Privacy Policy.

1. Who is responsible for your data

For this website, the controller responsible for deciding how and why personal data is processed is:

LX-FACTOR FZCO
Building A2 IFZA Business Park, Dubai Silicon Oasis
Dubai, UAE
Email: [email protected]

2. Scope of this policy

This policy applies to personal data processed through lx-factor.com, including consultation enquiries and direct communications arising from them. It does not govern third-party websites, platforms, or services linked from this website.

3. Personal data we collect

Information you provide

When you submit the consultation form, we collect your name, business email, company, phone or WhatsApp number, the service area you are interested in, and your project description. You may also choose to provide an estimated budget, desired launch date, existing website, and preferred contact method.

If you contact us by email or another agreed channel, we process the information contained in that communication and any later correspondence.

Technical and security information

Our hosting environment may record limited technical information such as IP address, request date and time, requested URL, response status, browser or device information, and referring page. The consultation form also records the submitting IP address and submission time for security, abuse prevention, and enquiry administration.

Please do not submit sensitive personal data, confidential credentials, production access keys, payment-card information, or information about another person unless it is necessary and you are authorized to provide it.

4. How we use personal data

We process personal data to:

• assess and respond to enquiries;
• understand project requirements and prepare requested proposals or discussions;
• communicate about a potential or existing business relationship;
• operate, secure, troubleshoot, and improve the website;
• prevent spam, fraud, misuse, and unauthorized access;
• maintain appropriate business and legal records; and
• comply with legal obligations and establish, exercise, or defend legal claims.

5. Legal grounds

Depending on the circumstances and applicable law, processing is based on your consent where consent is required, steps you request before entering into a contract, performance of a contract, compliance with legal obligations, or our legitimate interests in responding to business enquiries, securing the website, and managing our operations where those interests are recognized and are not overridden by your rights.

6. Cookies and analytics

The website does not currently use advertising, behavioural tracking, or analytics cookies. A strictly necessary first-party session cookie is created when the consultation form is used so that we can protect the form against cross-site request forgery and apply basic submission rate limiting. See the Cookie Policy for the current inventory and duration.

7. Who may receive personal data

Access is limited to people and service providers who need the information for the purposes described above. These may include authorized LX-FACTOR personnel, website hosting and infrastructure providers, email providers, security and technical-support providers, professional advisers, and public authorities where disclosure is required by law. Providers are expected to process data only for agreed purposes and with appropriate confidentiality and security obligations.

We do not sell personal data and do not share enquiry information with third parties for their independent direct marketing.

8. International data transfers

Some infrastructure or email providers may process information outside the UAE. Where applicable law requires safeguards for an international transfer, we will use an approved legal mechanism or another permitted basis and apply appropriate contractual and security measures. You may contact us for information about safeguards relevant to your data.

9. Retention

• Consultation enquiries: normally retained for up to 24 months after the last substantive contact, unless the enquiry becomes a client relationship or a longer period is needed for legal claims or compliance.
• Client and transaction records: retained for the duration of the relationship and any period required by applicable accounting, corporate, tax, or legal rules.
• Security and server logs: normally retained for up to 90 days, subject to the hosting provider’s security, backup, and incident-retention processes.
• Website session data: temporary and intended to expire when the browser session ends.

We may retain limited information for longer where necessary to establish, exercise, or defend legal claims, respond to a lawful request, resolve a dispute, or enforce an agreement. Data is deleted, anonymized, or isolated from ordinary use when it is no longer required.

10. Your rights

Subject to applicable law and any lawful exceptions, you may ask for information about processing; request access to, correction of, or deletion of your personal data; request restriction or cessation of processing; object to certain processing; request portability where available; or withdraw consent where processing depends on consent. Withdrawal does not affect processing already carried out lawfully.

Send a request to [email protected]. We may need to verify your identity and clarify the request. We will respond within the period required by applicable law. You may also lodge a complaint with the competent data-protection authority where that right applies.

11. Security

We use technical and organizational measures intended to protect personal data against unauthorized access, alteration, disclosure, loss, and destruction. These include HTTPS transport, restricted access, form security controls, input validation, and appropriate service-provider controls. No internet transmission or storage system can be guaranteed completely secure.

12. Automated decisions and children

We do not use website enquiry data for solely automated decisions that produce legal or similarly significant effects. This business-to-business website is not directed to children, and we do not knowingly collect personal data from children through it.

13. Changes to this policy

We may update this policy when the website, our providers, or legal requirements change. The effective date at the top identifies the current version. Material changes will be highlighted where reasonably appropriate.

14. Applicable framework

This policy is intended to reflect the UAE federal personal-data framework, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, and additional privacy rules that may apply because of a visitor’s location or the nature of a particular engagement.