Do Not Sell or Share My Data
Last Updated: September 1st, 2025
At EXCELLYA, headquartered in Sharjah, United Arab Emirates, we are committed to safeguarding personal data and ensuring compliance with applicable data protection laws across all jurisdictions in which we operate. This includes, but is not limited to, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), relevant GCC privacy frameworks, the General Data Protection Regulation (EU) 2016/679 (GDPR), the California Consumer Privacy Act (CCPA) as amended by the CPRA, and other internationally recognized data protection standards.
This “Do Not Sell or Share My Data” Policy explains our practices regarding the sale, sharing, and permitted use of personal data.
- No Sale of Personal Data
- We do not sell personal data to third parties under any circumstances, whether for monetary gain or any other form of valuable consideration.
- This applies to all individuals regardless of residency, including residents of the UAE, GCC, European Union, California (USA), and other international jurisdictions.
- No Sharing for Cross-Context Behavioral Advertising
- We do not share personal data with third parties for cross-context behavioral advertising, interest-based marketing, or profiling beyond what is strictly necessary to provide and improve our services.
- Where third-party service providers (e.g., cloud, analytics, or IT support) have limited access to personal data, such access is strictly governed by confidentiality, data processing, and security agreements in full compliance with applicable laws.
- Lawful Use of Personal Data
Personal data may only be processed by EXCELLYA for lawful and limited purposes, including:
- Delivering and enhancing our services
- Performing contractual obligations
- Meeting compliance and legal obligations under UAE, GCC, EU, and international law
- Preventing fraud, cybersecurity threats, and unauthorized access
- With your explicit consent, providing updates, communications, or insights relevant to our services
We ensure that any processing is based on a valid legal ground, such as consent, contractual necessity, legitimate interest, or legal obligation.
- Data Subject Rights
In line with UAE PDPL, GCC frameworks, GDPR, CCPA/CPRA, and international standards, you may exercise the following rights:
- Access: Request confirmation of whether we process your personal data and obtain a copy.
- Correction/Rectification: Request correction of inaccurate or incomplete data.
- Deletion/Erasure: Request erasure of your data where permitted by law.
- Restriction of Processing: Limit how we process your data under certain conditions.
- Data Portability: Receive your personal data in a structured, machine-readable format and request transfer to another controller (where applicable).
- Opt-Out: Object to processing for direct marketing, profiling, or non-essential purposes.
- Non-Discrimination: Exercise these rights without being denied services or facing discrimination.
- Cross-Border Data Transfers
Where personal data is transferred outside the UAE, GCC, EU, or your jurisdiction, we ensure compliance with applicable cross-border transfer requirements. Transfers are only made to jurisdictions with adequate data protection laws, or with appropriate contractual safeguards (Standard Contractual Clauses, Binding Corporate Rules, or equivalent) in place.
- Data Security & Governance
We implement technical, organizational, and administrative safeguards to protect personal data from unauthorized access, loss, misuse, disclosure, or alteration. These include:
- Encryption of data in transit and at rest
- Access controls and authentication measures
- Regular risk assessments and compliance audits
- Incident response protocols aligned with UAE, EU, and global standards
- Exercising Your Rights
To exercise your rights or raise any concerns regarding your personal data, please send an email to hello@excellya.com
We will respond to your request within the timeframes required by applicable laws (e.g., 30 days under GDPR, 45 days under CCPA/CPRA, and as specified by UAE PDPL).
- Updates to this Policy
We may update this Policy from time to time to reflect legal, regulatory, or operational changes. The “Last Updated” date at the top of this page indicates when this Policy was most recently revised.