Privacy Policy
Last updated: 4 November 2026
1. Who we are
This Privacy Policy explains how JOLAG Consulting FZE, a free zone company in the United Arab Emirates ("we", "us", "our"), collects and uses personal data through the website at medullahr.com and www.medullahr.com (the "Website"). We are the controller of the personal data described here.
Contact for privacy matters: info@medullahr.com
This policy covers the Website. Personal data that customers process inside the MedullaHR platform is handled under the customer agreement and any data processing terms agreed with that customer.
2. What personal data we collect
Information you give us. When you use the demo request form we collect your name, work email address, company name, number of staff, the HR areas you tick, and any text you type in the "Something else" box. If you email us we keep the email and your contact details.
Information collected automatically. Our hosting and security providers process technical data such as your IP address, browser type and version, device type, pages visited, time and date of visit, and the country you appear to be in. When you submit the form, a bot-detection check assesses whether you are a person, using technical signals from your browser.
We do not ask for, and you should not send us, sensitive personal data such as health information, religion or ethnicity, or identity document numbers.
3. How and why we use your data
| Purpose | What we use | Basis |
|---|---|---|
| Responding to your demo request and arranging a presentation | Name, email, company, staff number, tasks ticked, message | Your request and consent; steps taken at your request before a contract |
| Keeping the Website secure and blocking spam and abuse | IP address, browser signals, bot-detection result | Our legitimate interest in protecting the Website |
| Understanding how many people visit the Website | Cookie-free visit statistics | Our legitimate interest in improving the Website |
| Following up with you about MedullaHR | Contact details | Your consent, which you can withdraw at any time |
| Meeting legal and regulatory duties | As required | Legal obligation |
We do not sell your personal data. We do not use it for automated decisions that significantly affect you.
4. Who we share your data with
We share personal data only with trusted service providers who help us run the Website and our business, and only as needed. These include providers of website hosting and security, email delivery and business email, and services that supply parts of the Website such as web fonts. We also share personal data with professional advisers, and with public or regulatory authorities where the law requires. We require our providers to protect personal data and to use it only for the services they perform for us.
5. International transfers
Some of our providers store or process data outside the UAE, including in the European Union and the United States. Where personal data leaves the UAE we take steps to make sure it stays protected, such as using providers with recognised security standards and contractual commitments to protect personal data.
6. How long we keep your data
We keep demo request details for as long as needed to deal with your request and any follow-up, and no longer than 24 months after our last contact with you unless you become a customer or the law requires us to keep it longer. Technical logs are kept by our providers for short periods under their own settings.
7. How we protect your data
We use measures suited to the risk, including encrypted connections (HTTPS), access controls on our email and systems, anti-spam and bot-detection checks, and limiting access to people who need it. No system is completely secure, so we cannot guarantee absolute security. If a data breach affecting you occurs we will notify you and the authorities as the law requires.
8. Your rights
Under UAE data protection law you may have the right to: know what personal data we hold about you and how we use it; get a copy of it; ask us to correct inaccurate data; ask us to delete or restrict our use of it; object to certain uses; ask for your data in a portable format; and withdraw consent at any time. To use any of these rights, email info@medullahr.com. We will reply within 30 days. We may need to confirm your identity first.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UAE Data Office or any other competent authority.
9. Children
The Website is for business use and is not directed at anyone under 18. We do not knowingly collect personal data from children.
10. Cookies
Please read our Cookie Notice for details of the cookies and similar technologies on the Website.
11. Links to other sites
The Website may link to other sites, including the MedullaHR staff portal. This policy does not cover other sites. Please read their privacy notices.
12. Changes to this policy
We may update this policy from time to time. We will show the "Last updated" date at the top and, for significant changes, give a clearer notice on the Website.
13. Contact
JOLAG Consulting FZE
United Arab Emirates
info@medullahr.com