Privacy Policy
Last updated June 2026
This Privacy Policy explains how equidesk (the "Platform") and our website handle personal information. It applies when you:
Visit our website
Request a demo, contact us, or subscribe to updates
Use equidesk as an authorized user under a customer account (your employer/organization)
We have designed this policy to reflect best-practice SaaS privacy standards used across leading CAFM/EAM providers, and to align with applicable data protection requirements in the UAE and relevant free zones.
Who we are
Data Controller (website + sales/marketing interactions)
Permus / equidesk ("we", "us", "our")
- Contact
- admin@permus.io
- Office 1
- Office 01.02, The Offices 5, One Central Plaza, DWTC, P.O. Box: 9420, Dubai, UAE
- Office 2
- Unit No. L50-09, Level 50, ICD Brookfield Place, DIFC, Dubai, UAE
A quick note on roles
Controller vs Processor
When you browse our website, submit forms, or interact with our sales/marketing activities, we are typically the data controller for that information.
When your organization uses equidesk (work orders, assets, technicians, vendors, etc.), your organization is typically the data controller, and we act as a processor/service provider processing data on their instructions. This is a common SaaS privacy model.
Personal information we collect
Information processed within equidesk
Customer account data — this may include (depending on your organization's configuration):
- User profile details (name, work email, role, location, permissions)
- Operational content: work orders, comments, photos, attachments, checklists, asset data, PPM schedules, vendor records, audit logs
- Usage and activity logs (to maintain security, performance, and auditability)
Information you provide to us
(website and business interactions)
- Name, work email, phone number, job title, company name
- Your message/request details (e.g., "how can we help?")
- Meeting and communications details (emails, call notes, demo scheduling)
Information collected automatically
(website)
- IP address, device identifiers, browser type, pages visited, referring pages
- Cookies and similar technologies
How we use personal information
We use personal information to
- Provide and operate the Platform and website
- Set up and administer accounts, access, and permissions
- Respond to requests (demo, quote, support, partnership)
- Deliver platform communications (service notices, security notices, key updates)
- Improve reliability, usability, and performance
- Protect against fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms
Lawful bases for processing
Where required by applicable law, we rely on one or more of the following bases:
Contract
(to provide services to customers / to respond to your request)
Legitimate interests
(security, service improvement, business operations)
Consent
(certain marketing communications, cookies where required)
Legal obligation
(compliance, lawful requests)
The UAE's federal data protection framework and DIFC regime recognize structured processing obligations and individual rights.
How we share personal information
We do not sell personal information.
When we process customer account data, we share it only as directed by the customer (the data controller), consistent with our contractual obligations.
We may share personal information with:
- Service providers (hosting, analytics, email delivery, customer support tools) who process information under contract and confidentiality obligations
- Professional advisors (legal, audit, banking) as needed
- Authorities where required by law, court order, or to protect rights and safety
- Corporate transactions (e.g., merger, acquisition) with appropriate safeguards
International transfers
equidesk operates in the GCC, and some service providers or support operations may involve processing outside the UAE. Where cross-border transfers occur, we apply appropriate safeguards consistent with applicable law and contractual commitments.
Security
We implement robust technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include:
Strict Identity and Access Management (IAM) controls.
Continuous audit logging, monitoring, and automated threat detection.
Encryption of data in transit and at rest using industry-standard protocols.
Secure development lifecycle practices and regular cloud infrastructure reviews.
While no system is entirely immune to risk, we continuously review and improve our controls as part of our commitment to data protection.
Data retention
We retain personal information only for as long as necessary to:
- Provide the service
- Meet contractual requirements
- Comply with legal and accounting obligations
- Resolve disputes and enforce agreements
Customer account data retention and deletion are governed by our agreements with the customer (controller) and the customer's configuration choices.
Cookies and similar technologies
We may use cookies and similar technologies to:
- Keep the website functioning
- Remember preferences
- Measure performance and improve experience
- Understand how visitors use our pages
You can control cookies through your browser settings. Some features may not function properly if cookies are disabled.
Your rights and choices
Depending on your location and applicable law, you may have rights such as:
Access to personal information
Correction/rectification
Deletion/erasure
Restriction or objection to certain processing
Data portability (where applicable)
Withdrawal of consent (where processing is based on consent)
Access to personal information
Correction/rectification
Deletion/erasure
Restriction or objection to certain processing
Data portability (where applicable)
Withdrawal of consent (where processing is based on consent)
For website/sales data requests
contact: admin@permus.io
For requests relating to data inside a customer's equidesk account, please contact your organization (the account owner/controller). If you contact us directly, we may redirect the request to the controller or support them in fulfilling it, as required.
Children's privacy
equidesk is intended for business use and is not directed to children. We do not knowingly collect personal information from children.
Third-party links
Our website may contain links to third-party sites. Their privacy practices are governed by their own policies.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date.
Contact us
Questions, requests, or concerns:
Office 1Office 01.02, The Offices 5, One Central Plaza, DWTC, P.O. Box: 9420, Dubai, UAE
Office 2Unit No. L50-09, Level 50, ICD Brookfield Place, DIFC, Dubai, UAE