Privacy Policy
This policy explains how ALASOS-ENGR handles your personal data when you use this website.
Operated by ALASOS-ENGR — United Arab Emirates · Effective: 5 September 2026 (first version)
1. Who we are and how to reach us
This website is operated by ALASOS-ENGR, which is responsible for the personal data processed through it. Country of registration and governing law: United Arab Emirates.
For any privacy question or request, contact us at alasos.net@mail.com. This is currently both our legal contact address and our support address.
2. What data we actually collect
Account data: your email address and the sign-in credentials handled by our authentication provider, plus any name or preferences you enter yourself.
Orders and purchases: the books, tools or services you buy, the amount and currency, the payment status and the provider's transaction reference, and the entitlements granted to your account.
Invoices: generated from the purchase record itself (invoice number, product, amount, currency, date) and available only to the account that owns the purchase.
Design requests and DWG files: the files you upload, your project description, clarification messages, request status, quotations and deliverables. These files are kept in private storage and are not exposed through public links.
Affiliate program: application details, referral link, attributed sales and commissions, and your commission payout destination. Payout details are shown masked and are revealed only to the extent needed for review and payout.
Reviews: the text you submit and your account identifier; reviews are moderated before publication.
Device and log data: a derived/hashed form of your IP address used for abuse limiting, browser type, request timestamps, and security and audit logs.
Cookies, local storage and your consent state, as described on the cookies page.
3. Why we process data and on what basis
Performing our agreement with you: creating your account, completing purchases, granting access to books and tools, issuing invoices, and delivering design requests.
Legitimate interests — where permitted by applicable UAE law: site security, fraud and abuse prevention, rate limiting, audit logging, and improving the service. This basis is not used as an open-ended or general alternative to consent.
Legal obligations: retaining financial and accounting records and responding to lawful requests.
Consent: optional analytics and advertising measurement only, and you may withdraw it at any time. We do not claim that your consent covers every other processing activity.
4. Service providers we actually use
Hosting, database, authentication and storage: a cloud provider that runs the site infrastructure and hosts data and private files.
Payments: Ziina for payment processing, and PayPal within the affiliate commission payout setup for partners outside the UAE.
Analytics and advertising measurement: Google Analytics 4 and Google Ads conversion measurement, active only after you accept the relevant category.
Email: a transactional email provider (Resend) used for account and request notifications.
We do not use other providers for marketing purposes beyond those listed above.
5. Payment data
We never receive or store full card details. Payment happens with the payment provider; we keep only the transaction outcome, its reference, the amount, currency and date for accounting, invoicing and fraud prevention.
7. International transfers
Some providers may process data outside the UAE. In those cases we rely on the provider's contractual terms and the reasonable safeguards available, and limit transfers to what is needed to operate the service.
8. How long we keep data
We keep data while your account exists or for as long as needed for the purpose it was collected for. Purchase records, invoices and commission records are kept longer where required for financial, accounting, legal and audit purposes. We do not state fixed numeric retention periods per data type, because that depends on the purpose and the applicable obligation.
9. Security
We apply reasonable technical and organisational controls such as row-level access rules, private file storage, short-lived access links, audit logs and rate limiting. No internet system can guarantee absolute security; we make no such promise and we claim no compliance certifications.
10. Your rights
Under applicable UAE law you may have the right to request access to your data, correction or deletion, to object to or restrict certain processing, and to withdraw consent to analytics.
To make a request, email alasos.net@mail.com from the address linked to your account. We may need extra information to verify your identity, and we may be unable to delete records we are legally or financially required to keep.
12. Accounts of minors
The site is intended for adult professionals and students. We do not knowingly create accounts for people below the age of contractual capacity in their country of residence. If we learn of such an account, we may suspend it and delete its data as permitted by applicable law.
13. Third-party links
The site may link to websites or services we do not operate, such as payment provider pages. We do not control their privacy practices, and their own policies apply.
14. Changes to this policy
We may update this policy when the service or legal requirements change, and we will publish the updated version on this page with a new effective date. Current effective date: 5 September 2026.
15. Contact
For any question about this policy or about how your data is processed, email us at alasos.net@mail.com.