Effective date: 6 September 2026
Mavereon (“Mavereon”, “we”, “us” or “our”) is a Dubai-based software development company specializing in visitor management software and related technology solutions. We respect privacy and are committed to handling personal data responsibly, securely and transparently.
Important: This policy covers Mavereon’s website, business interactions and the circumstances in which Mavereon processes personal data through its software and services. Where a customer uses a Mavereon visitor management solution to collect visitor data, the customer will ordinarily determine why and how that data is processed, while Mavereon may process it on the customer’s behalf under the applicable contract and instructions.
1. Scope of this Privacy Policy
This Privacy Policy explains the types of personal data we may collect, how and why we use it, when it may be shared, how we protect and retain it, and the rights available to individuals under applicable data protection law. It applies to visitors to www.mavereon.com, prospective and existing customers, suppliers, business contacts, and users or visitors whose personal data is processed through Mavereon services where this policy is applicable.
A customer may provide its own privacy notice for visitor management activities under its control. That customer notice should be read together with this policy where relevant.
2. Personal Data We May Collect
Depending on how you interact with us or our services, we may collect or process:
- Identity and contact information, such as name, business email address, telephone number, company, job title and correspondence details.
- Website and technical information, such as IP address, device and browser information, logs, pages visited, timestamps, cookies and similar technologies where used.
- Sales, support and account information, including enquiries, quotations, contracts, support requests, service records and communications.
- Visitor management information processed through our software, which may include visitor name, contact information, company, host, visit date and time, check-in/check-out records, invitation or QR-code information, access-related records and other information configured by the relevant customer.
- Identity-document information where a customer enables identity verification features. The exact information collected depends on the customer’s configuration, applicable law and the purpose of the visit.
- Security and audit information, including system activity, authentication events, security logs and records used to protect our services.
We ask customers to configure Mavereon solutions so that only information that is necessary for the relevant purpose is collected.
3. How We Collect Personal Data
We may obtain personal data directly from you when you contact us, request a demonstration or quotation, submit an enquiry, enter into a contract, use our website or communicate with our sales or support teams. We may also receive data from our customers, authorized users, service providers, integration partners, publicly available business sources, or systems connected to our software.
4. How We Use Personal Data
We may process personal data to:
- respond to enquiries and provide demonstrations, quotations, products, implementation, support and related services;
- establish, manage and perform customer and supplier relationships;
- operate, maintain, secure, troubleshoot and improve our website, software and infrastructure;
- process visitor information on behalf of customers in accordance with their documented instructions;
- provide visitor invitation, check-in, host notification, access, audit and reporting functionality where configured;
- prevent misuse, investigate security incidents and protect Mavereon, our customers and users;
- comply with legal, regulatory, accounting and contractual requirements; and
- send business communications or marketing where permitted by applicable law and, where required, with appropriate consent.
We process personal data only where there is an appropriate legal basis under applicable law, which may include consent, performance of a contract, compliance with legal obligations, protection of interests recognised by law, or other lawful grounds available under UAE law.
5. Visitor Management Software: Customer and Mavereon Roles
For personal data entered into or collected through a Mavereon visitor management deployment, the relevant customer generally determines the purpose of the visitor management activity, the categories of information collected, retention requirements and who is authorized to access the information. In those circumstances, Mavereon generally acts as a service provider/processor and processes personal data on the customer’s documented instructions.
For Mavereon’s own website, sales, contracting, billing, security and corporate administration activities, Mavereon may determine the purposes and means of processing and act as the controller.
If you wish to exercise a right relating to visitor data held in a customer-controlled deployment, you should normally contact the organization you visited or that invited you. Where appropriate, Mavereon will assist its customer in responding to valid requests.
6. Sharing and Service Providers
We do not sell personal data. We may disclose personal data where reasonably necessary to:
- Mavereon personnel and authorized contractors who require access for their work;
- cloud hosting, infrastructure, communications, Cybersecurity, analytics, professional advisory and other service providers supporting our operations;
- customer-authorized integration providers or systems where a customer enables an integration;
- government, regulatory, law-enforcement or judicial authorities where disclosure is required or permitted by applicable law; or
- parties involved in a corporate transaction, subject to appropriate confidentiality and data-protection safeguards.
Service providers that process personal data for us are expected to process it only for authorised purposes and to apply appropriate security and confidentiality measures.
7. International and Cross-Border Data Transfers
Mavereon is based in the United Arab Emirates and may use service providers or technology infrastructure located in the UAE or other jurisdictions. Where personal data is transferred across borders, we will seek to apply the requirements and safeguards required by applicable UAE data protection law. Customer-specific hosting locations and transfer arrangements may also be governed by the applicable service agreement or data processing agreement.
8. Data Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction. Depending on the service and risk, measures may include access controls, authentication, encryption, logging and monitoring, secure development practices, backups, vulnerability management, incident-response procedures and restrictions on personnel access.
No system or transmission method can be guaranteed to be completely secure. Customers are also responsible for maintaining appropriate security over their accounts, devices, networks, user permissions and configurations.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to meet contractual requirements, resolve disputes, maintain security and audit records, and comply with applicable legal or regulatory obligations.
For visitor data processed on behalf of customers, retention is generally determined by the relevant customer and the applicable contract. At the end of the authorized processing period, data will be returned, deleted, anonymised or otherwise handled in accordance with customer instructions, contractual commitments and applicable law.
10. Cookies and Website Technologies
Our website may use cookies or similar technologies that are necessary for website operation, security, preferences, analytics or other permitted purposes. Where required by applicable law, we will request consent before using non-essential cookies. You may also be able to control cookies through your browser settings. Disabling certain cookies may affect website functionality.
11. Your Privacy Rights
Subject to applicable law, exceptions and verification requirements, you may have rights concerning your personal data, including rights to obtain information about processing, access personal data, request correction of inaccurate data, request deletion in appropriate circumstances, restrict or object to certain processing, request transfer of data where applicable, withdraw consent where processing is based on consent, and raise a complaint with the competent authority.
Requests concerning Mavereon-controlled data may be submitted using the contact details below. Requests concerning data controlled by one of our customers should generally be directed to that customer. We may need to verify your identity before acting on a request.
12. Children’s Privacy
Mavereon’s website and business services are not directed to children. Visitor management systems may be used by customers in environments where information relating to minors is processed. In those circumstances, the customer is responsible for establishing an appropriate lawful basis, notices, permissions and safeguards required for its use case, and Mavereon processes such information only as authorized under the applicable customer arrangement.
13. Third-Party Links and Integration
Our website or software may contain links to third-party websites or may integrate with third-party products and services at a customer’s request. Those third parties may have their own privacy practices and policies. Mavereon is not responsible for third-party privacy practices that are outside our control.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or business practices. The revised version will be published on www.mavereon.com with an updated effective date. Material changes may be communicated through additional means where appropriate.
15. Contact Us
For privacy questions, requests or concerns, please contact:
Mavereon
Dubai, United Arab Emirates
Email: contact@mavereon.com
Website: www.mavereon.com
16. Applicable UAE Data Protection Framework
This policy is intended to support Mavereon’s privacy practices under applicable UAE law, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), as applicable. The UAE PDPL establishes rules concerning personal-data processing, controller and processor responsibilities, security, individual rights and cross-border transfers.