Privacy Policy

Chill & Flow Technical Services L.L.C. Last updated: 17th October 2026 · Version 1.3

1. Who We Are

Chill & Flow Technical Services L.L.C. (“Chill & Flow”, “we”, “us”) is the controller of the personal data described in this policy. We are registered in Dubai, United Arab Emirates. We handle personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and its implementing regulations as they apply.

Privacy contact: info@800cnf.com

2. Information We Collect

• Identity and contact details: name, phone number, email address
• Property details: service address and any access instructions you give us
• Booking and transaction records: booking details, service history, quotations, invoices and payment status
• Payment information: processed directly by Stripe when you pay. We receive confirmation of payment and limited details (such as card type and last four digits) but do not store full card numbers
• Communications: messages, call notes, feedback and complaints
• Photographs and videos: taken during inspections and services
• Website technical data: IP address, browser type, device information and cookies

We ask only for information we need. We do not knowingly collect personal data from children under 18.

3. How and Why We Use Your Information

4. Service Messages and Marketing

Service messages. We will send messages needed to deliver or follow up on services you have booked, such as confirmations, scheduling changes, completion reports and warranty follow-ups. These are not marketing and are sent as part of the service.

Maintenance reminders and promotional offers. We will send these only if you have opted in, for example by ticking a box on our booking form or telling us you agree. Opting in is optional and does not affect your booking. You can withdraw consent at any time by replying STOP, using the unsubscribe link, or emailing us. Withdrawing does not affect earlier lawful use, and we will still send service messages.

5. Photos and Work Documentation

We take photos and videos during inspections and repairs to document conditions, support our reports and protect both parties if a dispute arises. We try to avoid capturing people, personal documents or valuables. If they appear incidentally, we crop or blur them where reasonably possible.

We will not use images showing identifiable people, personal items, or identifiable property or addresses in marketing, training or promotional material without your prior written consent. Technical images with no identifying information (for example, a close-up of a coil or component) may be used for educational or promotional purposes.

6. Payments and Systems

We use Odoo ERP to manage bookings, service records and invoicing, and Stripe as our payment gateway. Stripe processes card payments under its own security standards (including PCI DSS) and its own privacy notice. We do not store full card details on our systems.

7. Sharing of Information

We do not sell or rent your personal data. We share it only with:

• Service providers acting on our behalf, such as Odoo (hosting and ERP), Stripe (payments), and IT, communications or cloud providers such as WhatsApp, Zoho Mail & Google Calendar and where Approved, Contracted Third-Party Vendors are used, under written agreements requiring them to protect your data and use it only on our instructions
• Authorities, regulators or courts where required by law
• Professional advisers (for example, auditors or legal counsel) under confidentiality obligations
• A successor business if Chill & Flow is restructured or sold, subject to this policy continuing to apply

8. Transfers Outside the UAE

Some of our providers (including Odoo and Stripe) may store or process data outside the UAE. Where this happens, we transfer data only as permitted by the PDPL, for example to countries with adequate protection, or with appropriate contractual safeguards or your consent where required.

9. Data Retention

We keep personal data only as long as needed for the purposes above:

• Booking, invoice and payment records: 5 years, to meet UAE accounting and tax record-keeping requirements
• Inspection photos and videos: 2 years after the service, or for the warranty period if longer
• Marketing preferences: until you withdraw consent
• Enquiries that do not become bookings: 12 months

When data is no longer needed, we delete or anonymise it, unless the law requires us to keep it.

10. Data Security

We use reasonable technical and organisational measures to protect your data, including access controls limited to staff who need it, secure and encrypted systems, and staff confidentiality obligations. If a breach is likely to harm your rights or privacy, we will notify the UAE Data Office and affected individuals as the PDPL requires.

11. Your Rights

Subject to the PDPL, you may:

• Request access to your personal data and information about how we use it
• Request correction of inaccurate or incomplete data
• Request deletion of your data, where there is no legal reason for us to keep it
• Request restriction of processing, or object to processing, in the circumstances the law allows
• Request a portable copy of data you provided to us
• Withdraw consent at any time, including for marketing

To exercise these rights, email info@800cnf.com. We may need to verify your identity first. We aim to respond within [30] days. Some data (such as invoices) must be retained by law, and we will tell you if that prevents us from acting on a request.

If you are unhappy with how we handle your data, please contact us first. You may also complain to the UAE Data Office.

12. Changes to This Policy

We may update this policy from time to time. The current version, with its date, is always published on our website. For material changes, we will notify you directly where appropriate.

13. Contact

Chill & Flow Technical Services L.L.C. · info@800cnf.com · +971 52 165 9830 (Business Hours 9am to 6pm, Mon-Sat)