Operations active across 3 jurisdictions
RUH--:--
DXB--:--
BOM--:--
ENعربي
Privacy programme · PDPL · DPDP · GDPR · UAE PDP aligned
RUH --:--DXB --:--BOM --:--
Home/Privacy Notice

Legal · VTX-PRIV-2026-01 · Rev 1.0

Privacy Notice

How Veltrixair collects, uses, shares, and protects personal data across KSA, UAE, and India in line with PDPL, DPDP Act 2023, GDPR, and UAE Federal Decree-Law 45/2021.

01 · About this Notice

This notice explains how Veltrixair handles your personal data. It covers visits to our website, interactions with our teams, event attendance, job applications, and use of our services.

02 · Who We Are

Veltrixair operates through entities in KSA, UAE, and India. The relevant controller depends on your engagement jurisdiction.

03 · Scope & Application

This notice covers our activities as a data controller. When we process data on behalf of a client, the client's DPA terms apply to those processor activities.

04 · Personal Data We Collect

We typically collect identification data, professional data, communication records, and technical usage data. Where relevant, we also collect recruitment information.

05 · How We Collect It

We collect data directly from you and through business interactions. We may also receive it from authorised third parties or collect it via website telemetry, where consent or a legal basis applies.

06 · Why We Process It

We process data to deliver services, maintain security, meet legal obligations, run operations, communicate with stakeholders, and improve service quality.

07 · Legal Bases

  • Consent where required by PDPL.
  • Contractual necessity for requested services.
  • Legal obligations and regulatory reporting.
  • Legitimate interest with documented balancing.

08 · Sharing & Disclosure

Data may be shared with vetted processors, professional advisers, and authorities where legally required, contractually necessary, or consented.

09 · International Transfers

We safeguard international transfers using mechanisms appropriate to each jurisdiction. These include contractual clauses and equivalent legal protections.

10 · Retention

We keep data only for as long as needed to meet business, contractual, legal, and regulatory requirements. After that, it is securely deleted or anonymised.

11 · Security

We apply layered technical and organisational controls including access management, monitoring, encryption, and incident response governance.

12 · Your Rights

Depending on jurisdiction, rights may include access, correction, deletion, objection, restriction, portability, and consent withdrawal.

13 · Exercising Rights

Submit requests via privacy@veltrixair.com. We verify identity and respond within statutory timelines.

14 · Cookies

Cookie usage is described in our Cookie Policy. Optional categories rely on consent where required by law.

15 · Children's Data

Our services are not directed to children. If child data is identified, we take prompt remedial action under applicable law.

16 · Marketing

Marketing communications are preference-managed and can be unsubscribed at any time.

17 · Automated Decisions

We do not use automated decision-making with legal or similarly significant effects without lawful basis and required safeguards.

18 · Job Applicants

Applicant data supports recruitment, onboarding, compliance checks, and talent pipeline governance in line with lawful retention windows.

19 · Third-Party Links

Our website may link to third-party properties; their privacy practices are governed by their own notices.

20 · Changes to this Notice

We update this notice as required and publish the latest revision date and reference in this document.

21 · Contact & DPO

Contact the DPO via privacy@veltrixair.com or dpo@veltrixair.com for requests, questions, or complaints.

22 · Regulatory Authorities

If unresolved, you may escalate concerns to relevant authorities such as SDAIA, applicable UAE authority, India Data Protection Board, or EU/EEA supervisory bodies.