Legal

Privacy Policy

Last updated: March 2026

Mighty Advancement ("we", "us", "our") operates the ContractorPass platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

Account Information

When you register for ContractorPass, we collect:

  • Company name and trade licence number
  • Contact person name, email address, and phone number
  • Dubai Municipality registration number (if applicable)

Compliance Data

To provide our compliance tracking service, we store:

  • Staff member names, employee IDs, and PCC expiry dates
  • Subcontractor names and municipal approval status
  • Document metadata (file names, categories, expiry dates) — if you choose to use the optional document vault

Usage Data

We automatically collect standard usage data including IP addresses, browser type, pages visited, and timestamps to improve our service and maintain security.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the ContractorPass compliance tracking service
  • Calculate your compliance score and send expiry alerts
  • Communicate with you about your account and service updates
  • Improve our platform and develop new features
  • Comply with legal obligations under UAE law

3. Data Storage and Security

All data is stored in Microsoft Azure UAE North (Dubai) data centres, ensuring full UAE data residency compliance. We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Role-based access controls
  • Regular security audits and vulnerability assessments
  • Automated backups with point-in-time recovery

4. Data Sharing

We do not sell, rent, or trade your personal or business data. We may share data only in these circumstances:

  • Service providers: Trusted third parties who help us operate our service (e.g., payment processors, email delivery), bound by confidentiality agreements
  • Legal requirements: When required by UAE law, regulation, or valid legal process
  • Business transfers: In the event of a merger or acquisition, with prior notice to you

5. Your Rights

You have the right to:

  • Access: Request a copy of all data we hold about your company
  • Correction: Update or correct inaccurate information
  • Export: Download all your data in a standard format
  • Deletion: Request deletion of your account and associated data, subject to legal retention obligations

6. Document Vault

The document vault is an optional feature. Your compliance score and alerts work fully without uploading any documents. If you choose to use the document vault:

  • Documents are stored encrypted in Azure UAE North
  • Only authorised users within your company can access your documents
  • Documents are retained per your plan's retention settings and UAE legal requirements
  • You can delete documents at any time, subject to the 10-year retention obligation under Dubai Law No. 7

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.

8. Data Retention

We retain your account data for as long as your account is active. After account deletion, we retain minimal records as required by UAE commercial law. Audit logs are retained for the legally required period.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or a notice on our platform at least 30 days before changes take effect.

10. Contact Us

If you have questions about this privacy policy or your data, contact us at: