Draft for legal counsel review before publication. This is not legal advice and is not a complete policy for every jurisdiction.
Data Processing
Last updated 25 August 2026
Draft status
This page is a website draft for review by legal counsel. It is not presented as legal advice and is not a substitute for a contract or a jurisdiction-specific policy.
A formal data-processing agreement (DPA) should be used when Apps Island processes personal data on a client’s behalf. This page is not that DPA.
Roles and instructions
For the marketing website, Apps Island is typically the controller of enquiry data you send us.
For client projects, the client is usually the controller of end-customer or employee data. Apps Island would act as a processor only under written instructions, with subprocessors (cloud, email, analytics) listed in the DPA.
International transfers, retention, deletion, and breach notification must be specified by counsel to match UAE PDPL and any other applicable law.