Legal
Privacy Policy
This policy explains how Varaisys Dataworks FZCO collects, uses, and protects your personal data in compliance with UAE PDPL, DIFC Data Protection Law, and applicable UAE regulations.
Last updated: April 2026
Contents
1. Introduction
Varaisys Dataworks FZCO ("Varaisys", "we", "us", or "our") is registered in the IFZA Free Zone, Dubai, United Arab Emirates. We are committed to protecting the personal data of our clients, website visitors, and business contacts in accordance with applicable data protection laws, including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL), the DIFC Data Protection Law 2020 (DIFC DPL), and the ADGM Data Protection Regulations 2021 where applicable.
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you interact with our website (www.varaisys.ae), engage our services, or communicate with us. By using our website or services, you acknowledge that you have read and understood this policy.
2. Data Controller
The data controller responsible for your personal data is:
Varaisys Dataworks FZCO
IFZA Business Park, Dubai Silicon Oasis
Dubai, United Arab Emirates
Email: info@varaisys.ae
For data protection enquiries, please contact us at: privacy@varaisys.ae
3. Personal Data We Collect
We collect personal data in the following categories:
Contact and Identity Data: Full name, job title, company name, work email address, and business telephone number, provided when you submit an enquiry, request a demo, or sign up for our newsletter.
Usage Data: IP address, browser type and version, pages visited, time spent on pages, referring URLs, and device identifiers, collected automatically via cookies and analytics tools when you visit our website.
Communication Data: The content of emails, messages, and other communications you send to us.
Contract and Transaction Data: Information necessary to deliver our services, including project briefs, technical requirements, and billing information where applicable.
We do not knowingly collect personal data from individuals under the age of 18.
4. Legal Basis for Processing
We process your personal data on the following legal bases under applicable UAE data protection law:
Legitimate Interests: To respond to your enquiries, provide information about our services, and manage our business relationships, where our legitimate interests do not override your rights and freedoms.
Contractual Necessity: To perform a contract with you or take steps at your request prior to entering into a contract.
Consent: Where you have given explicit consent, such as subscribing to our newsletter. You may withdraw consent at any time by contacting us at privacy@varaisys.ae.
Legal Obligation: Where processing is required to comply with a legal or regulatory obligation applicable to us.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
- To respond to enquiries, demo requests, and other communications you initiate.
- To deliver, manage, and improve our services and platforms (Detra Framework, FluxNode, and related offerings).
- To send service-related communications, including project updates and support responses.
- To send marketing communications where you have consented or where we have a legitimate interest (you may opt out at any time).
- To analyse website usage and improve user experience via aggregated, anonymised analytics.
- To comply with applicable legal, regulatory, and contractual obligations.
- To protect the security and integrity of our systems and services.
6. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data only in the following circumstances:
Service Providers: Trusted third-party vendors who assist in operating our website or delivering our services (e.g., cloud hosting, email delivery, analytics), under strict contractual data processing agreements.
Legal Requirements: Where disclosure is required by UAE law, a court order, or a regulatory authority with jurisdiction over Varaisys Dataworks FZCO.
Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
Professional Advisors: Our legal, accounting, and insurance advisors, under confidentiality obligations.
We do not transfer personal data outside the UAE without ensuring appropriate safeguards are in place, including contractual protections equivalent to UAE PDPL requirements.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.
Contact and enquiry data is retained for up to 3 years from the date of last contact. Client contract data is retained for 7 years following contract termination to comply with UAE commercial law requirements. Website usage data collected via analytics tools is retained for up to 26 months. Newsletter subscription data is retained until you unsubscribe.
When personal data is no longer required, it is securely deleted or anonymised.
8. Your Rights
Subject to UAE PDPL and applicable regulations, you have the following rights regarding your personal data:
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure: To request deletion of your personal data, subject to legal retention requirements.
Right to Restriction: To request that we restrict processing in certain circumstances.
Right to Data Portability: To receive your data in a structured, commonly used format.
Right to Object: To object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where processing is based on consent, to withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, please contact us at privacy@varaisys.ae. We will respond within 30 days. You also have the right to lodge a complaint with the UAE Personal Data Protection Office or the relevant regulatory authority.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience, analyse usage, and support marketing activities.
Essential Cookies: Required for the website to function correctly. These cannot be disabled.
Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). Data is aggregated and anonymised.
Marketing Cookies: Used to deliver relevant content and measure campaign effectiveness, only where you have consented.
You can manage your cookie preferences via your browser settings or our cookie consent tool. Disabling certain cookies may affect website functionality.
10. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256).
- Access controls and authentication requirements for all staff.
- Regular security assessments and penetration testing.
- Staff training on data protection obligations.
While we take all reasonable precautions, no transmission over the internet is completely secure. We encourage you to use secure channels when communicating sensitive information.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The updated policy will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
Material changes will be communicated to existing clients and newsletter subscribers via email.
13. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please contact:
Varaisys Dataworks FZCO
IFZA Business Park, Dubai Silicon Oasis, Dubai, UAE
Email: privacy@varaisys.ae
General: info@varaisys.ae
Compliance
UAE PDPLDIFC DPL 2020ADGM RegulationsISO 27001 AlignedUAE Data ResidencyQuestions about your data?
Contact our team at privacy@varaisys.ae. We respond within 2 business days.