Privacy & Data Policy

This page contains:

Section A — Privacy Policy

Section B — Your Data Rights: Plain Language Reference

This Policy applies to www.snxs.ae and all SNXS agency services. A separate Privacy Policy applies to Creators Pad at app.snxs.ae.

Section A — Privacy Policy

1. Introduction and Legal Framework

SkyNet X Solutions LLC FZ ("SNXS", "we", "us") is committed to protecting your personal data. This Policy is issued under:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations

• UAE Federal Decree-Law No. 34 of 2021 on Cybercrime

• EU General Data Protection Regulation (GDPR), where applicable to processing involving EU-resident personal data

Data Protection Contact: compliance@snxs.ae — Subject: Data Rights Request

2. Data Controller

SNXS acts as Data Controller for personal data collected through www.snxs.ae and its agency operations.

Where SNXS processes attendee, creator, or campaign data on behalf of a client in connection with an event or marketing campaign, SNXS acts as a Data Processor under that client's instruction, subject to a Data Processing Agreement. A standard DPA template is available on request from compliance@snxs.ae.

3. What Data We Collect

Website Visitors

• Technical data: IP address, browser type, device type, pages visited, session duration, and referral source.

• Analytics and cookie data (see Section 9).

• Newsletter subscriptions: email address and opt-in timestamp.

Quote and Booking Requests

• Identity: full name, job title, company name.

• Contact: email address and phone number.

• Service details: event type, requirements, budget range, preferred dates.

Event Attendees

• Registration: name, email, company, job title.

• Venue compliance data: government-issued ID where legally required by a venue or regulatory authority.

• Dietary or accessibility preferences, where voluntarily provided.

• Photography and video footage (see Section 10).

Clients and Suppliers (B2B)

• Identity and contact data for contract and account management.

• Financial data: bank account details, invoice records, payment history, and accounting system transaction references.

• KYB corporate records including trade licences, UBO declarations, and authorised signatory IDs — retained for a minimum of 5 years under UAE AML law (Federal Decree-Law No. 20 of 2018).

Employees and Freelancers

• Identity verification data collected via regulated digital KYC tools for compliance purposes, retained for the duration of engagement plus 5 years.

• Employment and contract records under UAE Federal Decree-Law No. 33 of 2021 (Labour Law).

• Sanctions screening records against UAE, UN, OFAC, and EU lists.

4. Legal Bases for Processing

Contract — to respond to enquiries, deliver agreed services, manage accounts, and process payments.

Legal Obligation — AML/KYB screening, UAE tax record-keeping, labour law compliance, goAML SAR filing obligations, and regulatory authority requests.

Legitimate Interests — website analytics, event photography and portfolio use, fraud prevention, business security, and sanctions monitoring.

Consent — newsletter subscriptions and marketing communications. Consent may be withdrawn at any time (see Section B).

5. How We Use Your Data

• To respond to enquiries, quote requests, and bookings.

• To plan, organise, and execute events and marketing services.

• To manage contracts, invoicing, and financial records.

• To conduct AML/KYB compliance screening as required by UAE law.

• To verify identity of employees and freelancers prior to commencement of engagement.

• To screen all parties against applicable sanctions lists.

• To send newsletters and updates where you have opted in.

• To comply with UAE legal, tax, and regulatory obligations.

• To showcase completed work in our portfolio and marketing materials.

6. Data Sharing

SNXS does not sell personal data. Data is shared only where necessary with:

• Event and operational partners (venues, AV, logistics, caterers) — limited to what is operationally required per engagement.

• Identity verification service providers — for regulated KYC and KYB compliance screening only.

• Cloud technology and productivity service providers — under data processing agreements and appropriate security controls. Personal data may be processed within these platforms solely for the operational purpose described at collection.

• Payment processing providers — for approved online payment transactions only.

• Professional advisors (legal, financial, audit) — under confidentiality obligations.

• UAE regulatory and government authorities (including UAE FIU, FTA, MOHRE, Meydan Free Zone regulatory authority) — where required by UAE law or lawful authority request.

• Law enforcement — where required by court order or lawful demand.

7. International Data Transfers

SNXS's global event and marketing operations may require personal data to be processed or stored outside the UAE. All such transfers are made with appropriate safeguards in accordance with UAE PDPL Articles 22 to 26, including contractual protections with receiving parties. SNXS does not transfer data to FATF Black List jurisdictions or UAE-sanctioned countries.

Where cloud and productivity tools used by SNXS process data on servers outside the UAE, appropriate data processing agreements are in place with those service providers.

8. Data Retention Schedule

• Website analytics and cookie data: 13 months

• Enquiry records where no contract formed: 12 months

• Client contract and project records: 5 years from contract end (UAE Commercial Transactions Law)

• Tax invoices and financial records: 5 years (UAE FTA mandatory)

• AML and KYB compliance records: 5 years from end of business relationship (UAE AML Law mandatory)

• Employee and freelancer KYC records: duration of engagement plus 5 years

• Event attendee registration records: 2 years from event date

• Newsletter subscriptions: until consent withdrawn plus 90 days

• Event photography and video: 3 years from capture date unless consent withdrawn before publication

9. Cookies

SNXS uses the following categories of cookies on www.snxs.ae:

Essential Cookies — required for website functionality and security. These cannot be disabled without materially affecting site performance.

Analytics Cookies — used to understand visitor behaviour and improve our website. You may opt out via your browser settings at any time.

Marketing Cookies — used to measure the effectiveness of our marketing campaigns. These require your explicit consent.

SNXS does not sell cookie data or use cross-site tracking for third-party advertising purposes. Cookie preferences may be managed via your browser settings at any time.

10. Photography and Video at Events

Events organised or co-managed by SNXS may involve photography, videography, and live streaming. By attending an SNXS event without prior written objection, you acknowledge that your image and likeness may be captured and used in SNXS marketing, portfolio, website, and social media.

To opt out, notify legal@snxs.ae in writing before the event. SNXS cannot guarantee removal of footage already published in good faith prior to receiving a written objection.

SNXS's social media channels are business-verified accounts. Media published through these channels may be indexed and shared publicly.

11. Data Security

SNXS applies the following security measures to protect personal data:

• HTTPS encryption across www.snxs.ae

• Role-based access controls on all systems holding personal data

• Two-factor authentication on cloud and data platforms

• Secure cloud-based storage with access logging

• Contractual confidentiality obligations with all service providers

• Regular internal access reviews

In the event of a personal data breach affecting your rights, SNXS will notify affected individuals and, where required, the relevant UAE data protection authority within the statutory timeframe under PDPL.

12. Children

SNXS services and www.snxs.ae are not directed at individuals under 18 years of age. SNXS does not knowingly collect personal data from minors. If we become aware that we have done so, we will delete it promptly.

13. Changes to This Policy

We may update this Policy at any time. For material changes, we will provide 30 days' prior notice via our website. Continued use of SNXS services after the effective date of a revised Policy constitutes acceptance.

This Policy is published in English. In the event of any conflict between an English and Arabic version, the English version shall prevail unless the parties have expressly agreed otherwise in a signed written agreement.

Section B — Your Data Rights: Plain Language Reference

To exercise any right below, email compliance@snxs.ae with subject: "Data Rights Request". We will verify your identity and respond within 30 calendar days.

Access — "What do you hold about me?"

You can ask us to send you a complete copy of all personal data we hold about you. We will respond within 30 calendar days and verify your identity before releasing any data.

Correction — "Fix something that's wrong."

If any data we hold about you is inaccurate or out of date, ask us and we will correct it promptly.

Erasure — "Delete my data."

You can ask us to delete your personal data and we will do so, unless we are legally required to keep it.

Important: AML/KYB compliance records, tax invoices, and financial records must be retained for 5 years under UAE law regardless of a deletion request. We will always tell you if a legal obligation prevents deletion.

Restriction — "Pause using my data."

You can ask us to pause processing your personal data while a dispute, review, or investigation is active.

Objection — "Stop marketing to me."

You can object to us using your data for marketing at any time. Marketing unsubscribes are actioned within 10 business days. You may also object to processing based on our legitimate interests. We will review and respond in writing.

Data Portability — "Send me my data in a file."

For data you provided to us based on consent or contract, you can request a copy in a structured, machine-readable format (e.g., CSV).

Withdraw Consent — "I no longer agree."

You can withdraw any consent you have given us at any time. This does not affect anything we did lawfully based on that consent before you withdrew it.

How to Submit a Data Rights Request

Email: compliance@snxs.ae

Subject: Data Rights Request

Include: your full name, contact details, and a clear description of what you are requesting.

We will acknowledge your request within 3 business days and respond in full within 30 calendar days. Identity verification is required before any data is released or deleted.

Contact

General: contact@snxs.ae

Legal: legal@snxs.ae

Compliance and Data Rights: compliance@snxs.ae

SkyNet X Solutions LLC FZ · Meydan Free Zone · Dubai, UAE · Licence No. 2531132.01 · www.snxs.ae

All policies incorporated by reference into every SNXS contract.