Privacy policy

Controller

OPERA ENGINEERING FZ-LLC is the controller of your personal data.

OPERA ENGINEERING FZ-LLC, FXMB0229, Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Email: hello@ele-bos.com. Phone/WhatsApp: +971 50 511 1496.

Data we collect

We only collect what we need to manage your booking and answer your questions.

• Booking data: name, email address, phone or WhatsApp number, country, salon name, chosen group, chosen payment method, optional notes, booking reference and status.
• Residency and Emirates ID: whether you are resident in the United Arab Emirates and, if you are, your Emirates ID number. We ask because UAE VAT rules turn on your residency, and we ask you rather than guessing it from your phone number or address. It never changes the price you pay.
• Payment data: the payment method you select and confirmation of payment. Card and bank credentials are handled by the payment provider, not by us.
• Communication data: messages you send us by email or WhatsApp.
• Technical data: strictly necessary information used to deliver and secure the website, such as the request logs generated by our hosting provider.

Why we use it and on what basis

• To register your booking, allocate your place and issue your participation voucher — performance of the contract with you.
• To collect payment and issue invoices — performance of the contract and legal obligation.
• To apply the correct VAT treatment to your booking and record it in our accounts — legal obligation under UAE tax law. This is the only reason we hold your Emirates ID number.
• To contact you about the course, timetable or venue — performance of the contract.
• To keep accounting and tax records — legal obligation under UAE law.
• To send you information about future courses — only with your consent, withdrawable at any time.

Who we share it with

We share data only with providers who help us run the service: our website and database hosting provider, the payment provider you choose (Ziina or Tabby), our accountant, and the venue where entry lists are required. We never sell personal data.

If you choose Tabby, that provider acts as an independent controller for the instalment agreement you enter into with it: it decides on your application under its own privacy policy and may carry out its own identity and affordability checks. We pass it only what the payment requires, and we receive back the outcome and the payment status.

Some providers are located outside the United Arab Emirates. Where data is transferred abroad we rely on providers that offer an adequate level of protection and appropriate contractual safeguards, as required by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

How long we keep it

Booking and payment records are kept for the period required by UAE accounting and tax rules (currently five years from the end of the relevant tax period). Enquiries that do not lead to a booking are deleted within 12 months. Marketing contacts are kept until you withdraw consent.

Your Emirates ID number is part of that tax record and is deleted with it. If your booking is cancelled or never paid, we delete the number as soon as the booking is closed, because there is then no invoice for it to support. You can ask us to delete it at any point once your invoice no longer depends on it.

Security

Data is stored on access-controlled servers, transmitted over encrypted connections, and reachable only by the people who need it to organise the course. If a breach affects your rights, we notify you and the competent authority as required by law.

Your Emirates ID number is held apart from the documents that travel: it is never printed on your participation voucher, never included in an email, and never passed to a payment provider. It is visible only to us, in the booking record.

Your rights

Under UAE data protection law, and under the GDPR if you contact us from the European Union, you may:

• ask for a copy of your data and information about how it is used;
• ask us to correct inaccurate data;
• ask us to delete data we no longer need;
• restrict or object to certain uses, including marketing;
• ask for your data in a portable format;
• withdraw consent at any time, without affecting past processing;
• lodge a complaint with the UAE Data Office or your local supervisory authority.

Children

The course and this website are intended for professionals aged 18 or over. We do not knowingly collect data from children.

Changes

We may update this policy. The date at the top of this page always shows the current version.