and report suspected misuse or incorrect project access promptly. Avoid placing passwords or unnecessary identity, banking or card information in messages or documents.

9. Storage locations and retention

Information is processed using configured infrastructure and providers; depending on the feature or provider, processing may occur outside the UAE. Applicable cross-border data-transfer requirements must be taken into account; this policy does not represent that all information is stored only in the UAE. Retention depends on the record, purpose, project relationship and contractual, accounting, legal or dispute requirements. Account closure does not automatically erase project documents, invoices, audit records or backups that must be retained. Deletion requests are reviewed against those requirements; backup copies may remain until their applicable retention cycle ends.

10. Your requests and choices

Subject to applicable law, you may request information about your personal data, access or correction, deletion where available, or restriction of processing. Where processing depends on consent, you may request withdrawal without affecting earlier lawful processing. Identity and authority may need verification, and requests may be limited by retention obligations, other people's rights or an ongoing project or claim. You can request correction of contact details or project assignments. Signing out or removing a Google connection does not itself delete your Company account or project records.

11. Intended users and external services

The portal is intended for project owners, authorised representatives and professionals using the Company's services, and is not directed at children. Provide other people's information only where necessary and authorised. External links, Google sign-in, WhatsApp and other third-party services have their own privacy notices, which you should review when using them. The Company's handling of information within this portal is addressed here.

12. Updates and privacy enquiries

This policy may change when features, processing arrangements or applicable requirements change. The current version and date appear here; material changes and any additional consent requirements will be communicated where legally required. For privacy questions or personal-data requests, email the Company at the address below. You may also contact your assigned project manager or use available portal communication channels. Explain your request without sending unnecessary sensitive documents; the team can advise on verification.

Email: info@goldentrianglece.cloud