Privacy Policy

Last updated: 8 September 2026

1. Introduction

SorbiTech Group ("SorbiTech Group", "we", "us", or "our") respects the privacy of visitors and users of the SorbiTech Group website. This Privacy Policy explains how we collect, use, retain, and protect the personal information you provide through this website and through the group brand websites.

This Policy applies to sorbitech.com and to the group brand websites operated under SorbiTech Group, including medaad.com, activatedcarbondubai.com, carbonmolecularsieve.com, and puraspecs.com.

2. Data Controller

The data controller responsible for the processing of personal information collected through this website is:

SorbiTech Group
Global Adsorption Engineering Group
Contact: contact form

3. Information We Collect

We collect two categories of information:

Information you provide directly. This includes information you submit through the contact form, quote request forms, and Technical Data Sheet (TDS) request forms on the website. Typical fields include:

• Name
• Business email address
• Business phone number (optional)
• Company or organisation name
• Country and industry sector
• Message content and any specifications you share
• The page or product reference the enquiry relates to

Information collected automatically. When you visit our website, we automatically collect limited technical information necessary to operate and secure the site, including:

• IP address of the device used, together with a one way cryptographic hash of it that is used to limit repeated or automated submissions
• Browser type and version
• Device type and screen resolution
• Referring URL and pages visited
• Approximate country location derived from IP geolocation
• Timestamps of page views

We do not collect financial account information, government identification numbers, or other sensitive personal data through this website.

Enquiry context. When you submit an enquiry form, we attach a record of how you reached the website to that enquiry, so that our team can respond with the right context and so that we can understand which of our pages are useful. This record covers the website, search engine, or AI assistant that referred you, any campaign tag present in the link you followed, the first page you arrived on, the pages you viewed during that visit, and how long the visit lasted.

This information is kept in your browser's temporary session storage while you browse, is discarded when you close the browser tab, and reaches us only if you choose to submit a form. We do not use it to build a profile of you across separate visits or across other websites, and it is never sold or shared for advertising purposes.

4. Cookies and Analytics

This website sets a small number of cookies and uses two analytics services to understand how pages are found and used. We do not run advertising on this website, we do not use advertising or retargeting cookies, and we do not sell, rent, or trade any information collected here.

The services we use.

• Google Analytics 4, operated by Google. It reports page views, traffic sources, and aggregate visitor behaviour. IP anonymisation is enabled, so your full IP address is not stored by the service.
• Microsoft Clarity, operated by Microsoft. It produces heatmaps and session replays that show how visitors move, click, and scroll through a page, so that layout and content problems can be identified and corrected.

What a session replay is, and what it is not. A replay reconstructs how a page was used, covering pointer movement, clicks, taps, and scrolling. It is not a recording of your screen, your camera, your microphone, or anything outside this website. Text you type into form fields is masked, so the content of what you enter is not captured in a replay.

Cookies these services set. The lifetimes below are typical, and are set by the services rather than by us.

• _ga and related Google Analytics cookies. Distinguish visitors and sessions. Typically expire up to around two years after the last visit.
• _clck, set by Microsoft Clarity. Retains a Clarity identifier so that repeat visits can be recognised. Typically expires after around one year.
• _clsk, set by Microsoft Clarity. Groups the pages viewed in one visit into a single session. Typically expires within a day.
• Microsoft may also set an identifier cookie that it uses across its own services.

Where they run. Both services load on the public pages of this website only, and only after the page has finished loading, so they do not delay the content you came to read. Internal administrative pages are excluded from both, so staff activity is neither measured nor recorded.

Your choices. This website does not currently display a cookie consent banner. If you would rather not be included in analytics, the following options are open to you:

• Block or delete cookies for this website through your browser settings. Most browsers allow this on a per site basis.
• Install the Google Analytics opt out browser add on, which applies across every website using Google Analytics.
• Browse in a private or incognito window, which discards these cookies once the window is closed.
• Read the Google Privacy Policy and the Microsoft Privacy Statement, which govern how each provider handles the data it receives.

You may also ask us directly to exclude you, or to remove data associated with your visits, using the contact route in the final section of this policy.

5. How We Use the Information

We use the information you provide, and information collected automatically, for the following purposes:

• To respond to enquiries, quote requests, and technical support requests
• To provide requested documentation such as Technical Data Sheets and certificates of analysis
• To communicate with you about products, services, and applications relevant to your enquiry
• To improve the content, structure, and performance of the website
• To detect and prevent fraud, abuse, and security threats
• To comply with legal, regulatory, and contractual obligations

6. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) or similar legislation applies to your interaction with this website, we rely on the following legal bases for processing your personal information:

• Legitimate interest to respond to your enquiries, deliver technical documentation, provide customer support, and secure the operation of the website
• Consent where you specifically opt in to receiving marketing communications
• Contractual necessity where processing is required to enter into or perform a contract with you or your organisation
• Legal obligation where processing is required by applicable law

7. Sharing of Information

We do not sell your personal information. We share your information only in the limited circumstances described below:

• Within the SorbiTech Group. Enquiry information is shared between the SorbiTech Group commercial, engineering, and technical support teams responsible for handling your enquiry. This includes the SorbiTech Group brands Medaad Adsorption Chemicals, Activated Carbon Dubai, Carbon Molecular Sieve, and PuraSpecs. Full details of our group structure are available on the Our Entities page.
• Service providers. We use trusted service providers to operate the website and manage communications, including Google (email delivery), Cloudflare (content delivery, security, and email obfuscation), and Microsoft (business email). These providers process personal information on our behalf under confidentiality obligations and applicable data protection laws.
• Legal obligations. We may disclose information where required by law, court order, or the request of a regulatory authority.

8. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected:

• Enquiry data submitted through contact and quote forms is retained for up to three years to support ongoing customer relationships, technical support, and repeat business.
• Automatic technical information is retained for a shorter period consistent with the operational and security requirements of the website.

After the retention period expires, personal information is deleted or fully anonymised.

9. International Data Transfers

SorbiTech Group operates internationally across multiple jurisdictions. Some of the service providers we use (including Google, Microsoft, and Cloudflare) may process information in other jurisdictions. Where information is transferred outside your country of residence, we ensure that appropriate safeguards are in place, including reliance on standard contractual clauses or equivalent mechanisms where required by applicable data protection law.

10. Your Rights

Subject to applicable data protection law, you have the following rights in respect of the personal information we hold about you:

• Access. Request confirmation of whether we process your personal information, and a copy of the information we hold.
• Correction. Request correction of inaccurate or incomplete information.
• Deletion. Request deletion of your personal information where continued processing is no longer necessary.
• Restriction. Request that we restrict processing in certain circumstances.
• Objection. Object to processing based on our legitimate interests.
• Portability. Receive a copy of your personal information in a structured, commonly used format.
• Withdrawal of consent. Withdraw any consent you have previously provided, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us through the contact form. We will respond within a reasonable period consistent with applicable law.

You also have the right to lodge a complaint with the data protection authority in your country of residence.

11. Data Security

We implement technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, and destruction. Measures include encrypted transport (HTTPS with HSTS preload), access controls on administrative interfaces, multi factor authentication for administrative access, IP address hashing, audit logging of privileged actions, rate limiting, and infrastructure hardening consistent with industry standards.

No system is completely secure. If a data breach that materially affects the rights of individuals occurs, we will notify affected individuals and applicable regulatory authorities in accordance with applicable law.

12. Children

This website is directed at professional users and is not intended for use by children. We do not knowingly collect personal information from individuals under the age of sixteen.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version takes effect when posted on this website. The date of the most recent update is shown at the top of this page. For material changes that affect the way we handle your personal information, we will highlight the change on the website homepage or notify you by other appropriate means.

14. Contact

For questions or requests concerning this Privacy Policy or your personal information, please contact:

SorbiTech Group
Global Adsorption Engineering Group
Contact form: open the contact form
Company information: About SorbiTech Group

See also our Terms of Use for the terms governing your access to and use of this website.