Your Privacy Matters to Us

Make My Garden® is a trading name of Hyperclean Technical Services LLC, a company registered and licensed in the Emirate of Dubai, United Arab Emirates. Throughout this Privacy Policy, references to "Make My Garden®," "we," "us," or "our" refer to Hyperclean Technical Services LLC operating under the Make My Garden® brand.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website (makemygarden.ae), communicate with us via WhatsApp, telephone, or email, or engage our services for landscaping, swimming pool construction, garden maintenance, or any related project.

We are committed to protecting your privacy in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), Dubai Law No. 26 of 2015 concerning the Dubai Data Establishment, and applicable provisions of the EU General Data Protection Regulation (GDPR) where relevant to international visitors.

By using our website or engaging our services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.

Personal Information You Provide Directly

When you submit an enquiry through our contact form, request a quotation, or engage our services, we may collect the following personal information:

• Full name — to address you personally and maintain project records
• Email address — for sending quotations, project updates, and responding to your enquiries
• Phone number — for project coordination, consultation scheduling, and urgent communications
• Villa community or area — to assess project feasibility, determine authority approval requirements (DM, DDA, TRAKHEES, EMAAR, NAKHEEL, DAMAC), and provide accurate quotations
• Service interest — whether you require landscaping, swimming pool construction, garden maintenance, pergola installation, artificial grass, or other services
• Project details and preferences — design requirements, budget indications, timeline expectations, and property photographs you choose to share

Information Collected Automatically

When you visit makemygarden.ae, our systems automatically collect certain technical information:

• IP address — for security monitoring and approximate geographic location
• Browser type and version — to ensure our website displays correctly
• Device type and operating system — for responsive design optimisation
• Pages visited, time spent, and navigation paths — to understand how visitors use our website
• Referring website — to understand how visitors find us
• Cookie identifiers — as described in the Cookies and Tracking section below

WhatsApp Communication Data

When you contact us via WhatsApp, we receive your phone number, display name, and the content of messages you send us (including text, photos, videos, voice notes, and documents). WhatsApp communications are end-to-end encrypted by Meta. We store conversation records for project management and service delivery purposes.

We collect your personal data through the following channels:

• Website contact forms — when you submit an enquiry or request a consultation through makemygarden.ae
• WhatsApp — when you message us directly or click a WhatsApp link on our website
• Telephone calls — when you call us at +971 52 786 9214 or we call you to discuss a project
• Email correspondence — when you email info@makemygarden.ae or reply to our communications
• Site visits and consultations — when our team visits your property for a free consultation
• Cookies and tracking technologies — as described in Section 9 below
• Google Analytics — for aggregated website usage statistics

We use your personal data for the following specific purposes:

• Responding to your enquiries — replying to contact form submissions, WhatsApp messages, and phone calls within 24 hours
• Providing quotations — preparing accurate, itemised, fixed-price quotations for landscaping, pool construction, or garden maintenance projects
• Project management — coordinating design, approvals, construction, and handover; sending daily progress updates; managing material procurement
• Authority approvals — submitting applications to Dubai Municipality (DM), Dubai Development Authority (DDA), TRAKHEES, and community management (EMAAR, NAKHEEL, DAMAC) on your behalf
• Warranty and after-service — managing your 1-year workmanship warranty, scheduling follow-up inspections, and providing maintenance recommendations
• Marketing communications — sending you project inspiration, seasonal garden care tips, and special offers, but only with your explicit prior consent and with an easy opt-out mechanism in every message
• Website improvement — analysing aggregated, anonymised usage data to improve the content, navigation, and performance of makemygarden.ae
• Legal compliance — fulfilling our obligations under UAE law, including tax records, contractual documentation, and regulatory reporting

Under Article 5 of UAE Federal Decree-Law No. 45/2021 (Personal Data Protection Law), we process your personal data on the following lawful bases:

• Consent (Article 5(1)) — When you voluntarily submit your data through our contact form, WhatsApp, or telephone call, you consent to its processing for the stated purposes. You may withdraw your consent at any time by contacting us.
• Contractual necessity (Article 5(2)) — When you engage us for a landscaping, pool construction, or maintenance project, we process your data as necessary to perform our contractual obligations, including design, procurement, construction, approval submissions, and warranty service.
• Legitimate interest (Article 5(4)) — We process certain data for our legitimate business interests, such as improving our website, preventing fraud, and maintaining security. We balance these interests against your rights and freedoms.
• Legal obligation (Article 5(3)) — We retain certain records as required by UAE commercial law, tax regulations, and Dubai Economic Department licensing requirements.

For visitors from the European Union, we additionally rely on the lawful bases set out in Article 6 of the GDPR, including consent, performance of a contract, and legitimate interest.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Hyperclean Technical Services LLC — our parent company, for administrative and operational purposes
• Government authorities — Dubai Municipality, DDA, TRAKHEES, and community management offices (EMAAR, NAKHEEL, DAMAC), solely for the purpose of obtaining project approvals on your behalf
• Hosting and infrastructure providers — our web hosting provider, who stores website data on servers secured with industry-standard encryption
• Analytics services — Google Analytics (operated by Google LLC), which receives anonymised and aggregated usage data
• Form processing — WPForms or equivalent WordPress form plugin, which processes contact form submissions on our server
• Communication platforms — WhatsApp (operated by Meta Platforms, Inc.), when you choose to communicate with us through that channel
• Material suppliers and subcontractors — only project-relevant information (such as delivery address and project specifications), never your broader personal data
• Legal and regulatory bodies — when required by law, court order, or government directive, or to protect our legal rights

All third-party service providers are contractually required to protect your personal data and process it only for the specific purposes for which it was shared.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Enquiries that do not proceed — retained for up to 24 months, after which they are securely deleted
• Active project records — retained for the duration of the project plus 7 years, as required by UAE commercial law for business records and tax documentation
• Warranty records — retained for the 1-year warranty period plus an additional 2 years to address any post-warranty claims
• Marketing consent records — retained for as long as you remain subscribed, plus 12 months after unsubscription for compliance verification
• Website analytics data — automatically anonymised after 14 months (Google Analytics default retention)
• WhatsApp conversation history — retained for the duration of the project relationship plus 3 years

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with you.

Under UAE Federal Decree-Law No. 45/2021, you have the following rights regarding your personal data:

• Right of access — You may request a copy of the personal data we hold about you, including its source, purpose, and any recipients
• Right to correction — You may request that we correct any inaccurate or incomplete personal data
• Right to deletion — You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations
• Right to withdraw consent — Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal
• Right to restrict processing — You may request that we limit how we use your data in certain circumstances
• Right to data portability — You may request your personal data in a structured, commonly used, machine-readable format
• Right to lodge a complaint — You have the right to file a complaint with the UAE Data Office (established under Article 29 of the PDPL) if you believe your data protection rights have been violated

To exercise any of these rights, please contact us using the details in Section 15 below. We will respond to your request within 30 calendar days. We may request verification of your identity before processing your request.

Our website uses cookies — small text files stored on your device — to enhance your browsing experience and help us understand how visitors use makemygarden.ae.

Types of Cookies We Use

• Essential cookies — Required for the website to function properly. These include WordPress session cookies and security tokens. They cannot be disabled without impairing core site functionality.
• Analytics cookies — Google Analytics cookies (_ga, _gid, _gat) that help us understand visitor behaviour in aggregate. These cookies do not identify you personally. They track page views, session duration, bounce rate, and traffic sources.
• Functional cookies — Remember your preferences (such as form field entries) to improve your experience on return visits.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect the functionality of our website. Here is how to manage cookies in common browsers:

• Google Chrome — Settings > Privacy and Security > Cookies and Other Site Data
• Safari — Preferences > Privacy > Manage Website Data
• Firefox — Settings > Privacy & Security > Cookies and Site Data
• Microsoft Edge — Settings > Cookies and Site Permissions

You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

Our website and operations rely on the following third-party services, each governed by its own privacy policy:

• Google Analytics (Google LLC) — Website traffic analysis. Google's privacy policy: policies.google.com/privacy
• WhatsApp (Meta Platforms, Inc.) — Customer communication channel. WhatsApp's privacy policy: whatsapp.com/legal/privacy-policy
• WordPress and WPForms — Content management and form processing. Form submissions are processed on our own server and are not sent to external WPForms servers.
• Web hosting provider — Server infrastructure and data storage. Our hosting provider maintains industry-standard security certifications and processes data under a data processing agreement with us.

We encourage you to review the privacy policies of these third-party services. We are not responsible for the privacy practices of external providers, though we select partners who meet appropriate data protection standards.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, as required by Article 6 of UAE Federal Decree-Law No. 45/2021. These measures include:

• SSL/TLS encryption — All data transmitted between your browser and makemygarden.ae is encrypted using HTTPS
• Access controls — Only authorised personnel with a legitimate business need can access your personal data
• Secure hosting — Our website is hosted on servers with firewall protection, intrusion detection, and regular security patches
• Regular backups — Automated, encrypted backups to prevent data loss
• Password policies — Strong password requirements and multi-factor authentication for administrative accounts
• Staff awareness — Our team is trained on data protection responsibilities and the importance of maintaining confidentiality

While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant UAE authorities within 72 hours, in compliance with the PDPL.

Our primary data processing and storage takes place in the United Arab Emirates. However, some of the third-party services we use (such as Google Analytics and WhatsApp) may transfer data to servers located outside the UAE, including in the United States and the European Economic Area.

Where personal data is transferred outside the UAE, we ensure that adequate safeguards are in place in accordance with Article 22 of UAE Federal Decree-Law No. 45/2021, including:

• Transfers to countries with adequate data protection standards as recognised by the UAE Data Office
• Standard contractual clauses or equivalent binding commitments from the receiving party
• Compliance with the data transfer provisions of the GDPR where applicable to EU residents

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. Our services — landscaping design, swimming pool construction, garden maintenance — are provided to adult property owners and residents.

If we become aware that we have collected personal data from a child under 18 without verified parental consent, we will take immediate steps to delete that data from our records. If you believe we may have inadvertently collected data from a minor, please contact us immediately using the details in Section 15.

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or operational needs. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Post the revised policy on makemygarden.ae
• For significant changes that affect how we process your data, we will endeavour to notify you directly via email or WhatsApp where we have your contact details

We encourage you to review this page periodically. Your continued use of our website or services after the publication of changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days and to fulfil formal data subject requests within 30 calendar days as required by the PDPL.

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office, the competent supervisory authority established under Federal Decree-Law No. 45/2021.