This Data Privacy Notice explains how Au2mAiT uses your personal data and provides information on your individual rights. It applies to personal data that you provide to Au2mAiT or data that is processed as part of our business relationship with you or when you visit our website www.au2mait.com.

For individuals pursuing a career with Au2mAiT, please refer to our separate Job Candidate Privacy Notice (available during the application process).

How we use information gathered by cookies or other web-tracking or analytics technologies is explained in our Cookie Notice.

Au2mAiT does not collect data from children directly and our website is not aimed at children. Anyone under the age of 13 may only use the website when supervised by an adult. By accessing this website, you confirm that you are at least 13 years old. If you believe a child under 13 has shared personal data with us, please contact us at: privacy@au2mait.com.

WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
Au2mAiT Limited (UK) or the relevant Au2mAiT entity in the UAE will typically be the data controller responsible for any personal data you provide to us, depending on the country in which you engage with us or where the processing takes place.

You can engage with us via social media websites or through integrated features on our website. We may obtain your data from these sources, depending on your platform privacy settings.

WHICH CATEGORIES OF PERSONAL DATA DO WE COLLECT?
Au2mAiT (or where relevant a designated third party) may collect and process the following categories of personal data:

- Business contact details including name, work address, phone numbers, email address, device IDs and IP address;
- Website user tracking information, including Cookies (see our Cookie Notice);
- Payment and subscription data for processing SaaS subscriptions, purchases and fraud prevention;
- Business-related information, including details of our contractual relationship or information voluntarily provided by you (e.g., purchases of SaaS products, service usage, survey responses);
- Images, video, audio recordings, chat logs and attendance data from online events, training, meetings or when visiting our offices;
- Analytics on interests, preferences and online activity, including downloads, registrations and SaaS product usage;
- Data from publicly available resources where relevant and lawful;
- Sensitive personal data (e.g., health or disability details to accommodate events), collected only with your explicit consent or where required under local legal obligations.

WHY DO WE USE YOUR PERSONAL DATA?
We will process your personal data for the following purposes (“Permitted Purposes”):

- To manage our contractual and business relationship with you (including planning, administration, transactions, payments, accounting, billing and support services for our SaaS products);
- To deliver, maintain and improve our SaaS products and services provided via the Au2mAiT website, Azure Marketplace or Google Cloud Marketplace;
- To record and manage online events, training, presentations and meetings (including video, audio or transcription) for participant access and internal purposes;
- To protect the security of Au2mAiT’s products, services, websites and systems by preventing and detecting security threats, fraud or other malicious activities;
- To comply with legal and regulatory obligations (including record keeping, identity verification, compliance screening and tax purposes);
- To inform you about our products, services or updates relevant to an existing business relationship;
- To solve disputes, enforce contracts and establish, exercise or defend legal claims.

With your consent, we may also process your personal data to:

- Send you marketing communications about Au2mAiT’s SaaS products, technologies, events and updates;
- Conduct customer surveys, marketing campaigns or promotional activities;
- Perform analytics and profiling to personalise our communications and improve user experience (e.g., website analytics and newsletter tracking).

We will only send you direct marketing if you have opted in, and you can opt out at any time. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

We do not use your personal data for automated decision-making (including profiling) that produces legal or similarly significant effects beyond what is described above.

LAWFUL BASIS FOR PROCESSING
Under applicable data protection laws (including the UK GDPR, UAE Federal Decree-Law No. 45 of 2021, and other relevant GCC regulations), we rely on one or more of the following lawful bases:

- The processing is necessary for the performance of a contract with you;
- The processing is necessary to comply with a legal obligation;
- The processing is necessary for the purposes of our legitimate interests (or those of a third party), such as operating and improving our SaaS products, maintaining business relationships, and ensuring security;
- Where required, you have provided your explicit consent for specific processing.

HOW DO WE COLLECT AND USE PERSONAL DATA?
We typically collect your personal data directly from you when you interact with us (e.g., when you visit our website, subscribe to our SaaS products, register for events, communicate with us, or participate in surveys). We may also receive data from third-party marketplaces (Azure, Google Cloud) when you purchase through those platforms, or from service providers as necessary.

WHERE DO WE PROCESS PERSONAL DATA?
Au2mAiT has offices in the United Kingdom and the United Arab Emirates and mainly operates in the UK and GCC region. As part of our business activities, your personal data may be transferred and processed in the UK, UAE and other GCC countries, as well as in other locations where our service providers operate.

We take appropriate safeguards to ensure that your personal data receives an adequate level of protection when transferred outside your home jurisdiction, such as through data transfer agreements incorporating standard contractual clauses or other mechanisms recognised under applicable laws.

HOW DO WE PROTECT YOUR PERSONAL DATA?
We implement appropriate physical, technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These include access controls, encryption, secure servers and regular security reviews.

WHO DO WE SHARE YOUR PERSONAL DATA WITH?
We may share your personal data in the following circumstances:

- With our group companies or affiliates in the UK, UAE and other relevant jurisdictions where necessary for the Permitted Purposes;
- With trusted service providers (data processors) who assist us in operating the website, delivering SaaS products, processing payments, analytics, hosting and support — under strict contractual safeguards;
- With Azure Marketplace and Google Cloud Marketplace operators when you purchase or subscribe via those platforms;
- With courts, regulators, law enforcement or other authorities where required by law or to protect our rights;
- In the context of a business sale, merger or acquisition.

We do not sell your personal data to third parties.

HOW LONG DO WE STORE PERSONAL DATA?
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, manage our business relationship, comply with legal obligations, resolve disputes and enforce our agreements. Retention periods vary depending on the type of data and applicable legal requirements.

YOUR DATA PROTECTION RIGHTS
Depending on your jurisdiction and applicable laws, you may have the following rights regarding your personal data:

- Right to be informed about how we process your data;
- Right of access to the personal data we hold about you;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure (“right to be forgotten”), subject to legal limitations;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing (including for direct marketing or where based on legitimate interests);
- Right to withdraw consent at any time (where processing is based on consent);
- Right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at privacy@au2mait.com. We will respond without undue delay and in accordance with applicable law.

COMPLAINTS PROCEDURE
If you have any concerns about how we have handled your personal data, please contact us first at info@au2mait.com so we can investigate and respond.

You also have the right to complain to the relevant supervisory authority:

- In the United Kingdom: Information Commissioner’s Office (ICO)
- In the UAE: Relevant authority under Federal Decree-Law No. 45 of 2021 (UAE Data Office) or the applicable emirate-level regulator depending on your location.

CHANGES TO THIS PRIVACY NOTICE
Last updated: July 2026

We may update this Data Privacy Notice from time to time to reflect changes in our practices or legal requirements. We encourage you to review this notice periodically. Significant changes will be notified via the website or other appropriate channels.