Privacy Policy
This policy explains how Alasos-ENGR handles your personal data when you use this website.
Operated by Alasos-ENGR — United Arab Emirates · Effective: 5 September 2026 (first version)
1. Who we are and how to reach us
This website is operated by Alasos-ENGR, which is responsible for the personal data processed through it. Country of registration and governing law: United Arab Emirates.
For any privacy question or request, contact us at alasos.net@mail.com. This is currently both our legal contact address and our support address.
2. What data we actually collect
Account data: your email address and the sign-in credentials handled by our authentication provider, plus any name or preferences you enter yourself.
Orders and purchases: the books, tools or services you buy, the amount and currency, the payment status and the provider's transaction reference, and the entitlements granted to your account.
Invoices: generated from the purchase record itself (invoice number, product, amount, currency, date) and available only to the account that owns the purchase.
Design requests and DWG files: the files you upload, your project description, clarification messages, request status, quotations and deliverables. These files are kept in private storage and are not exposed through public links.
Affiliate program: application details, referral link, attributed sales and commissions, and your commission payout destination. Payout details are shown masked and are revealed only to the extent needed for review and payout.
Reviews: the text you submit and your account identifier; reviews are moderated before publication.
Device and log data: a derived/hashed form of your IP address used for abuse limiting, browser type, request timestamps, and security and audit logs.
Cookies, local storage and your consent state, as described on the cookies page.
4. Why we process data and on what basis
Performing our agreement with you: creating your account, completing purchases, granting access to books and tools, issuing invoices, and delivering design requests.
Legitimate interests — where permitted by applicable UAE law: site security, fraud and abuse prevention, rate limiting, audit logging, and improving the service. This basis is not used as an open-ended or general alternative to consent.
Legal obligations: retaining financial and accounting records and responding to lawful requests.
Consent: optional analytics and advertising measurement only, and you may withdraw it at any time. We do not claim that your consent covers every other processing activity.
5. Service providers we actually use
Hosting, database, authentication and storage: a cloud provider that runs the site infrastructure and hosts data and private files.
Payments: Ziina for payment processing, and PayPal within the affiliate commission payout setup for partners outside the UAE.
Analytics and advertising measurement: Google Analytics 4 and Google Ads conversion measurement, active only after you accept the relevant category.
Email: a transactional email provider (Resend) used for account and request notifications.
We do not use other providers for marketing purposes beyond those listed above.
6. Payment data
We never receive or store full card details. Payment happens with the payment provider; we keep only the transaction outcome, its reference, the amount, currency and date for accounting, invoicing and fraud prevention.
8. Support inquiries (Contact us)
When you submit the Contact us form we store your name, email address, inquiry type, the order or project reference if you provide one, your message, the interface language and a reference number. The purpose is to answer you and document the follow-up; the basis is performance of a contract or steps before it, plus our legitimate interest in providing support.
We send an internal notification to our support team and a confirmation message to you through our email provider, which is the only recipient of this data besides our hosting and database provider.
We do not store the raw IP address of support messages; a short-lived technical fingerprint is used only to limit automated submissions.
Support records are kept for up to 24 months after the inquiry is closed, or longer where a dispute or legal obligation requires it, and are then deleted or anonymised. You can request access, correction, deletion or object, as described in this policy.
9. Affiliate attribution
When you open a partner link we record a single visit and an anonymous visitor identifier so the partner's commission can be proven. The basis is our legitimate interest in accurate commission accounting and fraud prevention, plus performing the purchase contract when one is completed.
The attribution window is 30 days from the first qualifying click and is not renewed by page reloads or ordinary browsing.
Arrivals through the go.alasosglobal.com gateway use a short-lived, single-use first-party cookie (about 15 minutes) purely to hand the referral over; it is deleted as soon as it is used.
Click, attribution and commission records are retained as long as needed for accounting, audit, refunds and disputes. You can request access, correction, deletion or object, as described in this policy.
The affiliate program itself is open worldwide. Partners are responsible for the accuracy of their own details, payout method, taxes and local registration; a commission transfer can fail only where applicable law or the payment provider prevents it.
10. Your email address and the affiliate program
If you arrived through a partner's referral link, that partner can see the purchase attributed to them, its value and their commission. They see your full email address only if you explicitly consented to share it.
The email-sharing consent is entirely optional, never pre-ticked, and does not affect your purchase or its price. You can withdraw it at any time by contacting us. We record the purpose, version and timestamp of the consent.
Without that consent the partner only ever sees a masked address in the form a***@domain.com. We never share your phone number, payment data or any other detail with partners.
Partners may not use your address for marketing, send promotional messages to it, or share it with anyone else; it may only be used for referral and commission follow-up.
11. Partner phone number
Joining the affiliate program requires a phone number together with its international dialling code. We store it only in the standard international format (E.164) alongside the country code.
We use it only to contact the partner and to administer the recording of commission transfers. We do not use it for marketing and we do not send promotional messages to it.
The full number is visible only to the partner in their own settings and to an authorised administrator inside the partner's record. In lists, logs and notifications it appears masked, and it is never shown to buyers or to other partners.
We never send a verification code or any message to the number, and we never share it with an SMS or WhatsApp provider. If you choose a phone-based payout, the number is shared with the approved transfer provider for your country only when an actual transfer is executed, and only as far as needed to complete it. Our check is syntactic only — it confirms the format, not ownership — so the number is always shown as a “Partner-provided number — not technically verified”.
The partner alone is responsible for keeping the number correct and up to date, and providing a number is not a guarantee that any transfer will be executed.
We keep the number and a masked history of its changes for the duration of the membership and for as long as accounting and legal obligations require, as described in the retention section below; the rights section applies to it in full.
12. International transfers
Some providers may process data outside the UAE. In those cases we rely on the provider's contractual terms and the reasonable safeguards available, and limit transfers to what is needed to operate the service.
13. How long we keep data
We keep data while your account exists or for as long as needed for the purpose it was collected for. Purchase records, invoices and commission records are kept longer where required for financial, accounting, legal and audit purposes. We do not state fixed numeric retention periods per data type, because that depends on the purpose and the applicable obligation.
14. Security
We apply reasonable technical and organisational controls such as row-level access rules, private file storage, short-lived access links, audit logs and rate limiting. No internet system can guarantee absolute security; we make no such promise and we claim no compliance certifications.
15. Your rights
Under applicable UAE law you may have the right to request access to your data, correction or deletion, to object to or restrict certain processing, and to withdraw consent to analytics.
To make a request, email alasos.net@mail.com from the address linked to your account. We may need extra information to verify your identity, and we may be unable to delete records we are legally or financially required to keep.
17. Accounts of minors
The site is intended for adult professionals and students. We do not knowingly create accounts for people below the age of contractual capacity in their country of residence. If we learn of such an account, we may suspend it and delete its data as permitted by applicable law.
18. Third-party links
The site may link to websites or services we do not operate, such as payment provider pages. We do not control their privacy practices, and their own policies apply.
19. Changes to this policy
We may update this policy when the service or legal requirements change, and we will publish the updated version on this page with a new effective date. Current effective date: 5 September 2026.
20. Contact
For any question about this policy or about how your data is processed, email us at alasos.net@mail.com.