Exselens Data Protection & Privacy Policy
Exselens is fully committed to protecting personal data and ensuring compliance with applicable UAE data protection laws, including the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Protecting personal data is fundamental to maintaining trust and integrity in all business relationships.
This Policy applies to all Exselens operations, employees, clients, website visitors, and partners.
1. Aim of the Data Protection Policy
The purpose of this Policy is to:
- Ensure that personal data is collected, processed, and stored lawfully, fairly, and securely.
- Maintain transparency with individuals regarding the use of their data.
- Provide the framework for lawful cross-border data transfers where necessary.
- Promote a culture of compliance across all Exselens operations.
2. Principles of Personal Data Processing
Exselens adheres to the following core principles:
- Lawfulness, fairness, and transparency: Personal data is collected and processed in a legal, fair, and transparent manner.
- Purpose limitation: Data is collected only for specified, explicit, and legitimate purposes.
- Data minimization: Only the data necessary to achieve the stated purposes is collected.
- Accuracy: Personal data is accurate and kept up to date; inaccurate data is promptly corrected or deleted.
- Storage limitation: Data is retained only as long as necessary for the purposes it was collected.
- Integrity and confidentiality: Data is processed securely to prevent unauthorized access, loss, or misuse.
3. Lawful Basis for Processing
Under PDPL, Exselens processes personal data based on lawful grounds, including:
- Consent: Individuals provide explicit consent for specific purposes.
- Contractual necessity: Processing is necessary to perform contractual obligations.
- Legitimate interests: Processing is necessary for business operations, marketing, or security purposes, provided these do not override individuals’ rights.
- Legal obligations: Processing is required to comply with applicable laws or regulations.
4. Collection of Personal Data
Exselens collects personal data through multiple channels:
- Directly from you via our website, forms, or email communications.
- From responses to marketing campaigns.
- From publicly available sources, including social media platforms.
We do not knowingly collect data from individuals under 16 without parental or guardian consent.
5. Types of Personal Data Collected
Types of personal data we may collect include:
- Name, address, email, and phone numbers.
- Company or job-related information.
- Website usage data such as IP addresses, device type, browser, and pages visited (collected via cookies or analytics tools).
Non-identifiable technical data is not treated as personal data under PDPL.
6. Use of Cookies
Our website may use cookies to:
- Enhance website functionality and user experience.
- Track website performance and analyze user interactions.
- Provide personalized content and marketing insights.
You may manage cookies through your browser settings. Disabling cookies may limit certain features on the website.
7. Data Security Measures
Exselens implements strong technical and organizational measures to protect personal data, including:
- Restricted access on a “need-to-know” basis.
- Encrypted data transfers.
- Firewalled IT systems and secure servers.
- Regular monitoring of IT systems to detect and prevent misuse or unauthorized access.
8. Data Retention
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When no longer required, data is securely deleted or anonymized.
9. Rights of Data Subjects
Under UAE PDPL, you have the following rights:
- Right of Access: Request information on the personal data we hold about you.
- Right to Rectification: Correct inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, where applicable.
- Right to Restrict Processing: Limit how we use your data under certain circumstances.
- Right to Object: Object to data processing for direct marketing or legitimate interests.
- Right to Data Portability: Receive your data in a structured, machine-readable format and transfer it to another provider.
- Right to Withdraw Consent: Revoke previously given consent for data processing.
- Right to Complain: File a complaint with a supervisory authority regarding data processing.
To exercise your rights, contact: dpo@exselens.com
10. International Data Transfers
If personal data is transferred outside the UAE, Exselens ensures appropriate safeguards are in place to maintain data protection, including secure contractual agreements or other mechanisms approved under PDPL.
11. Third-Party Processors
Exselens may engage trusted service providers for IT, analytics, hosting, or marketing. All third parties are required to comply with equivalent data protection standards.
12. Data Processing Agreements
Where we process personal data on behalf of clients or partners, we enter into Data Processing Agreements (DPAs) and, if applicable, Standard Contractual Clauses (SCCs) to ensure full compliance with data protection obligations.
13. Contact Information
For questions, complaints, or requests regarding your personal data:
Exselens FZ‑LLC
Email: dpo@exselens.com
Phone: +971-585139690
Address: Dubai Last Updated: 12/24/2025
Effective Date: 12/24/2025
Company: Exselens FZ‑LLC (“Exselens,” “we,” “our,” or “us”)