Privacy Policy

At Viacon Marketing & Technologies FZCO ("the Company," "we," "our," or "us"), safeguarding the privacy and personal data of our users is a core priority. This Privacy Policy ("Policy") outlines how we collect, use, disclose, store, and protect personal data obtained through our website https://viacondigital.ae/ and related online services (collectively, the "Services"). We are committed to handling personal data responsibly and in compliance with the applicable data protection laws of the United Arab Emirates and other relevant jurisdictions. This Policy is designed to provide users ("Users," "you," or "your") with transparent information about our data practices, including your rights and choices regarding your personal data. By accessing or using our Services, you acknowledge and consent to the practices described in this Policy.

This Privacy Policy ("Policy") governs the Company's practices regarding the collection, use, disclosure, and protection of personal data obtained from Users.

The Company is committed to protecting the privacy of its Users and handling personal data in accordance with applicable data protection laws and regulations, including but not limited to the laws of the United Arab Emirates.

The purpose of this Policy is to inform Users about the Company's practices relating to the collection, use, and disclosure of personal data, as well as the rights and choices available to Users regarding their personal data.

By using the Services, Users consent to the collection, use, and disclosure of their personal data as described in this Policy. Users are encouraged to read this Policy carefully to understand the Company's practices and their rights.

Definitions

For the purposes of this Privacy Policy, the following definitions shall apply:

Company means Viacon Marketing & Technologies FZCO, a company incorporated under the laws of the United Arab Emirates.

Personal Data means any information relating to an identified or identifiable natural person.

Processing means any operation or set of operations performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Visitor/User/s or You means any individual who accesses or uses the Company’s Website or Services.

Website means the website operated by the Company at https://viacondigital.ae/ and any related mobile applications or online services.

Cookies and Tracking Technologies refer to small data files and other technologies that are used to collect and store information about a User’s preferences, browsing behavior, and device information.

Third-Party Vendors or Service Providers means third-party companies or individuals employed by the Company to facilitate the Services, to provide the Services on behalf of the Company, or to assist the Company in analyzing how the Services are used.

Consent means any freely given, specific, informed, and unambiguous indication of the User’s wishes by which they signify agreement to the Processing of their Personal Data.

Data of Minors

The Company’s Services are intended for use by individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from individuals under the age of 18. If we become aware that personal data of a minor has been collected without verifiable parental consent, we will take appropriate steps to delete such data promptly from our records.
If you believe that we may have inadvertently collected personal data from a minor, please contact us immediately at +971 54 5151204.

Information We Collect

The Company collects various types of personal data from Users when they interact with the Services, including:

Personal data provided directly by Users, such as name, email address, phone number, and company details.

Business-related information, such as company name and industry.

The Company may also collect certain personal data automatically when Users visit or use the Services, including:
Technical data, such as IP address, device information, and browsing behavior.
Usage data, such as pages visited, links clicked, and time spent on the Services.
The Company may use cookies and similar tracking technologies to collect and store certain information when Users visit or interact with the Services.

The Company may also collect personal data from third-party sources, such as:

Google Analytics, which collects data related to Users’ interactions with the Services for analytical purposes.

Zoho CRM, which collects data from web forms, Clarity, and Pixel for lead generation and marketing purposes.

The Company does not collect any sensitive personal data, such as biometric data or health information, from Users.

Users may have the option to opt out of certain data collection practices, such as the use of cookies or tracking technologies, by adjusting their browser settings.

The Company collects and processes personal data based on one or more of the following legal bases:

Consent from Users.

Legitimate interests of the Company, such as providing and improving the Services, and conducting marketing and analytics activities.

Contractual necessity, where the processing of personal data is necessary for the performance of a contract with Users.

The Company may transfer personal data outside the United Arab Emirates to third-party service providers or affiliates for the purposes outlined in this Policy. In such cases, the Company will ensure that appropriate safeguards are in place to protect the personal data, such as relying on consent, contractual clauses, or legal exceptions for cross-border data transfers.

Use of Information

The Company collects and processes personal data from Users for the following purposes:

To provide, maintain, and improve the Services;

To communicate with Users regarding the Services, including responding to inquiries and providing customer support;
To conduct marketing and promotional activities, including sending newsletters, updates, and other promotional materials;
To analyze and understand User behavior, preferences, and trends to improve the Services and develop new products and services;
To comply with legal obligations and regulatory requirements;
For other legitimate business purposes, such as data analysis, audits, fraud monitoring and prevention, and developing new products and services.
The Company processes personal data based on one or more of the following lawful bases:
Consent from the User, where required by applicable laws;
Performance of a contract with the User or to take steps at the User’s request before entering into a contract;
The legitimate interests of the Company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the User;
Compliance with legal obligations to which the Company is subject.

If the Company collects and processes sensitive personal data, such as health information or biometric data, it will do so only with the User’s explicit consent or as permitted by applicable laws.

The Company may engage in automated decision-making or profiling activities that significantly affect Users. In such cases, the Company will provide Users with information about the logic involved, as well as the significance and consequences of such processing.

The Company collects and processes personal data only to the extent necessary for the specified purposes and in accordance with the principles of data minimization.

If the Company relies on User consent for certain data processing activities, Users may provide or withdraw their consent at any time by contacting the Company using the information provided in this Policy.

The Company may share personal data with third-party service providers or partners for the purposes outlined in this Policy. The categories of recipients may include hosting providers, analytics providers, marketing and advertising partners, and other service providers necessary for the operation and improvement of the Services.

If the Company transfers personal data outside the UAE, it will do so in accordance with applicable laws and regulations, and will implement appropriate safeguards, such as standard contractual clauses or other approved mechanisms, to ensure the protection of personal data.

Tracking Technologies

The Company uses various tracking technologies, such as cookies and web beacons, to collect and process personal data from Users when they interact with the Services. These technologies are used to enhance the User experience, analyze website traffic, personalize content and advertisements, and improve the Services.

Cookies are small data files that are stored on a User’s device when they visit the Services. Web beacons are small graphic images embedded in web pages or emails that allow the Company to track certain information about the User’s interaction with the Services.

The types of information collected through these tracking technologies may include IP addresses, browsing behavior, device information, unique identifiers, and other data related to the User’s interaction with the Services.

The Company may use tracking technologies directly or through third-party service providers, such as analytics providers and advertising networks, to collect and process personal data.

Users have the ability to control or opt-out of certain tracking technologies. Instructions on how to manage cookie preferences or opt-out of tracking technologies will be provided on the Services or through the User’s browser settings.

The use of tracking technologies is based on the Company’s legitimate interests in analyzing website traffic, personalizing content and advertisements, and improving the Services. In certain cases, the Company may also rely on User consent for the use of tracking technologies.

If the use of tracking technologies involves the transfer of personal data outside the UAE, the Company will ensure that such transfers are carried out in accordance with applicable data protection laws and regulations, relying on appropriate legal mechanisms such as consent, contracts, or legal exceptions.

Tracking Technologies

The Company uses cookies, web beacons, and similar tracking technologies (collectively, “Tracking Technologies”) to collect and analyze information about Users’ interactions with the Services. Tracking Technologies are small data files or code snippets that are stored on Users’ devices or browsers when they visit or use the Services.

The Company uses Tracking Technologies for various purposes, including:

Analyzing website traffic and User behavior to improve the Services and enhance User experience;
Personalizing content and advertisements based on Users’ interests and preferences;
Remembering Users’ preferences and settings;
Tracking the effectiveness of marketing campaigns and advertising efforts.
The types of data collected through Tracking Technologies may include, but are not limited to:
IP addresses;
Browser and device information;
Browsing behavior and interactions with the Services;
Referring and exit pages;
Geographic location data.

The Company may also use third-party Tracking Technologies, such as Google Analytics, to collect and analyze data about Users’ interactions with the Services. These third-party service providers have their own privacy policies, which Users are encouraged to review.

Users have the ability to control or opt-out of certain Tracking Technologies. Most web browsers automatically accept cookies, but Users can modify their browser settings to decline cookies or receive a warning before accepting cookies. However, disabling or rejecting cookies may affect the functionality and User experience of the Services.

The Company’s use of Tracking Technologies is based on its legitimate interests in understanding how Users interact with the Services and improving the Services accordingly. In some cases, the Company may also rely on Users’ consent for the use of certain Tracking Technologies.

If any data collected through Tracking Technologies is transferred outside the United Arab Emirates, the Company will ensure that such transfers are carried out in accordance with applicable data protection laws and regulations, relying on appropriate legal mechanisms, such as consent, contractual necessity, or legal exceptions.

Automated Decision-Making
and Profiling

The Company does not engage in any form of automated decision-making or profiling that produces legal effects concerning Users or similarly significantly affects Users based solely on automated processing of their personal data.

If the Company introduces any automated decision-making or profiling practices in the future, it will:

Provide Users with clear and understandable information about the logic involved, the significance, and the potential consequences of such processing for Users.
Ensure that appropriate safeguards are in place to protect Users’ rights, freedoms, and legitimate interests, including the right to obtain human intervention, express their point of view, and contest the decision.
Obtain explicit consent from Users or establish another lawful basis for such processing in accordance with the UAE Data Protection Law and trelated laws, if applicable.
Conduct a data protection impact assessment, if required, to assess the risks associated with the automated decision-making or profiling and implement appropriate measures to mitigate those risks.
Provide Users with a clear and accessible mechanism to opt-out or object to such processing, and ensure that any automated decision-making or profiling practices are transparent, fair, and non-discriminatory.

Data Sharing

The Company may share personal data with third-party vendors and service providers to facilitate the provision of the Services, perform functions on behalf of the Company, process transactions, deliver marketing communications, and for other legitimate business purposes. These third parties are contractually obligated to maintain the confidentiality and security of personal data and are prohibited from using the data for any other purpose.

Personal data may be transferred to third parties or service providers located outside the United Arab Emirates. Such cross-border transfers will be conducted in accordance with applicable data protection laws and regulations, and will be subject to appropriate safeguards, such as standard contractual clauses, binding corporate rules, or other legal mechanisms to ensure the protection of personal data.

The Company may disclose personal data if required by law, regulation, court order, or legal process, or to protect the rights, property, or safety of the Company, its Users, or others.

In the event of a merger, acquisition, sale of assets, or other corporate transaction involving the Company, personal data may be transferred to a third party as part of the transaction.

The Company may share anonymized or aggregated data with third parties for various purposes, such as analytics, research, or marketing, provided that the data cannot be reasonably used to identify individuals.

Users may have the opportunity to consent or opt-out of certain data sharing practices, where applicable. Instructions on how to exercise these choices or withdraw consent will be provided to Users.

Data Sharing

The Company may share personal data with third-party service providers who perform services on our behalf, such as hosting providers, data analysis providers, customer relationship management providers, and other technology service providers. These third-party service providers are contractually obligated to maintain the confidentiality and security of personal data and are restricted from using the personal data for any purpose other than providing the services for which they were engaged.

The Company may also share personal data with its affiliates and subsidiaries for internal business purposes, such as providing and improving the Services. Any such affiliates and subsidiaries are required to comply with the terms of this Privacy Policy.

The Company may disclose personal data to comply with applicable laws, regulations, legal processes, or governmental requests, including but not limited to requests from law enforcement authorities, government agencies, or other third parties as required by law.

In certain circumstances, the Company may transfer personal data to countries outside the United Arab Emirates. In such cases, the Company will ensure that appropriate safeguards are in place to protect the personal data and that the transfer complies with applicable data protection laws and regulations, such as obtaining User consent, implementing contractual protections, or relying on legal exceptions.

The Company may provide Users with the opportunity to consent or opt-out of certain data sharing practices. Users may exercise their choices or withdraw their consent for data sharing by following the instructions provided in the Services or by contacting the Company using the information provided in this Privacy Policy.

This Privacy Policy does not cover the practices of third-party websites or services linked to or integrated with the Company’s Services. Users are encouraged to review the privacy policies of such third-party services before providing any personal data.

User Rights

Users have the right to access their personal data held by the Company. Upon request, the Company shall provide a copy of the personal data, along with information about the purposes of processing, categories of data processed, recipients of the data, and the retention period.

Users have the right to request the rectification of inaccurate or incomplete personal data. The Company shall rectify the personal data without undue delay.

Users have the right to request the erasure of their personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when the User withdraws consent. The Company shall erase the personal data without undue delay, unless there are legitimate grounds for retaining the data.

Users have the right to request the restriction of processing of their personal data in certain circumstances, such as when the accuracy of the data is contested or when the processing is unlawful. The Company shall restrict the processing of the personal data as requested.

Users have the right to receive their personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right applies only to personal data provided by the User and processed based on consent or contract.

Users have the right to object to the processing of their personal data for certain purposes, such as direct marketing or profiling. The Company shall stop processing the personal data for those purposes unless it can demonstrate compelling legitimate grounds for the processing.

Users have the right to withdraw their consent for the processing of their personal data at any time. The Company shall provide a clear and easy way for Users to withdraw their consent.

Users have the right to lodge a complaint with the UAE Data Protection Authority if they believe their rights have been violated. The Company shall provide contact information for the UAE Data Protection Authority.

Users have the right to opt out of certain data processing activities, such as the use of cookies or tracking technologies. The Company shall provide clear and easy-to-use opt-out mechanisms.

User Rights

Subject to the provisions of the UAE Data Protection Law and its Executive Regulations, Users have the following rights regarding their personal data processed by the Company:

Right to access: Users have the right to request access to their personal data held by the Company, including information about the purposes of processing, categories of data processed, and recipients of the data.

Right to rectification: Users have the right to request the rectification of inaccurate or incomplete personal data held by the Company. The Company shall rectify the personal data without undue delay.

Right to erasure (right to be forgotten): Users have the right to request the erasure of their personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when the User withdraws consent. The Company shall erase the personal data without undue delay, unless there are legitimate grounds for retaining the data.

Right to restrict processing: Users have the right to request the restriction of processing of their personal data in certain circumstances, such as when the accuracy of the data is contested or when the processing is unlawful. The Company shall restrict the processing of the personal data as requested.

Right to data portability: Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. This right applies only to personal data provided by the User and processed based on consent or contract.

Right to object to processing: Users have the right to object to the processing of their personal data for direct marketing purposes or on grounds relating to their particular situation. The Company shall cease the processing of the personal data for the objected purposes, unless there are compelling legitimate grounds for the processing.

Right to withdraw consent: Users have the right to withdraw their consent for the processing of their personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Users can exercise their rights by submitting a request to the Company’s designated privacy contact, as specified in this Policy.

The Company shall respond to the User’s request within the timeframes specified by the UAE Data Protection Law and its Executive Regulations.

User Rights

Users have the right to request the rectification of inaccurate or incomplete personal data. The Company shall rectify the personal data without undue delay.

Users have the right to withdraw their consent for the processing of their personal data at any time. The Company shall provide a clear and easy way for Users to withdraw their consent.

The Company shall provide clear instructions on how Users can exercise their rights, such as by submitting a request through a designated email address or online form. The Company may require Users to verify their identity before processing their requests.

Data Retention

The Company retains personal data collected through the Services for as long as necessary to fulfill the purposes for which the data was collected, unless a longer retention period is required or permitted by law.

The specific retention period for different categories of personal data may vary depending on factors such as legal obligations, business requirements, and user preferences.

The Company regularly reviews the need to retain personal data and deletes or anonymizes data that is no longer necessary for the specified purposes.

In certain circumstances, the Company may retain personal data for longer periods, such as:

When required by applicable laws, regulations, or legal obligations;

When necessary for ongoing investigations, legal disputes, or audits;

When the user has provided explicit consent for a longer retention period.

Users have the right to request the deletion of their personal data, subject to any legal or contractual obligations. Such requests can be made by contacting the Company’s privacy officer at +971 54 5151204.

The Company implements appropriate technical and organizational measures to protect personal data during the retention period, in accordance with industry best practices and applicable data protection laws.

The Company’s data retention practices comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and any other applicable laws or regulations.

Data Security

The Company implements appropriate technical and organizational measures to protect the personal data collected from Users against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to, the use of industry-standard security protocols and technologies, such as HTTPS and Web Application Firewalls (WAFs).

Access to personal data is restricted to authorized personnel on a need-to-know basis. The Company employs access controls, such as role-based access and multi-factor authentication, to ensure that only authorized individuals can access and process personal data.

The Company encrypts personal data both in transit and at rest using industry-standard encryption protocols and algorithms.

The Company conducts regular security audits and penetration testing to identify and address potential vulnerabilities in its systems and processes.

The Company has established procedures for responding to security incidents and data breaches, including notification to relevant authorities and affected individuals, as required by applicable laws and regulations.

The Company regularly reviews and updates its security measures to ensure the ongoing protection of personal data and to address evolving security threats and best practices.

Policy Updates

The Company reserves the right to modify or update this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised Privacy Policy on the Company’s website or through the Services.

Users are encouraged to review this Privacy Policy periodically for any updates or changes. Continued use of the Services after the effective date of any changes constitutes acceptance of the revised Privacy Policy.

If the Company makes material changes to this Privacy Policy, the Company will provide reasonable notice to Users, such as by posting a prominent notice on the Company’s website or through the Services, or by sending an email notification.

Users are responsible for ensuring that they are aware of the current version of this Privacy Policy and any changes made to it.

If Users have any questions or concerns regarding this Privacy Policy or any updates or changes made to it, they should contact the Company at +971 54 5151204.

Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the United Arab Emirates.

Any disputes or claims arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the United Arab Emirates.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

The Company reserves the right to modify or update this Privacy Policy at any time, and Users will be notified of any material changes.

Last Updated 14^th July 2025.