Privacy Policy

ETS Group is the data controller for personal information processed through this website and our commercial activities. The lead controller is Emirates Transformer & Switchgear LLC, registered at P.O. Box 16842, Jebel Ali, Dubai, United Arab Emirates. Our United States operations are handled by ETS USA based on the East Coast, and our United Kingdom operations by Sura Power Ltd. Where you contract with a specific regional entity, that entity acts as the controller for the data you provide in connection with that engagement. This policy covers personal data of website visitors, prospective and existing customers, supplier and channel-partner contacts, job applicants, and any other individual whose data we process in the course of our business.

We only collect data that is necessary, relevant and proportionate to a clear business purpose. Categories include: • Identification and contact details — full name, job title, company name, business email, phone number, country, preferred language. • Project and technical data — Request-for-Quotation (RFQ) submissions, capacity and voltage requirements, single-line diagrams, site information, delivery timelines, technical specifications and any drawings you upload. • Commercial information — purchase orders, invoicing details, payment references, shipping addresses, Incoterms preferences and trade-compliance declarations. • Recruitment data — CVs, cover letters, work history, references and right-to-work information submitted via our careers channels. • Technical and usage data — IP address, browser, device type, operating system, referring URL, pages viewed, session duration and interactions with on-site tools, collected via cookies and analytics. • Communications — emails, chat transcripts, call notes and any correspondence exchanged with our sales, engineering, service or support teams. We do not knowingly collect special-category data (such as health, religion or biometrics). Please do not include such information in RFQs or correspondence.

Each processing activity is supported by at least one lawful basis under GDPR Article 6 (or the equivalent provision under PDPL / CCPA): • Performance of a contract — preparing quotations, fulfilling purchase orders, manufacturing, factory acceptance testing, shipping, commissioning and after-sales service. • Legitimate interests — managing client relationships, securing our IT estate, preventing fraud, improving our products and digital tools, and conducting business analytics in an aggregated form. • Legal obligation — meeting tax, customs, export-control, anti-money-laundering, accounting and product-liability record-keeping requirements. • Consent — sending marketing emails, technical newsletters or event invitations; you can withdraw consent at any time without affecting prior processing. We do not use personal data for automated decision-making that produces legal or similarly significant effects, and we do not engage in profiling for advertising purposes.

Our website uses a small number of cookies and similar technologies, grouped into three categories: • Strictly necessary — required for the site to function (session, security, language and region preferences). These cannot be switched off. • Performance and analytics — anonymised statistics about how visitors use the site, helping us improve content and tools. We currently use Google Analytics 4 with IP-anonymisation enabled. • Functional — remembers preferences such as units (kVA / MVA), region and locale. We do not run advertising trackers, cross-site behavioural-advertising pixels or fingerprinting scripts. You can block or delete cookies at any time through your browser settings; some site features may then be limited.

We never sell, rent or trade personal data. We share it only with the categories of recipients below, and only to the minimum extent required: • ETS Group affiliates — Emirates Transformer & Switchgear LLC (UAE), ETS USA and Sura Power Ltd (UK), where coordinated handling of an enquiry, order or service request is necessary. • Trusted service providers — IT and cloud hosting, CRM, email, analytics, document signing, freight forwarders, customs brokers and certified testing laboratories. All providers are bound by written data-processing agreements. • Professional advisors — auditors, legal counsel and insurers, where strictly necessary. • Authorities — when required by law, court order or to comply with export-control, sanctions or customs obligations. • Business transactions — in the event of a merger, acquisition or restructuring, with appropriate confidentiality safeguards.

Because ETS operates across the UAE, the United States and the United Kingdom, personal data may be transferred between these jurisdictions and to service providers located elsewhere. When we transfer data outside the UAE, the EEA or the UK, we rely on: • Adequacy decisions, where they exist; • Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office; • The UAE Data Office's approved cross-border transfer mechanisms under the PDPL; • Supplementary technical measures including encryption in transit and at rest. A copy of the safeguards in place can be requested from our Data Protection contact.

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet legal, regulatory, tax and warranty obligations. Indicative retention periods: • RFQ and prospect data — up to 24 months from last meaningful contact, unless converted into a customer relationship. • Customer and order records — duration of the contract plus 10 years for warranty, statutory and tax purposes. • Recruitment data — 12 months for unsuccessful applicants (with consent), or longer if you ask to be kept on file. • Website analytics — anonymised after 14 months. At the end of the retention period, data is securely deleted or fully anonymised.

Subject to applicable law, you have the right to: • Access — obtain confirmation of whether we process your data and a copy of it. • Rectification — ask us to correct inaccurate or incomplete information. • Erasure — request deletion where the data is no longer necessary or where you withdraw consent. • Restriction and objection — limit or object to certain processing, including direct marketing. • Data portability — receive your data in a structured, commonly used, machine-readable format. • Withdraw consent — at any time, where processing relies on consent. • Lodge a complaint — with the UAE Data Office, the EU/UK supervisory authority or your local regulator. To exercise any of these rights, write to [email protected]. We respond within 30 days and may need to verify your identity before disclosing data.

We protect personal data with a layered set of technical and organisational controls aligned with ISO 27001 principles: • Encryption — TLS 1.2+ for all data in transit; AES-256 for sensitive data at rest. • Access control — role-based permissions, multi-factor authentication for all employee accounts and least-privilege provisioning. • Network and endpoint security — firewalls, DDoS protection, vulnerability scanning, patched and monitored endpoints. • Operational controls — staff training, confidentiality agreements, vendor due diligence, segregated production and test environments, and documented incident-response procedures. • Physical security — restricted access to manufacturing, server and archive areas at all sites. In the unlikely event of a personal-data breach affecting your rights, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay where required by law.

Our website and services are intended for business users. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided personal data through our channels, please contact us so we can delete it.

Our website may contain links to third-party sites — utility partners, certification bodies, suppliers, news outlets — over which we have no control. This Privacy Policy does not apply to those sites; we encourage you to read their own privacy notices before sharing personal data.

We have appointed a Data Protection contact for the ETS Group. For any question, request or complaint about this policy or the way we handle your data: • Email — [email protected] • UAE postal address — Data Protection Officer, Emirates Transformer & Switchgear LLC, P.O. Box 16842, Jebel Ali, Dubai, UAE • Phone — +971 4 881 6288 For enquiries specific to the United States or United Kingdom, please write to the same address indicating your region; the request will be routed to the appropriate regional contact. We may update this Privacy Policy from time to time. The effective date at the top of the page will reflect the latest revision; material changes will be highlighted on the website.