PRIVACY POLICY

HOME PLANET TECHNICAL SERVICES L.L.C.

Effective Date: 01 Apr 2026 Last Reviewed: 01 Apr 2026 Website: www.homeplanetgroup.ae

1. INTRODUCTION AND SCOPE

Home Planet Technical Services L.L.C. (hereinafter referred to as the “Company”, “we”, “us”, or “our”), a limited liability company duly incorporated and registered under the laws of the Emirate of Dubai, United Arab Emirates, and licensed to provide handyman, technical, and maintenance services within the United Arab Emirates, is committed to protecting the privacy and personal data of every individual who visits our website www.homeplanetgroup.ae (the “Website”), engages our services, contacts us through any communication channel, or otherwise interacts with us in any capacity (each a “Customer”, “User”, “you”, or “your”).

This Privacy Policy (the “Policy”) sets out, in a transparent and comprehensive manner, the basis upon which any personal data we collect from you, or that you provide to us, will be collected, processed, stored, used, disclosed, and otherwise handled by the Company. This Policy is issued in accordance with, and shall be read in conjunction with, the applicable laws of the United Arab Emirates, including but not limited to:

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”), together with any executive regulations issued thereunder;

Federal Decree-Law No. 44 of 2021 concerning the Establishment of the UAE Data Office;

Federal Law No. 15 of 2020 on Consumer Protection, as amended by Federal Decree-Law No. 5 of 2023, together with Cabinet Resolution No. 66 of 2023 issuing the Executive Regulations thereof (collectively, the “Consumer Protection Legislation”);

Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services, together with Cabinet Resolution No. 28 of 2023 issuing the Executive Regulations thereof;

Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes; and

any other applicable federal or local legislation, regulation, ministerial decision, or directive issued by a competent authority of the United Arab Emirates or the Emirate of Dubai.

By accessing the Website, requesting a quotation, booking a service, or otherwise providing your personal data to the Company, you acknowledge that you have read, understood, and consented to the terms of this Policy.

2. DEFINITIONS AND INTERPRETATION

For the purposes of this Policy, capitalised terms shall bear the following meanings:

“Personal Data” means any data relating to an identified natural person, or a natural person who can be identified, directly or indirectly, by reference to an identifier such as name, voice, image, identification number, electronic identifier, geographical location, or one or more physical, physiological, economic, cultural, or social characteristics, as defined under Article 1 of the PDPL.

“Sensitive Personal Data” means any data which directly or indirectly reveals a natural person’s family, racial origin, political or philosophical opinions, religious beliefs, criminal record, biometric data, or any data related to that person’s health, including physical, psychological, mental, genetic, or sexual condition, as defined under the PDPL.

“Processing” means any operation or set of operations performed on Personal Data, whether by automated or manual means, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, restriction, erasure, or destruction.

“Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of Processing Personal Data. In respect of the Personal Data covered by this Policy, the Company is the Controller.

“Processor” means any natural or legal person who Processes Personal Data on behalf of the Controller.

“Data Subject” means the natural person to whom the Personal Data relates.

“Services” means any handyman, technical, electrical, plumbing, air-conditioning, painting, carpentry, masonry, gypsum, ceiling, maintenance, renovation, fit-out, or related residential or commercial services offered by the Company, whether on a one-off, contractual, or annual maintenance basis.

3. CATEGORIES OF PERSONAL DATA WE COLLECT

In the ordinary course of providing the Services and operating the Website, the Company collects and Processes the following categories of Personal Data:

3.1 Identification and Contact Data: full name, residential or premises address, Emirate, building or villa number, community, mobile telephone number, alternative contact number, e-mail address, and, where required for the issuance of a tax invoice or for verification purposes, Emirates ID number, passport number, or trade licence number.

3.2 Service-Related Data: details of the property at which the Services are to be rendered (including type, size, layout, and access instructions), nature of the technical issue or scope of work requested, photographs or videos of the work site or affected fixtures provided by you for diagnostic purposes, history of previous services rendered, warranty status, and call-back records.

3.3 Transactional and Financial Data: quotations, invoices, payment receipts, payment method (such as cash, bank transfer, card, or digital wallet), masked card details where payment is processed through a third-party payment gateway, and any refund or chargeback records. The Company does not store full payment card numbers, CVV codes, or banking credentials on its own servers.

3.4 Communications Data: the content of telephone calls (which may be recorded for quality and training purposes upon prior notice), WhatsApp messages, e-mails, contact-form submissions, chat-bot interactions, customer feedback, complaints, and survey responses.

3.5 Technical and Website Usage Data: Internet Protocol (IP) address, device type, operating system, browser type and version, referring URL, pages visited, duration of visit, click-stream data, geographical location at country or city level, and cookie identifiers, collected automatically when you access the Website.

3.6 Marketing Preferences: your consents and preferences regarding the receipt of promotional communications, newsletters, service offers, and updates from the Company.

The Company does not deliberately collect Sensitive Personal Data. Where any Sensitive Personal Data is incidentally received (for example, where photographs of a work site reveal health-related apparatus), such data shall be Processed only to the extent strictly necessary to deliver the Services and shall be afforded the heightened protections required under the PDPL.

4. LAWFUL BASIS FOR PROCESSING

In compliance with Articles 4 and 5 of the PDPL, the Company shall Process Personal Data only where one or more of the following lawful bases applies:

Consent: the Data Subject has given free, specific, informed, and unambiguous consent to the Processing for one or more specific purposes, which may be withdrawn at any time without affecting the lawfulness of Processing carried out prior to such withdrawal;

Performance of a Contract: the Processing is necessary for the performance of a service contract to which the Data Subject is a party, or for the taking of pre-contractual steps at the Data Subject’s request (including the issuance of quotations and the scheduling of site visits);

Legal Obligation: the Processing is necessary for compliance with a legal obligation to which the Company is subject under the laws of the United Arab Emirates, including taxation, anti-money-laundering, consumer protection, and labour-related obligations;

Legitimate Interests: the Processing is necessary for the legitimate business interests of the Company (such as fraud prevention, network security, debt recovery, internal record-keeping, and quality assurance), provided that such interests are not overridden by the rights and freedoms of the Data Subject; and

Vital Interests: the Processing is necessary to protect the vital interests of the Data Subject or another natural person, particularly in matters relating to safety at the work site.

5. PURPOSES OF PROCESSING

The Company shall Process Personal Data exclusively for the following specified, explicit, and legitimate purposes:

to receive, evaluate, and respond to your enquiries, quotation requests, and service bookings;

to schedule, dispatch, deliver, and supervise the Services at the agreed location and time;

to issue tax invoices, process payments, manage receivables, and maintain accounting records as required under applicable UAE law;

to honour warranties, conduct call-backs, perform after-sales service, and address complaints in accordance with the Consumer Protection Legislation;

to maintain a customer relationship management database, including service history and property profiles, to enable efficient handling of repeat or follow-up jobs;

to communicate with you regarding service status, technician arrival, scheduling changes, and any operational matter relating to your booking;

to send you, where you have not opted out, information, updates, promotional offers, seasonal campaigns, annual maintenance contract reminders, and newsletters relating to the Services, in accordance with Section 8 of this Policy;

to monitor, analyse, and improve the performance of the Website, the quality of the Services, and the overall customer experience;

to detect, prevent, and address fraud, security incidents, breaches of contract, and other unlawful activity;

to comply with judicial orders, regulatory directives, and lawful requests from competent UAE authorities; and

to establish, exercise, or defend legal claims.

6. PRINCIPLES OF PROCESSING

The Company adheres to the data Processing principles set out in Article 5 of the PDPL, namely lawfulness, fairness, and transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability. The Company shall not Process Personal Data in any manner incompatible with the purposes set out in this Policy and shall limit the Personal Data collected to that which is adequate, relevant, and strictly necessary for such purposes.

7. NON-SALE AND RESTRICTED DISCLOSURE OF PERSONAL DATA

The Company hereby unequivocally affirms that it does not sell, rent, lease, trade, license, or otherwise commercially exchange your Personal Data with any third party for monetary or other consideration. The Company shall not disclose your Personal Data to any third party, save and except in the limited and controlled circumstances expressly set out below:

7.1 Authorised Service Personnel and Sub-Contractors: Personal Data may be shared with technicians, supervisors, sub-contractors, and specialised trade partners engaged by the Company strictly for the purpose of executing the Services at your premises.

Each such party is bound by written confidentiality obligations and is permitted to access only the minimum Personal Data necessary to perform its assigned task.

7.2 Service Providers and Processors: Personal Data may be shared with reputable third-party Processors who provide infrastructure, hosting, payment processing, accounting, customer relationship management, communications, dispatching, analytics, or cyber-security services to the Company, in each case under a written data processing agreement that imposes obligations no less protective than those set out in the PDPL.

7.3 Legal and Regulatory Disclosures: Personal Data may be disclosed where the Company is required or permitted to do so by a court of competent jurisdiction, public prosecutor, police authority, regulatory body, taxation authority, or any other competent authority of the United Arab Emirates, or where disclosure is otherwise mandated by applicable law.

7.4 Corporate Transactions: in the event of a merger, acquisition, restructuring, sale of assets, or similar corporate transaction, Personal Data may be disclosed to the prospective transferee, subject to confidentiality undertakings and the continued application of this Policy or a substantively equivalent privacy framework.

7.5 Protection of Rights: Personal Data may be disclosed where necessary to establish, exercise, or defend the legal rights of the Company, its employees, its customers, or any other person, including for the purposes of fraud prevention and credit-risk management.

In all cases, the disclosure of Personal Data shall be limited to the minimum strictly necessary to achieve the legitimate purpose of disclosure.

8. MARKETING COMMUNICATIONS

Subject to the requirements of the PDPL and Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes, and to such guidance as may be issued from time to time by the UAE Data Office and the Telecommunications and Digital Government Regulatory Authority, the Company reserves the right to send to its customers marketing and promotional communications, including but not limited to newsletters, service offers, seasonal promotions, annual maintenance contract proposals, festive greetings, and updates regarding new services and service areas.

Such communications may be transmitted by SMS, e-mail, WhatsApp, voice call, or push notification, in each case to the contact details provided by the customer at the time of booking, registration, or enquiry.

By providing your contact details to the Company in connection with a service enquiry or booking, you acknowledge that there exists a pre-existing customer relationship between you and the Company, on the basis of which the Company may send you marketing communications relating to similar Services, in conformity with applicable UAE law. You may at any time, and free of charge, opt out of receiving marketing communications from the Company by:

clicking the “unsubscribe” link contained in any e-mail marketing communication;

replying with the word “STOP”, “UNSUBSCRIBE”, or “REMOVE” to any SMS or WhatsApp marketing communication;

sending a written request to the e-mail address set out in Section 14 of this Policy; or

communicating your preference verbally to a Company representative during any service interaction.

The Company shall give effect to any opt-out request within a reasonable period and shall, in any event, comply with such period as may be prescribed by applicable law. Withdrawal of marketing consent shall not affect the Company’s right to send you operational and service-related communications that are necessary for the performance of the service contract or for compliance with legal obligations.

9. COOKIES AND TRACKING TECHNOLOGIES

The Website employs cookies, web beacons, pixel tags, and similar tracking technologies to enhance functionality, remember user preferences, analyse traffic, and (where you so consent) deliver targeted advertising.

Cookies are categorised as follows: strictly necessary cookies, which are essential for the operation of the Website; performance and analytics cookies, which collect aggregated information about how visitors use the Website; functional cookies, which remember choices you make; and marketing cookies, which are used to deliver advertisements relevant to your interests.

Upon your first visit to the Website, you shall be presented with a cookie consent banner enabling you to accept, reject, or selectively configure non-essential cookies. You may at any time modify your cookie preferences through the cookie settings panel on the Website or by adjusting the settings of your web browser. Withholding consent to non-essential cookies shall not impair your access to the core functionality of the Website.

10. DATA SECURITY

In accordance with Article 20 of the PDPL, the Company has implemented and shall maintain appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. Such measures include, without limitation, secure server hosting, encrypted transmission of data via Transport Layer Security (TLS) protocols, role-based access controls, password and multi-factor authentication policies, regular system patching and vulnerability management, periodic backups, employee confidentiality undertakings, and staff training on data protection.

Notwithstanding the foregoing, no method of transmission over the internet or method of electronic storage is fully secure. While the Company strives to protect Personal Data using commercially reasonable means, the Company cannot guarantee absolute security. In the event of a Personal Data breach likely to result in a risk to the rights and freedoms of Data Subjects, the Company shall notify the UAE Data Office and, where required, the affected Data Subjects in accordance with the timelines and requirements prescribed by the PDPL and its executive regulations.

11. DATA RETENTION

The Company shall retain Personal Data only for such period as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, taxation, regulatory, warranty, or reporting requirements applicable in the United Arab Emirates. By way of indication and without limitation:

accounting and taxation records, including invoices and payment evidence, shall be retained for a minimum period of five (5) years, in accordance with applicable UAE taxation legislation;

service-related records, including job cards, warranty documents, and call-back history, shall be retained for the duration of any applicable warranty period and for a reasonable period thereafter to address potential disputes;

marketing preferences and consent records shall be retained for so long as you remain a customer and for a reasonable period thereafter to evidence compliance; and

Website analytics data shall be retained in aggregated or anonymised form for such period as is reasonably required to monitor and improve Website performance.

Upon expiry of the applicable retention period, the Company shall securely delete, destroy, or irreversibly anonymise the relevant Personal Data.

12. RIGHTS OF DATA SUBJECTS

Subject to the conditions and limitations set out in the PDPL, you, as a Data Subject, are entitled to exercise the following rights in respect of your Personal Data:

Right of Access: to obtain confirmation as to whether the Company is Processing your Personal Data and, if so, to be provided with a copy of such Personal Data and information regarding its Processing;

Right of Rectification: to request the correction of any inaccurate or incomplete Personal Data;

Right of Erasure: to request the deletion of your Personal Data where the Processing is no longer necessary, where consent has been withdrawn, or where the Processing is otherwise unlawful, save where the Company is required by law to retain such data;

Right to Restriction of Processing: to request that the Processing of your Personal Data be restricted in certain circumstances;

Right to Data Portability: to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit such data to another controller, where technically feasible;

Right to Object: to object to the Processing of your Personal Data on grounds relating to your particular situation, including objection to direct marketing at any time;

Right to Withdraw Consent: to withdraw any previously granted consent at any time, without affecting the lawfulness of Processing carried out prior to such withdrawal;

Right to Stop Automated Processing: to request that you not be subject to a decision based solely on automated Processing, including profiling, that produces legal effects or similarly significantly affects you; and

Right to Lodge a Complaint: to lodge a complaint with the UAE Data Office or other competent supervisory authority where you believe that the Processing of your Personal Data infringes the PDPL.

To exercise any of the foregoing rights, you may submit a written request to the Company at the contact details set out in Section 14. The Company shall respond to such request within the timeframes prescribed under the PDPL. The Company may, where reasonably necessary, request additional information to verify your identity prior to acting on the request.

No fee shall be charged for the exercise of these rights, save where requests are manifestly unfounded, excessive, or repetitive, in which case the Company may charge a reasonable fee or refuse to act on the request, in accordance with applicable law.

13. CROSS-BORDER TRANSFERS OF PERSONAL DATA

As a general rule, the Company stores and Processes Personal Data within the United Arab Emirates. Where, for technical, operational, or business reasons, the Company is required to transfer Personal Data outside the United Arab Emirates (for example, to a cloud service provider hosted in another jurisdiction), such transfer shall be effected only:

to a country or territory that has been recognised as providing an adequate level of protection for Personal Data;

pursuant to a written contract obliging the recipient to apply protections substantially equivalent to those required under the PDPL;

with the express consent of the Data Subject, in a manner not conflicting with the security and public interest of the United Arab Emirates; or

where the transfer is otherwise permitted under Articles 22 and 23 of the PDPL.

14. CONTACT INFORMATION AND COMPLAINTS

Any query, request, or complaint relating to this Policy or to the Processing of your Personal Data by the Company may be addressed to:

Home Planet Technical Services L.L.C.

Attention: The Director

Office 504, Warba Center, Al Muraqqabat, Dubai, United Arab Emirates

E-mail: help@homeplanetgroup.ae

Telephone: +971 54 166 3400

Website: www.homeplanetgroup.ae

Should you remain dissatisfied with the Company’s response, you are entitled to lodge a complaint with the UAE Data Office or with any other competent supervisory authority of the United Arab Emirates.

15. PROCESSING RELATING TO MINORS

The Services are intended for adult Data Subjects aged eighteen (18) years and above. The Company does not knowingly collect or Process Personal Data of minors. Where it comes to the Company’s attention that Personal Data of a minor has been collected without verifiable parental or legal-guardian consent, such Personal Data shall be deleted promptly.

16. THIRD-PARTY WEBSITES AND LINKS

The Website may contain links to third-party websites, applications, or services. This Policy does not extend to such third-party properties, and the Company is not responsible for the privacy practices or the content thereof. Customers are encouraged to review the privacy policies of any third-party property prior to providing any Personal Data thereto.

17. AMENDMENTS TO THIS POLICY

The Company reserves the right to amend, update, or supplement this Policy from time to time, including in response to changes in applicable law, business practices, or technology. Any amended version of this Policy shall be posted on the Website and shall take effect as of the “Effective Date” specified at the top of the Policy. Where the amendment is material, the Company shall make reasonable efforts to notify customers in advance through e-mail, SMS, or a prominent notice on the Website. Continued use of the Services or the Website following any amendment shall constitute acceptance of the amended Policy.

18. GOVERNING LAW AND JURISDICTION

This Policy, and any dispute or claim arising out of or in connection with it or its subject matter, shall be governed by and construed in accordance with the federal laws of the United Arab Emirates and the laws applicable in the Emirate of Dubai. The courts of the Emirate of Dubai shall have exclusive jurisdiction to settle any such dispute or claim, save where the laws of the United Arab Emirates confer mandatory jurisdiction upon another forum.

19. SEVERABILITY

If any provision or part-provision of this Policy is or becomes invalid, illegal, or unenforceable under applicable law, it shall be deemed modified to the minimum extent necessary to make it valid, legal, and enforceable. If such modification is not possible, the relevant provision or part-provision shall be deemed deleted. Any such modification or deletion shall not affect the validity and enforceability of the remainder of this Policy.

20. LANGUAGE

This Policy is issued in the English language. Where this Policy is translated into Arabic or any other language for the convenience of Data Subjects, and in the event of any conflict or inconsistency between the English and the translated text, the Arabic version shall prevail to the extent that Arabic is mandated by the laws of the United Arab Emirates; otherwise, the English version shall prevail.

— End of Privacy Policy —