Privacy Policy

This policy explains how PMO Consultancy LLC ("PMO", "we", "us") handles information through OnePermit, including the public website, Developer web portals and the OnePermit mobile app. OnePermit supports controlled property-modification, fit-out, approval, inspection, payment and permit workflows for participating Developers and communities.

Information we collect and process

Depending on your role and use of OnePermit, we may process:

• account, identity and contact information, including name, email address, mobile number, organisation, role and verification status;
• property, unit, ownership or occupancy information needed to confirm eligibility and route an application;
• application scope, contractor, consultant, workforce, inspection, compliance and permit information;
• documents, drawings, licences, certificates, identification records, signatures, photographs and other content you or an authorised participant uploads;
• payment status, invoice, receipt and transaction-reference information. Card or bank credentials entered on a hosted payment page are handled by the payment provider and are not stored by OnePermit;
• messages, support requests, complaints, notifications and workflow decisions; and
• security, session, device, network, diagnostic and audit information needed to operate and protect the service.

How information is obtained

Information may come directly from you; from your employer, property owner, contractor, consultant or authorised representative; from a participating Developer or PMO user; from the records created as a workflow progresses; or from service providers that confirm transactions, signatures, messages or technical events.

How we use information

We use information to authenticate and administer accounts; confirm eligibility; create, review and manage applications; coordinate contractors, consultants, inspections and approvals; issue NOCs, permits and controlled records; process and reconcile payments; provide support and communications; prevent misuse; maintain role and Developer-portal separation; create audit evidence; improve service reliability; and meet contractual, regulatory or legal obligations.

Access and sharing

Access is restricted according to the user's role, assigned Developer portal, community and workflow responsibility. Information may be made available to the relevant participating Developer, PMO personnel, property representatives, appointed contractors or consultants, authorised reviewers and inspectors, and authorities where required for the requested service.

We also use service providers for secure cloud hosting and storage, email and communications, payment processing, electronic-signature delivery, technical support and other operational functions. They receive only the information needed for their service and are required to protect it consistently with applicable obligations. We do not sell personal information or use OnePermit information for third-party advertising.

Mobile app and device information

The mobile app stores its authenticated session in device-protected secure storage. It accesses files or photographs only when you choose them for a OnePermit upload, and it may temporarily download a protected document when you ask to open or share it using your device. The app does not include third-party advertising or advertising tracking. Hosted payment checkout opens in a secure browser controlled by the payment provider.

International processing

OnePermit's principal production infrastructure is operated in the United Arab Emirates. Some service providers or authorised participants may process information in other countries. Where information is transferred internationally, we apply contractual, access-control and security measures appropriate to the service and applicable requirements.

Retention and security

We retain information only for as long as needed for the purposes described above and for applicable operational, contractual, audit, dispute, financial, regulatory and legal requirements. Retention depends on the record: temporary sessions and technical records may be kept for shorter periods, while application, approval, payment, permit and audit records may need to be preserved for longer. Protected backups are retained according to controlled recovery schedules.

Safeguards include encrypted transport, role-based access controls, Developer-portal separation, device-protected mobile sessions, private production data services, audit records, controlled deletion, backups and monitoring. No system can guarantee absolute security, and users must protect their credentials and devices.

Your choices and requests

Subject to applicable law and the role of the relevant participating Developer, you may request access to, correction of, or deletion of your personal information; ask about retention or sharing; object to or restrict certain processing; or withdraw consent where processing relies on consent. Account profile information can also be corrected through OnePermit where that option is available.

Account and data deletion requests

To request deletion of a OnePermit account or associated personal information, email support@onepermit.com with the subject OnePermit account and data deletion request. Include the account email address and relevant Developer portal, but do not email passwords, payment-card details or private keys.

We will verify the requester's identity and authority before acting. Where deletion is approved, the account will be disabled and eligible information will be removed through OnePermit's controlled deletion process. We may retain or restrict deletion of records required for an active application, another person's rights, fraud prevention, security, financial reconciliation, audit, contractual, regulatory or legal obligations. We will explain any applicable limitation when responding to the request.

Children

OnePermit is a professional property-management service and is not directed to children. Accounts are intended for authorised adults acting for themselves or an organisation.

Changes to this policy

We may update this policy as OnePermit, its service providers or applicable requirements change. The effective date above identifies the current version. Material changes may also be communicated through the service.

Contact

For privacy, account, security or data requests, contact support@onepermit.com. OnePermit is operated by PMO Consultancy LLC in the United Arab Emirates.