Privacy Policy
This Privacy Policy explains how PioneerUnion Maldives Real Estate Development Investment and Development Private Limited ("PioneerUnion", "PNU", "we", "us") handles personal data collected through pioneerunion.com (this "Site").
This Site is the institutional website of the PioneerUnion Group. It is intended for partners, governments, institutions and investors. It is not a retail or transactional site, and we do not sell goods or services through it.
1. Who is responsible
The data controller for this Site is:
PioneerUnion Maldives Real Estate Development Investment and Development Private Limited
Registration Number: C34362025
Privacy contact: info@pioneerunion.com
Each PioneerUnion country chapter operates through its own legal entity and may act as a separate controller for data it collects directly. Where you deal with a chapter, that chapter's own privacy notice applies to that dealing.
2. What we collect
We collect only what we need to operate the Site and respond to enquiries.
Information you give us. When you use a contact or enquiry form, or write to a published address, we collect the name, organisation, email address, and any other details you choose to include in your message. The contact form on this Site uses your own email application (a mailto: link): your message is sent as ordinary email from you to us, and the Site itself does not collect or store enquiries on a server.
Information collected automatically. Our hosting and security provider processes technical data required to deliver the Site and protect it from abuse: IP address, approximate location derived from IP, browser and device type, referring page, pages viewed, and timestamps. This processing occurs regardless of any cookie choice, because it is necessary to serve the page at all.
Information from cookies and similar technologies. See our Cookie Policy for the full inventory and your controls.
What we do not collect on this Site. We do not knowingly collect special-category data (including health data, biometric identifiers, political opinions, religious beliefs, or trade union membership), payment card data, or government identification numbers through this Site. Please do not send such information to us through the forms on this Site.
3. Why we use it, and on what basis
| Purpose | Basis |
|---|---|
| Responding to your enquiry and any follow-up correspondence | Steps taken at your request prior to entering an agreement; our legitimate interest in operating an organisation |
| Delivering, securing and maintaining the Site | Our legitimate interest in a functioning, non-abused website |
| Meeting legal, regulatory, audit and record-keeping obligations | Legal obligation |
| Establishing, exercising or defending legal claims | Our legitimate interest; legal obligation |
We do not use personal data collected through this Site to build advertising profiles, and we do not sell personal data. We do not carry third-party advertising on this Site.
4. Who we share it with
We share personal data only with:
- Service providers who host, secure, or operate the Site and our correspondence systems, and who act on our documented instructions. As at the effective date, our website hosting and content delivery is provided by Cloudflare, Inc. (Cloudflare Pages), and we use a workplace email and productivity provider for correspondence. No analytics provider is used.
- PioneerUnion Group entities, where your enquiry concerns a specific country chapter or pillar and must be routed to the team that can answer it.
- Professional advisers, auditors and regulators, where we are required or permitted to do so.
- A successor entity, in the event of a reorganisation or transfer of the relevant part of our business.
We do not disclose personal data to any other third party for that party's own purposes.
5. International transfers
PioneerUnion is a multi-country group and our service providers operate globally. Your data may therefore be processed outside your country of residence, including in Singapore, the People's Republic of China, and the Republic of Maldives.
Where we transfer personal data out of a jurisdiction that restricts such transfers, we do so under a lawful transfer mechanism — contractual protections requiring a comparable standard of protection, an adequacy decision, or your explicit consent, as applicable. You may request details of the mechanism used for a specific transfer at the contact address in clause 10.
6. How long we keep it
- Enquiry correspondence: kept only as long as necessary to respond to your enquiry and for reasonable follow-up, then deleted or anonymised.
- Server and security logs: server and security logs are handled by our hosting/CDN provider (Cloudflare) under its own retention practices.
- Records we are required to keep for legal, tax, or audit reasons: for the period required by the applicable law, and no longer.
7. Security
We apply technical and organisational measures appropriate to the risk, including transport encryption (HTTPS) across the whole Site, access control on internal systems on a need-to-know basis, and provider-level protection against network abuse.
No transmission over the internet is completely secure. We are honest about that limit. Please do not use the forms on this Site to send confidential, commercially sensitive, or personal information that you would not want held in ordinary business correspondence.
8. Your rights
Depending on where you live, you may have the right to:
- ask what personal data we hold about you and obtain a copy of it;
- have inaccurate data corrected;
- have data erased, where we no longer have a basis to keep it;
- restrict or object to certain processing, including processing based on legitimate interests;
- withdraw consent at any time, where processing is based on consent — withdrawal does not affect processing already carried out;
- receive data you provided to us in a portable format;
- lodge a complaint with your data protection authority.
If you are in Singapore, your access and correction rights under the Personal Data Protection Act 2012 apply, and you may complain to the Personal Data Protection Commission.
If you are in the EEA or the United Kingdom, the rights listed above apply under the GDPR and UK GDPR respectively, and you may complain to your national supervisory authority.
If you are in the Republic of Maldives, please see clause 8 of the Maldives chapter privacy policy at pioneerunionmaldives.com, which explains the position under Maldivian law.
We will respond to a rights request within 30 days. We may ask you to verify your identity before we act, and we may decline a request where the law permits or requires us to — in which case we will tell you why.
9. Children
This Site is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Contact and complaints
Privacy enquiries and rights requests: info@pioneerunion.com
If you are not satisfied with our response, you may escalate to the relevant supervisory authority in your jurisdiction. We would rather you raised it with us first — Transparency is one of our four values, and a complaint we do not hear is one we cannot fix.
11. Changes to this policy
We may update this policy. The version and effective date at the head of the page always show the current version. Where a change materially affects your rights, we will publish a notice on this page for at least 30 days before the change takes effect.