Privacy Policy

Veloryx Technologies FZ-LLC ("Veloryx", "we", "our", or "us") is a technology company registered in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates. We are committed to protecting the privacy and personal data of our clients, website visitors, and users of our software products and services.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), and other applicable data protection regulations.

By accessing our website at veloryx.com, requesting a consultation, or using any of our software products (CRM Platform, ERP Suite, Healthcare Suite, Education Platform, Workflow Automation, or Data Intelligence), you acknowledge that you have read and understood this Privacy Policy.

We collect the following categories of personal data:

Identity and Contact Data

• —Full name, job title, and company name
• —Business email address and telephone number
• —Country and city of residence or operation
• —Preferred communication method

Project and Business Data

• —Project requirements, scope, and budget information submitted via consultation forms
• —Business documents and requirement specifications voluntarily uploaded
• —Communication records including emails and meeting notes

Technical and Usage Data

• —IP address, browser type, and device information
• —Pages visited, time spent, and navigation paths
• —Referral sources and search terms

We do not collect sensitive personal data (such as health information, biometric data, or financial account credentials) unless expressly required by a contracted service and with your explicit consent.

We use the personal data we collect for the following purposes:

• —To respond to consultation requests and sales enquiries
• —To provide, manage, and support our software products and services
• —To prepare proposals, contracts, and project documentation
• —To process payments and manage billing for services rendered
• —To send transactional communications such as project updates and invoices
• —To improve our website, products, and service offerings
• —To comply with legal obligations under UAE law and regulatory requirements
• —To detect, prevent, and address technical issues or fraudulent activity
• —To send marketing communications where you have opted in to receive them

We will not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your prior consent.

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, we process your personal data on the following lawful bases:

• —Contractual necessity: Where processing is required to perform a contract with you or take pre-contractual steps at your request.
• —Legitimate interests: Where processing is necessary for our legitimate business interests, such as improving our services and preventing fraud, and those interests are not overridden by your rights.
• —Legal obligation: Where we are required to process data to comply with UAE law, regulatory requirements, or court orders.
• —Consent: Where you have given explicit consent for a specific purpose, such as receiving marketing communications. You may withdraw consent at any time.

We do not sell, rent, or trade your personal data. We may share data with:

• —Service providers: Trusted third-party vendors who assist us in operating our business (e.g., cloud hosting, payment processing, email delivery), bound by confidentiality obligations.
• —Professional advisors: Legal, accounting, and audit firms where necessary for business operations and compliance.
• —Regulatory authorities: Government bodies, law enforcement, or courts where required by applicable UAE law or regulation.
• —Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

Any third party receiving personal data from us is contractually required to handle it securely and in accordance with applicable data protection laws.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations.

• —Consultation and sales enquiry data: up to 3 years from last contact
• —Client project data: duration of contract plus 7 years for audit and legal purposes
• —Invoice and payment records: 7 years as required by UAE commercial law
• —Website analytics data: up to 26 months
• —Marketing opt-in records: until withdrawal of consent plus 3 years

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

We implement industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• —TLS/SSL encryption for all data transmitted via our website and platforms
• —AES-256 encryption for data stored at rest
• —Role-based access controls and multi-factor authentication for internal systems
• —Regular security assessments and penetration testing
• —Employee data protection training and confidentiality obligations
• —Incident response procedures and breach notification protocols

Whilst we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to harm your interests, we will notify you and the relevant UAE authority in accordance with applicable law.

Under the UAE PDPL and applicable regulations, you have the following rights with respect to your personal data:

• —Right of access: To request a copy of the personal data we hold about you.
• —Right to rectification: To request correction of inaccurate or incomplete personal data.
• —Right to erasure: To request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to legal retention requirements.
• —Right to restriction: To request that we limit the processing of your data in certain circumstances.
• —Right to data portability: To receive your personal data in a structured, machine-readable format.
• —Right to object: To object to processing based on legitimate interests, including direct marketing.
• —Right to withdraw consent: To withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@veloryx.com. We will respond within 30 days.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. We use the following types of cookies:

• —Strictly necessary: Essential for the website to function. Cannot be disabled.
• —Performance and analytics: Help us understand how visitors interact with our website (e.g., page views, traffic sources). Data is aggregated and anonymised.
• —Functional: Remember your preferences and settings to improve your experience.

You may manage or disable cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

Where personal data is transferred outside the UAE, we ensure that appropriate safeguards are in place in accordance with UAE PDPL requirements, including contractual protections and data transfer agreements. We only transfer data to countries that provide an adequate level of data protection or where specific safeguards have been implemented.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or a prominent notice on our website. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Privacy team:

• —Email: privacy@veloryx.com
• —Phone: +971 7 243 5000
• —Address: Veloryx Technologies FZ-LLC, Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, UAE

You also have the right to lodge a complaint with the UAE Personal Data Protection Office if you believe your rights have not been respected.