StorTech Solutions LLC · Last updated: October 2026

Our clients trust StorTech Solutions LLC (“StorTech”, “we”) with access to the systems that run their businesses: servers, storage, backup and disaster recovery (our Cyber Resilience services), networks, security, Microsoft 365 and licensing. This policy explains, in plain terms, how we protect the information clients share with us and the information we create while working for them.

1. What we treat as confidential

We treat all non-public information relating to a client as confidential, whether it is shared verbally, in writing, electronically or observed on site. This includes:

• The client’s identity and the fact that they are our client
• System architectures, designs, network diagrams and solution blueprints
• Device, server, storage, backup and security configurations
• Credentials of any kind, including passwords, keys, certificates, tokens and recovery codes
• IP addressing, firewall rules, VPN details and access methods
• Licensing details, commercial terms and pricing
• Personal data of the client’s staff, customers or partners that we may encounter
• Business, operational and financial information we learn during an engagement

We do not publish client names, logos, testimonials or case studies without the client’s explicit written permission.

2. Every build is unique, and stays with the client

Each environment we design and deploy is built for that specific client. Credentials, configurations and designs are created individually for each engagement.

Our pledge: we will never reuse a client’s credentials, passwords, configurations, network designs or blueprints for another client. We may apply general technical know-how and vendor best practice across projects, but client-specific material is not copied, templated or shared.

3. Access to client systems

• Least privilege. Our engineers are given only the access needed for the task in hand, and only for as long as it is needed.
• Named access. Where the client’s systems allow it, we use named, individual accounts rather than shared accounts, so activity can be attributed.
• Client control. The client remains the owner of their systems and accounts. We encourage clients to approve, monitor and revoke our access at any time.

4. Credential handling and handover

• Credentials are stored in a secure, access-controlled password manager or vault, limited to the engineers working on that engagement.
• Credentials are handed over to the client through a secure method agreed with the client (for example, a password manager share, or separating the username and password across different channels). We do not send full credentials in plain-text email.
• At project close, we hand over all administrative credentials to the client’s nominated contact and recommend that they are rotated. Where we have been asked to do so, we rotate them ourselves before handover.
• Where an ongoing support or managed service agreement is in place, we retain only the access that agreement requires, and we remove it when the agreement ends.

5. Data handling, retention and deletion

• We collect and keep only the client information we need to deliver and support the agreed services.
• Project documentation, configuration backups and diagrams are stored in access-controlled systems and shared only with the people working on the engagement.
• We do not move client data outside the client’s environment unless this is necessary for the service and has been agreed with the client.
• When an engagement ends, or on the client’s written request, we return or securely delete client confidential information we hold, including credentials, configuration exports and diagrams. We may keep a limited record where we are legally required to (for example, invoices and contractual records), and that record remains subject to this policy.
• On request, we will confirm deletion in writing.

6. Our people

All StorTech staff are bound by confidentiality obligations in their employment terms, and these obligations continue after they leave the company. Access to client information is removed promptly when a staff member changes role or leaves.

7. Subcontractors and vendors

Sometimes we work with specialist subcontractors, distributors or technology vendors (for example, for hardware support or licensing). Where they need access to client information, we:

• share only what is necessary for their task;
• require them to be bound by confidentiality obligations at least as protective as our own; and
• remain responsible to our client for the work we have subcontracted.

Where practical, we tell the client in advance when a third party will need access to their environment.

8. Incident notification

If we become aware of an incident that affects, or is reasonably likely to affect, the confidentiality or security of a client’s information or systems while in our care, we will:

• notify the client’s nominated contact without undue delay;
• share what we know about the nature and scope of the incident;
• take reasonable steps to contain it and limit its impact; and
• cooperate with the client’s investigation and with any notifications the client needs to make.

Specific notification timelines can be agreed in individual contracts.

9. Legal framework

We handle personal data in line with the principles of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable UAE laws, including processing personal data only for defined purposes, keeping it secure, and limiting how long it is retained. Where we process personal data on a client’s behalf, we act on the client’s instructions. Clients remain responsible for their own compliance obligations, and we will support them where reasonable.

This policy is a statement of our practices. It does not represent any certification or third-party audit. Where a client has a signed agreement with us, such as a Mutual Non-Disclosure Agreement or a services contract, the terms of that agreement take precedence.

10. Mutual NDAs

We are happy to sign a Mutual Non-Disclosure Agreement before any detailed discussions begin. You can download our sample Mutual NDA, or we can review your own NDA.

11. Contact us

If you have questions about this policy, or wish to request deletion of your information or report a concern, please contact us:

StorTech Solutions LLC
Office 1505, Tower B, Prime Business Center
Jumeirah Village Circle (JVC), Dubai, United Arab Emirates
Email: info@stortech.ae
Phone: +971 4 5548173
Trade Licence No. 712255

We review this policy periodically and publish updates on this page.