This Privacy Policy explains how MindMap Human Capital LLC ("MindMap Human Capital", "we", "us", or "our") collects, uses, stores, shares and protects personal data when you:
- visit and use our website at www.mindmaphumancapital.com (the "Website"); and
- use our MindMap HC mobile application (the "App").
We are committed to protecting your privacy and complying with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) ("PDPL") and other applicable data-protection laws.
01 Who we are (Data Controller)
MindMap Human Capital LLC, Dubai, United Arab Emirates. Backed by MindMap Digital LLC.
Contact: admin@mindmaphumancapital.com · +971 55 491 4270
02 Data we collect via the Website
When you submit our contact form or interact with the Website, we may collect:
- Contact-form data: company name, your name, email address, phone number, service required, approximate number of workers, and the requirement details you provide.
- Technical & usage data: IP address, browser type, device information, pages visited and basic analytics, collected automatically and via cookies (see Section 9).
We use Website data to respond to your enquiry, provide our services, and improve the Website.
03 Data we collect via the App
The App is a business workforce-management tool used by our authorised staff and by workers of organisations we serve. Through the App we process the following categories of data:
| Category | Examples | Purpose |
|---|---|---|
| Personal information | Full name, phone, email | Account management |
| Government-issued documents | Passport, Emirates ID, visa | Visa processing & onboarding only |
| Medical information | Medical fitness certificate | Visa onboarding requirement |
| Financial information | Salary, expenses | Internal payroll/expense tracking & approval |
| Attendance & work site | Clock-in/out time and assigned work site (we do not collect device GPS location) | Attendance management |
| Device identifiers | Push-notification (FCM) token | Sending notifications |
| Photos | Document/profile images you upload | Document management |
Biometric authentication
If you enable Face ID / fingerprint login in the App, biometric verification is performed entirely on your device by your operating system. We never receive, store, or transmit your biometric data, and it is never used for tracking or profiling.
04 How we use your data
- To respond to enquiries and provide recruitment, staffing and workforce-outsourcing services.
- To manage the worker lifecycle: candidate tracking, visa processing, onboarding, attendance, expense approvals and compliance monitoring.
- To operate, secure and improve the Website and App.
- To comply with legal, visa, immigration and UAE labour-law obligations.
Government-issued documents are used solely for visa processing and employee onboarding, and access is restricted to authorised HR and PRO staff. We do not sell or rent your personal data, and we do not use it for third-party advertising.
05 Where your data is stored & international transfers
Data is stored on secure cloud infrastructure with encryption in transit and at rest:
- Application servers — Railway
- Database — Neon / PostgreSQL
- Documents — Cloudflare R2
These providers host data outside the UAE. Such transfers are permitted under the PDPL where appropriate safeguards are in place, and we rely on the security commitments of these providers (our organisation maintains ISO 27001, ISO 9001:2015 and HIPAA-aligned controls).
06 Data retention
We keep personal data only as long as necessary. Website enquiry data is kept for as long as needed to handle your request and our legitimate business records. App data relating to workers is retained for the duration of employment plus any period required by UAE labour and immigration law, after which it is securely deleted or anonymised.
07 Sharing & disclosure
We may share data with:
- the employer organisation's authorised administrators (for App worker data);
- UAE government authorities, where required for visa and labour compliance;
- service providers (e.g. hosting, email delivery) acting under confidentiality obligations; and
- professional advisers or authorities where required by law.
We never share personal data without a lawful basis under the PDPL.
08 Security
We apply technical and organisational measures including encryption, role-based access controls, and audit logging. Our certifications include ISO 27001 (information security), ISO 9001:2015 (quality), and HIPAA-aligned practices. No system is perfectly secure, but we work to protect your data continuously.
09 Cookies
The Website may use essential and analytics cookies to function and to understand usage. You can control cookies through your browser settings. If we add non-essential tracking in future, we will request your consent as required.
10 Your rights & how to delete your data
Under the PDPL you have the right to access, correct, delete, and restrict or object to the processing of your personal data, and to withdraw consent. To exercise any right, or to delete your account and data, you can:
- In the App: open Profile → Delete Account;
- Online: www.mindmaphumancapital.com/account-deletion.html;
- By email: admin@mindmaphumancapital.com.
We respond to requests within 30 days, subject to retention required by law.
11 Children
The Website and App are intended for business users and adults (18+). We do not knowingly collect data from children.
12 Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date above shows the latest revision. Material changes will be reflected on this page.
13 Contact us
For any privacy question or to exercise your rights, contact admin@mindmaphumancapital.com or write to MindMap Human Capital LLC, Dubai, United Arab Emirates.