Privacy Policy

Privacy Policy for Kleidos

Kleidos ("we", "us", or "our") is a service based in Dubai, United Arab Emirates, committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website www.kleidos.io and provide personal details to receive further information. As a global service, we serve clients worldwide and adhere to international data protection standards, including the UAE’s Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and, where applicable, the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR).

1. Information We Collect

We collect personal information that you voluntarily provide when you fill out forms on our website to request more information. This may include:

• Personal details: Name, email address, phone number, country of residence, and any other information you choose to provide in the form.

• Technical data: IP address, browser type, device information, and usage data collected automatically through cookies or similar technologies (see Section 5).

2. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your request for more information about kleidos services.

• To communicate with you, including sending updates or promotional materials (where you have consented to receive them).

• To improve our website and services by analysing usage data.

• To comply with legal obligations in the UAE and other jurisdictions, such as maintaining records or responding to regulatory authorities.

Our legal basis for processing your personal information includes:

• Consent: Where you provide your details voluntarily to receive information.

• Legitimate interests: For improving our website and services, provided this does not override your rights.

• Legal obligation: Where required to comply with applicable laws, including UAE data protection regulations.

• Contractual necessity: Where processing is necessary to fulfil a contract or take steps at your request before entering a contract.

3. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information with:

• Service providers: Trusted third parties, which may be located globally, who assist us in operating our website or delivering services (e.g., email delivery or analytics providers). These providers are contractually obligated to protect your data and comply with applicable data protection laws.

• Business partners: Where necessary to provide you with requested services, subject to your consent or contractual requirements.

• Legal authorities: If required by law or to protect our rights, safety, or property, in accordance with UAE or other applicable regulations.

4. International Data Transfers

As a service based in Dubai with global clients, your personal information may be processed or stored in the UAE or other countries where our service providers operate. We ensure that any international data transfers comply with applicable data protection laws, using safeguards such as:

• Standard Contractual Clauses or equivalent mechanisms for transfers to countries without adequate data protection frameworks.

• Contracts with service providers that enforce strict data protection obligations.

For visitors from the UK or EU, we ensure compliance with UK GDPR and EU GDPR requirements for cross-border data transfers.

5. Data Storage and Security

Your personal information is stored securely on servers located in the UAE or other jurisdictions with robust data protection standards. We implement technical and organisational measures to protect your data, including encryption, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.

• Rectification: Correct inaccurate or incomplete data.

• Erasure: Request deletion of your data in certain circumstances.

• Restriction: Limit how we use your data in specific cases.

• Portability: Receive your data in a structured, machine-readable format.

• Object: Object to processing based on legitimate interests or for direct marketing.

• Withdraw consent: Withdraw consent at any time where processing is based on consent.

For UAE residents, these rights are provided under Federal Decree-Law No. 45 of 2021. For UK and EU residents, these rights are provided under the UK GDPR and EU GDPR, respectively. Residents of other jurisdictions may have similar rights under local laws.

To exercise these rights, please contact us at [insert contact email]. We will respond within one month, though this may be extended for complex requests.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, including responding to your request or complying with legal obligations. For example:

• Personal details provided for information requests are kept for 12 months unless you request deletion.

• Technical data is retained for 6 months for analytics purposes.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing personal information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be posted on our website with the "Last updated" date. Please check this page periodically.