Turning Point MEA LLC-FZ ("the Company") is an entity registered in Meydan Free Zone, Dubai, United Arab Emirates. The Company processes the personal data it collects through this website and in the course of its work in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"). To the extent that the Company processes the personal data of residents of the Republic of Korea, the Korean Personal Information Protection Act may apply in addition; Section 12 sets out those provisions.
The UAE PDPL identifies the circumstances in which a Data Protection Officer must be appointed, but the detailed criteria are to be set by the Executive Regulations. The Company currently receives all privacy enquiries at the address above.
The Company collects only the minimum data needed for the stated purposes. It does not collect sensitive data such as health, biometric, religious or political information.
The UAE PDPL takes the consent of the data subject as its principle and limits by law the cases in which data may be processed without consent. Processing necessary for the conclusion or performance of a contract, and processing required to meet a legal obligation, fall within those cases. Unlike the GDPR, the UAE PDPL does not provide "legitimate interests" as a general basis for processing.
Personal data is destroyed without delay once the retention period expires or the purpose of processing has been met. Electronic files are deleted by means that prevent recovery; paper documents are shredded.
The Company processes personal data only within the purposes set out in Section 4 and, as a rule, does not disclose it to third parties. The following are the exceptions.
The Company engages the following processors in order to provide its services.
Each processing agreement sets out in writing the requirements for the secure handling of personal data, and the Company supervises its processors. Any change of processor or of processing activity will be disclosed through this policy.
The UAE PDPL permits transfers to countries and territories recognised as providing an adequate level of protection, and otherwise allows transfers where a ground set out in the law applies, such as performance of a contract, the exercise of legal claims, or the explicit consent of the data subject. The Company transfers personal data outside the United Arab Emirates as follows.
Transfers take place when the service is used, by transmission over an information and communications network. A data subject may refuse a cross-border transfer; in that case, the use of some website functions may be restricted.
Under the UAE PDPL, data subjects may exercise the following rights.
Requests may be sent to hello@tpmea.com. The Company verifies that the requester is the data subject before acting. Because the Executive Regulations to the UAE PDPL have not yet been issued, no statutory response deadline is fixed; the Company works to a standard of responding within 30 days of receiving a request.
The Company uses cookies to understand how the website is used and to improve its services, and collects usage statistics through Google Analytics 4. Data subjects may refuse the storage of cookies or delete stored cookies in their browser settings. Doing so may make some website functions difficult to use.
Enquiries, complaints and requests for redress concerning the processing of personal data are received at hello@tpmea.com. A data subject who objects to how the Company has handled a matter may report it to the UAE Data Office, the supervisory authority in the United Arab Emirates.
The Company operates this website in Korean and provides services to Korean companies, so to the extent that it processes the personal data of Korean residents the Korean Personal Information Protection Act may apply in addition. In that case, Korean residents may, alongside the rights in Section 8, exercise the rights of access, correction, deletion and suspension of processing provided by that Act, and may apply to the following bodies for dispute resolution or advice.
Personal data collected and processed separately by the Korean entity Turning Point MEA Co., Ltd. is governed by that entity's own policy.
This policy may be revised in line with changes in law or in the Company's processing practices. Any revision will be published on this page together with its effective date and a description of what has changed.
This policy has been prepared on the basis of United Arab Emirates federal legislation and Meydan Free Zone regulations published as at September 2026. The Executive Regulations to the UAE PDPL have not yet been issued; this policy will be revised once they are. This policy is not legal advice.