Privacy Policy

Autism-Friendly UAE is the data controller responsible for your personal data. If you have any questions about this Policy or how we handle your data, you can contact us using the details in Section 11 (“Contact Us”).

We may collect and process the following categories of data:

• Account data — name and email address when you create an account to save favourites or rate places.
• User-generated content — place suggestions, ratings, certification claims and notes you submit.
• Uploaded evidence — documents and images you upload to verify an autism certification, stored in a private area and only viewable by you and our editors.
• Usage data — device type, browser and pages visited, collected through cookies and similar technologies.
• Communication data — details you provide when you contact us.

We process your personal data on the following legal bases under the PDPL:

• Consent — when you create an account, submit content or upload evidence.
• Performance of a contract — to provide the features you request, such as saving favourites.
• Legitimate interests — to operate, secure and improve the directory, where these interests do not override your rights.
• Legal obligation — where required by UAE law or a competent authority.

We use your personal data to:

• Operate and maintain the directory and your account.
• Display and aggregate ratings and suggestions you submit.
• Review and moderate user-submitted places and certification claims.
• Communicate with you about your submissions or account.
• Keep the directory updated with information from public sources.
• Prevent misuse and protect the security of the service.

We keep your personal data only for as long as necessary for the purposes set out in this Policy or as required by UAE law. Account data is retained while your account is active and deleted upon your request. Uploaded certification evidence is retained for the duration of the review process and thereafter only as needed to maintain records of verified certifications.

We do not sell your personal data. We may share it with:

• Our editors, who review your suggestions and certification claims.
• Service providers who help us host and operate the service, under appropriate confidentiality obligations.
• Competent UAE authorities where required by law or to protect legal rights.

Where personal data is transferred outside the UAE, we do so in accordance with the PDPL, ensuring an adequate level of protection through appropriate safeguards such as standard contractual clauses or lawful transfer mechanisms.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or loss, including access controls, encryption in transit and restricted, role-based access to sensitive data such as certification evidence.

You have the right to:

• Be informed about how your data is processed.
• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal exceptions.
• Object to or restrict certain processing of your data.
• Withdraw consent at any time, where processing relies on consent.
• Lodge a complaint with the competent UAE data protection authority.

To exercise any of these rights, contact us using the details in Section 11. We will respond in accordance with the timelines set by the PDPL.

The directory is designed for parents and guardians. We do not knowingly collect personal data directly from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

For privacy questions or to exercise your data protection rights, contact us at privacy@autismfriendly.ae.

We may update this Policy from time to time. We will notify you of material changes by posting the updated Policy on this page with a revised “Last updated” date.