Privacy Policy

1. Introduction

Welcome to AUXO Data Labs ("we," "us," "our"). This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, auxodata.com ("Site"), or engage with our marketing channels.

Legal Entity:

This Site is owned and operated by Rapple International FZE (trading as AUXO Data Labs), a company registered in the United Arab Emirates. For the purposes of the UAE Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR), Rapple International FZE is the Data Controller of the personal data collected through this Site.

Scope of this Policy:

Website Visitors & Leads: This Policy applies to data we collect from you directly (e.g., forms, cookies).

Client Data (Services): This Policy does NOT apply to data we process on behalf of our business clients ("Client Data") while providing analytics services. Client Data is governed by our Master Services Agreement (MSA) and treated in accordance with our role as a Data Processor.

2. Data We Collect

2.1 Personal Data You Provide

We collect personal data directly from you when you complete forms on our Site (contact, demo requests, content downloads), subscribe to newsletters, or apply for job opportunities.

• Identifiers: Name, business email, telephone number.
• Professional information: Job title, company name, industry.
• Communication: Feedback, inquiries, or specific project details you choose to share.

2.2 Data Collected Automatically

When you visit our Site, we automatically collect technical data via cookies and similar technologies. This includes IP address, browser type, operating system, device identifiers, session duration, and click-stream behavior.

2.3 Data from Third Parties

We may receive business contact information from event partners (when you register for an event we sponsor) or public professional networks (like LinkedIn) for B2B marketing purposes, strictly in accordance with applicable laws.

3. How We Use Your Data & Legal Basis

Purpose	Legal Basis (GDPR / PDPL)
Provide and maintain our Site	Legitimate Interest (Ensuring security and functionality)
Respond to inquiries & demo requests	Consent / Contractual Necessity (Pre-contractual steps)
Send newsletters & marketing	Consent (Opt-in) or Legitimate Interest (B2B context)
Analyze trends (Website Analytics)	Legitimate Interest (Improving our services)
Legal Compliance & Security	Legal Obligation

4. Cookies & Tracking Technologies

4.1 Usage:

We use cookies to enable essential site functionality, measure performance (Google Analytics), and deliver relevant B2B content.

4.2 Management:

On your first visit, you will see a Cookie Banner. You can accept or reject non-essential cookies. You can also disable cookies via your browser settings, though this may affect Site performance.

5. Disclosure of Your Data

We share data only when necessary:

• Service Providers: With trusted vendors (e.g., CRM systems, cloud hosting, email marketing platforms) bound by strict confidentiality and data processing agreements.
• Legal Compliance: If required by law, court order, or government authority (including UAE Data Office).
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell your personal data. We do not process "Sensitive Personal Data" (health, biometric, religious) through this Site.

6. International Transfers

As a global consultancy, your data may be processed in the UAE, United States, or Europe.

Transfers from EU/UK: When transferring data outside the EEA to the UAE or other jurisdictions, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions to ensure your rights are protected.

7. Data Security & Retention

We use enterprise-grade security measures—including TLS 1.3 encryption for data in transit and AES-256 for data at rest—along with multi-factor authentication and access controls to protect your data.

We retain personal data only as long as necessary:

• Contact/Sales Inquiries: 3 years from last interaction.
• Marketing Data: Until you unsubscribe (opt-out) or after 2 years of inactivity.
• Website Analytics Data: 14 months (in accordance with Google Analytics 4 standards).
• Legal Records: As required by UAE law (typically 5-7 years).

8. Your Rights

Depending on your location (UAE, EU, UK, California), you have rights regarding your data:

• Access & Correction: Request a copy of your data or correct errors.
• Erasure ("Right to be Forgotten"): Request deletion of your data.
• Restriction: Restrict how we process your data.
• Withdraw Consent: Unsubscribe from marketing at any time.

How to Exercise Rights: To exercise these rights, email our Data Protection Officer at privacy@auxodata.com. We will respond within 30 days.

9. California Residents (CCPA/CPRA)

We do not sell personal information. California residents have the right to request disclosure of data collection practices and the specific pieces of information we hold. You also have the right to non-discrimination for exercising these rights.

10. Children's Data

Our Site is a B2B platform intended for professionals. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this Policy to reflect legal or operational changes. The updated version will be indicated by the "Last Updated" date at the top of this page.

12. Contact Us

For any privacy-related questions, please contact:

Rapple International FZE (t/a AUXO Data Labs)
Email: privacy@auxodata.com