Privacy Policy

The Ahti Interiors website is operated by:

AHTI INTERIORS INTERNATIONAL – FZCO
Dubai, United Arab Emirates

Ahti Interiors conducts its Indonesian operations through:

PT AQUAFORCE SANITAMA INDONESIA
Bali, Indonesia

References in this Privacy Policy to "Ahti Interiors", "Ahti", "we", "us" or "our" mean AHTI INTERIORS INTERNATIONAL – FZCO and, where relevant to a particular activity, PT AQUAFORCE SANITAMA INDONESIA or another applicable Ahti affiliated company. The Ahti entity responsible for particular personal information will depend on the nature of the relevant interaction.

Our handling of personal information is intended to comply with applicable privacy and data-protection laws relevant to our activities. This includes, where applicable:

• UAE the data-protection laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data; and
• Indonesia the applicable personal-data protection laws of the Republic of Indonesia, including Law No. 27 of 2022 concerning Personal Data Protection.

Where the processing relates to our UAE operations or the operation of the global website, applicable UAE requirements may apply. Where the processing relates to our Indonesian operations, Indonesian customers, Indonesian projects or PT AQUAFORCE SANITAMA INDONESIA, applicable Indonesian requirements may also apply.

This Privacy Policy may apply to personal information collected through or in connection with:

• Our website
• Contact and enquiry forms
• Catalogue, product, specification and sample requests
• Email, telephone and business messaging
• Meetings, showroom visits, events and exhibitions
• Project enquiries, quotations and customer relationships
• After-sales support, warranty or technical enquiries
• Social-media interactions
• Marketing and business development
• Other communications with Ahti

Our website is primarily an informational and business-development platform. Products cannot currently be purchased or paid for directly through the website.

The information we collect depends on how you interact with us.

Contact information

• Name, business or company name, professional role or job title
• Email address, telephone or mobile number
• Business address, country or region
• Other contact details you provide

Professional information

Because Ahti operates primarily on a business-to-business basis, we may process information concerning your professional activities, including your employer or organisation, professional role, industry, architecture or design practice, development or contracting company, project responsibilities, and professional relationship with Ahti.

Project information

Where you contact us about a project, we may collect project name, location, type and timing; product requirements, quantities and specifications; finishes; relevant drawings or schedules; technical requirements; and other project information voluntarily provided to us.

Enquiry and communication information

We may process enquiries, catalogue and sample requests, quotation requests, meeting notes, correspondence, follow-up history, feedback, customer-service records, complaints, and warranty or technical-support communications.

Commercial information

Where a commercial relationship exists, we may process quotations, orders, invoices, payment status, account contacts, delivery details, purchase history, warranty records and related commercial documentation.

Website and technical information

When you use our website, we may automatically collect or generate IP address, browser and device type, operating system, language, approximate geographic region, referring website, pages viewed, links clicked, visit duration, navigation patterns, campaign or referral information, cookie identifiers, device identifiers, and technical or performance information. Further information is available in our Cookie Policy.

We may receive professional or business contact information from sources such as your employer, colleagues, architects, designers, developers, contractors, consultants, professional referrals, partners, events and exhibitions, publicly available business sources, company websites, professional directories, professional networking services, and other legitimate business-development sources.

Where information is obtained indirectly, we process it only where permitted by applicable law.

Ahti's ordinary business activities do not require us to collect sensitive personal information. Please avoid providing sensitive information unless it is genuinely necessary for a specific lawful purpose. If we receive sensitive personal information, we will handle it in accordance with applicable law and apply appropriate safeguards.

We may use personal information for the following purposes.

Responding to enquiries

Questions, catalogue requests, product enquiries, specification requests, sample requests, showroom enquiries and other requests for information.

Managing projects and relationships

Understanding your project, recommending products, providing technical information, preparing quotations, arranging meetings, coordinating samples, maintaining project records, managing follow-ups, and supporting our relationship with you or your organisation.

Sales and account management

Maintaining business contact records, managing prospective and existing customers, coordinating sales activity, managing accounts, recording relevant communications, and maintaining an appropriate history of our business relationship.

Supplying products and services

Where a commercial relationship is established: preparing and managing quotations, processing orders, coordinating delivery, providing technical and after-sales support, administering warranties, investigating complaints, and managing product-related claims.

Business communications

Communicating regarding enquiries, projects, quotations, meetings, orders, delivery, technical matters, customer support, warranty matters and other aspects of our relationship.

Marketing and business development

Where permitted by applicable law, communicating with professional contacts regarding new products and collections, catalogues, specifications, launches, projects, collaborations, exhibitions, events, showroom activity, company news and other professionally relevant developments.

Website operation and improvement

Operating and maintaining our website, maintaining security, diagnosing technical issues, preventing abuse, and understanding and improving website usage, performance, content and user experience.

Security and fraud prevention

Protecting our systems, detecting suspicious or malicious activity, preventing fraud or abuse, investigating security incidents, and protecting Ahti, our customers and third parties.

Legal and regulatory compliance

Complying with applicable laws, regulatory obligations, accounting and tax requirements, lawful authority requests, court orders, audits and other legal processes.

Protection of legal rights

Establishing or enforcing legal rights, protecting intellectual property, managing disputes, defending claims and seeking legal remedies.

The lawful basis for processing depends on the circumstances and applicable law. We may process personal information on grounds including:

Consent

Where you have provided consent for a particular purpose. Where processing depends on consent, you may withdraw that consent in accordance with applicable law.

Contractual necessity

Where processing is necessary to take steps at your request before entering into a contract; to enter into or perform a contract; to fulfil an order; or to manage an existing commercial relationship.

Legal obligations

Where processing is required to comply with applicable law or regulatory obligations.

Legitimate or lawful business purposes

Where recognised by applicable law, we may process information where reasonably necessary for legitimate and proportionate business purposes, such as responding to business enquiries, managing customer relationships and projects, improving our products and services, maintaining website and information security, preventing fraud or misuse, protecting legal rights, and conducting appropriate B2B business development.

Legal claims and other permitted grounds

We may also process personal information where necessary to establish, exercise or defend legal claims, or where another lawful basis is available under applicable law.

Ahti operates principally on a business-to-business basis. Where permitted by applicable law, we may communicate with architects, designers, developers, contractors, consultants, procurement professionals, hospitality businesses and other relevant professional contacts. We aim to ensure that marketing communications are proportionate and professionally relevant.

You may opt out of marketing at any time by:

• Using an unsubscribe option
• Replying to a communication
• Asking your Ahti contact to stop
• Contacting us directly

Opting out of marketing does not prevent us from sending communications relating to an existing enquiry, quotation, order, project, account, contractual relationship, warranty matter, or other service-related matter.

Our website may use cookies and similar technologies to support essential website functionality, security, visitor preferences, analytics, performance, communications, embedded content, campaign measurement and marketing.

Where applicable law requires consent for non-essential technologies, we will seek the relevant consent before those technologies are activated. Further information is available in our Cookie Policy.

We do not sell personal-information databases as part of our ordinary business. We may share personal information where reasonably necessary with the following categories of recipients.

Ahti affiliates

For customer service, sales, project management, account management, marketing, administration, reporting and security.

Service providers

Providers of website infrastructure, cloud services, communications, customer relationship management, document storage, analytics, marketing, customer support, cybersecurity, accounting, data management and IT support.

Professional advisers

Lawyers, accountants, auditors, insurers, consultants, tax advisers and other professional advisers.

Suppliers and project partners

Where reasonably necessary for a project or order: suppliers, manufacturers, logistics providers, distributors, installers, contractors, technical specialists and other relevant project participants.

Authorities

Where required or lawfully requested by a court, regulator, government authority, tax authority, law-enforcement body or other competent authority.

Corporate transactions

Where reasonably necessary in connection with a potential or completed investment, financing, restructuring, acquisition, merger, sale of business or similar corporate transaction.

Where a service provider processes personal information on our behalf, we seek to use appropriate safeguards as required by applicable law. Depending on the circumstances, third parties may act as processors on our behalf, as independent controllers, jointly with us, or in another legally recognised capacity.

Where a third party independently determines how personal information is processed, its own privacy terms may also apply.

Ahti operates internationally, and personal information may be processed in countries other than the country in which it was originally collected. This may occur where information is shared between Ahti entities, a service provider operates internationally, cloud infrastructure is located abroad, or a project involves more than one jurisdiction.

Where personal information is transferred internationally, we take reasonable steps to comply with applicable transfer requirements. Depending on the circumstances, safeguards may include recognised transfer mechanisms, contractual protections, data-processing agreements, appropriate technical and organisational safeguards, consent where legally required, or another mechanism permitted by applicable law.

Transfers subject to UAE law will be handled in accordance with applicable UAE requirements. Transfers subject to Indonesian law will be handled in accordance with applicable Indonesian requirements governing cross-border transfers of personal data.

We use reasonable technical, organisational and administrative measures designed to protect personal information against unauthorised access, unlawful processing, unauthorised disclosure, alteration, loss, destruction, misuse and other security threats.

Measures may include, as appropriate, access controls, authentication, role-based permissions, secure systems, secure cloud infrastructure, backups, internal procedures, vendor controls, staff controls and incident-response processes.

If we become aware of a suspected or confirmed personal-data breach, we will assess and respond to the incident in accordance with applicable law. This may include investigating the incident, containing the breach, mitigating potential harm, documenting the incident, and notifying authorities or affected individuals where legally required.

We take reasonable steps to ensure personal information is accurate and appropriately maintained where necessary for the purpose for which it is processed. If information we hold about you is inaccurate or incomplete, you may request correction where applicable.

We aim to collect only personal information reasonably necessary for the relevant purpose. We may periodically review, delete or anonymise information that is no longer reasonably required.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and any additional period required or permitted by law. Relevant considerations may include:

• The nature of the information and the purpose of processing
• The duration of our relationship and the lifecycle of a project
• Whether a business opportunity remains active
• Contractual, warranty and after-sales requirements
• Tax, accounting and regulatory requirements
• Legal limitation periods, disputes or litigation
• Security requirements and legitimate record-keeping needs

When personal information is no longer required, we may delete it, anonymise it, aggregate it, or securely dispose of it.

Because Ahti operates in project-based B2B markets, project opportunities and professional relationships may remain relevant over an extended period. We may retain appropriate professional contact and project information for a reasonable period where a future project or relationship remains reasonably possible, the information continues to have a legitimate business purpose, retention is proportionate, and applicable law permits us to do so.

Marketing preferences and applicable privacy rights will continue to be respected.

We may use technology to assist with organising enquiries, categorising contacts, prioritising follow-up, analysing website interactions, understanding business interests, segmenting communications, and other administrative or analytical functions.

We do not intend to make decisions that have significant legal or similarly significant effects on individuals solely through automated processing unless permitted by applicable law and appropriate safeguards are in place.

Depending on the law applicable to you, you may have rights in relation to your personal information, including rights to:

• Obtain information about how your personal information is processed
• Request access to, and a copy of, personal information
• Request correction of inaccurate information or completion of incomplete information
• Request deletion or erasure in applicable circumstances
• Withdraw consent where processing is consent-based
• Object to certain processing
• Request restriction or cessation of certain processing
• Exercise applicable data-portability rights
• Exercise rights relating to qualifying automated decisions
• Lodge a complaint with a competent authority

These rights are subject to applicable legal conditions, limitations and exceptions.

If you wish to exercise an applicable privacy right, please contact us using the details provided on our website, stating that this is a Privacy Request.

We may need to verify your identity, verify your authority to act for another person, obtain further information about your request, identify the relevant Ahti entity, or locate the relevant records. We will respond within the period required by applicable law. A request may be refused or limited where permitted by law.

You may opt out of direct marketing at any time. Where you opt out, we may retain limited information necessary to record your preference so that we do not inadvertently resume the relevant marketing activity.

If you provide personal information relating to another individual, you should ensure that you are entitled to provide the information and, where required, that the individual has been appropriately informed about the disclosure. This may apply where you provide information about a colleague, architect, designer, consultant, contractor, client, supplier or other project participant.

You should avoid submitting highly confidential or commercially sensitive project information through a general website enquiry form unless reasonably necessary. Submitting information through the website does not automatically create a confidentiality agreement. Where information requires specific contractual confidentiality protection, appropriate confidentiality arrangements should be agreed separately.

Our website and services are primarily directed at businesses and professionals and are not intended for children. We do not knowingly seek to collect children's personal information through the website for ordinary business purposes. If we become aware that information relating to a child has been collected in circumstances requiring additional protection, we will take appropriate steps in accordance with applicable law.

Our website may link to or display content from third-party websites or services. Those third parties may independently collect and process personal information under their own terms and privacy practices. Ahti is not responsible for the independent privacy practices of a third party merely because we provide a link to or integration with that service.

If you interact with Ahti through a social-media platform, both Ahti and the relevant platform operator may process information relating to the interaction. The relevant platform's own privacy terms may apply independently of this Privacy Policy.

Ahti may establish additional entities or operations in new markets. Where another Ahti entity becomes responsible for processing personal information in a particular jurisdiction or business activity, we may update this Privacy Policy or provide an appropriate additional privacy notice.

We may update this Privacy Policy from time to time to reflect changes to our website or business, new products or services, expansion into new markets, changes to processing activities, technological developments, or changes to applicable UAE or Indonesian law and other legal or regulatory developments.

The latest version will be published on our website and identified by the Last updated date. Where required by applicable law, we may provide additional notice or request renewed consent for material changes affecting consent-based processing.

If you have concerns about how we process personal information, please contact us so that we can investigate and respond. Depending on the law applicable to you, you may also have the right to lodge a complaint with an appropriate regulatory or governmental authority.

Nothing in this Privacy Policy limits any legal right that cannot lawfully be excluded.

This Privacy Policy should be read together with our Cookie Policy and Terms of Use. Specific activities may also be subject to an additional privacy notice or contractual documentation where appropriate.

Questions about this Privacy Policy or requests concerning personal information may be submitted using the contact details provided on the Ahti Interiors website. For matters specifically concerning our Indonesian operations, you may contact the Ahti Interiors team in Indonesia through the contact details provided on our website.