Privacy Policy
Last Updated: September 1st, 2025
At EXCELLYA, headquartered in Sharjah, United Arab Emirates, we place the highest priority on safeguarding personal information. Our Privacy Policy reflects our commitment to global data protection standards, including the UAE Federal Data Protection Law (PDPL), regional GCC frameworks, the General Data Protection Regulation (GDPR), and leading international privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).
This policy explains how we collect, use, and protect your information, and what rights you have regarding your personal data. It is designed to give you clarity and confidence in how EXCELLYA operates as a trusted partner.
- Our Privacy Principles
We follow four guiding principles across all data practices:
- Lawfulness and Fairness – Data is processed transparently and only for legitimate business purposes.
- Purpose Limitation – Information is collected strictly for defined, communicated objectives.
- Data Minimization – We collect only the data necessary to deliver services and meet obligations.
- Accountability – We implement strong governance to ensure compliance and protect individual rights.
- What We Collect
Depending on your interaction with us, we may collect:
- Identity & Contact Data (e.g., name, title, company, professional role, phone, email).
- Business & Transactional Data (e.g., client engagements, service records, billing details).
- Technical Data (e.g., IP address, cookies, device identifiers).
- Communications Data (e.g., inquiries, feedback, participation in events or surveys).
We do not collect sensitive data unless explicitly required for legal or contractual purposes, and only with proper consent.
- How We Use Data
Your information is used for:
- Delivering, personalizing, and improving services.
- Responding to inquiries and maintaining client relationships.
- Fulfilling contractual and regulatory obligations.
- Conducting analytics, reporting, and operational improvements.
- Providing insights, publications, and updates (with your consent).
- Ensuring system security and fraud prevention.
We do not sell or trade personal data.
- Data Sharing and International Transfers
We may share personal data with:
- Trusted service providers supporting IT, analytics, or professional services.
- Regulators and authorities where required by law.
- Strategic partners in joint projects, always under strict confidentiality.
Where data is transferred outside the UAE, GCC, EU, or your country of residence, we apply legally recognized safeguards such as Standard Contractual Clauses, Binding Corporate Rules, or equivalent measures to ensure protection.
- Data Retention
We retain personal data only for as long as necessary to fulfill its purpose or comply with laws. After this period, data is securely deleted, anonymized, or archived in line with international best practices.
- Your Rights
In line with PDPL, GDPR, CCPA/CPRA, and other applicable laws, you may:
- Access the personal data we hold.
- Request correction or deletion.
- Restrict or object to processing.
- Request portability of your data.
- Opt out of marketing or non-essential communications.
To exercise these rights, please contact us at the details below.
- Safeguards and Security
We employ a layered security framework, including:
- Encryption of data in transit and at rest.
- Access restrictions and authentication controls.
- Continuous monitoring and risk assessments.
- Incident response aligned with global data protection standards.
- Cookies & Tracking
Our website may use cookies or tracking technologies for functionality, analytics, and improved user experience. You may adjust your browser settings to limit or disable cookies, though this may impact functionality.
- Children’s Data
Our services are designed for professionals and organizations. We do not knowingly collect personal data from children under 16 years of age, or the age defined by applicable law.
- Contact Us
If you have questions about this policy or wish to exercise your rights, please send an email to hello@excellya.com
- Updates
We may update this Privacy Policy periodically. Updates will be posted on our website, and the “Last Updated” date will reflect the most recent version.