Operations active across 3 jurisdictions
RUH--:--
DXB--:--
BOM--:--
ENعربي
Privacy programme · PDPL · DPDP · GDPR · UAE PDP aligned
RUH --:--DXB --:--BOM --:--
Home/Privacy Notice
Legal · VTX-PRIV-2026-01 · Rev 1.0

Privacy Notice

How Veltrixair collects, uses, shares, and protects personal data across KSA, UAE, and India in line with PDPL, DPDP Act 2023, GDPR, and UAE Federal Decree-Law 45/2021.

01 · About this Notice

This notice explains how Veltrixair processes personal data when you visit our website, engage with our teams, attend events, apply for roles, or use our services.

02 · Who We Are

Veltrixair operates through entities in KSA, UAE, and India. The relevant controller depends on your engagement jurisdiction.

03 · Scope & Application

This notice covers controller-side activities. When processing strictly on behalf of a client, client DPA terms prevail for processor operations.

04 · Personal Data We Collect

Typical categories include identification data, professional data, communication records, technical usage data, and recruitment information where relevant.

05 · How We Collect It

Data is collected directly from you, through business interactions, from authorised third parties, and from website telemetry where consent or legal basis applies.

06 · Why We Process It

We process data to deliver services, maintain security, meet legal obligations, run operations, communicate with stakeholders, and improve service quality.

07 · Legal Bases

  • Consent where required by PDPL.
  • Contractual necessity for requested services.
  • Legal obligations and regulatory reporting.
  • Legitimate interest with documented balancing.

08 · Sharing & Disclosure

Data may be shared with vetted processors, professional advisers, and authorities where legally required, contractually necessary, or consented.

09 · International Transfers

Transfers are safeguarded using jurisdiction-appropriate mechanisms including contractual clauses and equivalent legal safeguards.

10 · Retention

Data is retained only for as long as needed for business, contractual, legal, and regulatory requirements, then securely deleted or anonymised.

11 · Security

We apply layered technical and organisational controls including access management, monitoring, encryption, and incident response governance.

12 · Your Rights

Depending on jurisdiction, rights may include access, correction, deletion, objection, restriction, portability, and consent withdrawal.

13 · Exercising Rights

Submit requests via privacy@veltrixair.com. We verify identity and respond within statutory timelines.

14 · Cookies

Cookie usage is described in our Cookie Policy. Optional categories rely on consent where required by law.

15 · Children's Data

Our services are not directed to children. If child data is identified, we take prompt remedial action under applicable law.

16 · Marketing

Marketing communications are preference-managed and can be unsubscribed at any time.

17 · Automated Decisions

We do not use automated decision-making with legal or similarly significant effects without lawful basis and required safeguards.

18 · Job Applicants

Applicant data supports recruitment, onboarding, compliance checks, and talent pipeline governance in line with lawful retention windows.

19 · Third-Party Links

Our website may link to third-party properties; their privacy practices are governed by their own notices.

20 · Changes to this Notice

We update this notice as required and publish the latest revision date and reference in this document.

21 · Contact & DPO

Contact the DPO via privacy@veltrixair.com or dpo@veltrixair.com for requests, questions, or complaints.

22 · Regulatory Authorities

If unresolved, you may escalate concerns to relevant authorities such as SDAIA, applicable UAE authority, India Data Protection Board, or EU/EEA supervisory bodies.