1. Introduction & Data Controller Identity
This Privacy Policy governs the processing of personal data by BYS Technologies F.Z.E (“BYS Technologies”, “we”, “us”, or “our”), a commercial and technology enterprise duly established and licensed under the laws and regulations of the Ajman Free Zone (AFZ), Emirate of Ajman, United Arab Emirates, with registered corporate offices at BYS Technologies, Ajman Free Zone, Sheikh Rashid Bin Saeed Al Maktoum Street, Ajman, United Arab Emirates.
BYS Technologies acts as the Data Controller responsible for personal data collected through our official website (bystechnologies.com), our Software-as-a-Service (SaaS) tools, standalone licensed software verification systems, and commercial engineering operations.
We are committed to operating in full conformity with applicable data privacy legislation, primarily the United Arab Emirates Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data (“UAE PDPL”), the commercial regulations of the Ajman Free Zone Authority, and international data protection principles (including the European Union General Data Protection Regulation “GDPR” where applicable to cross-border engagements).
2. Categories of Personal Data We Collect
We collect personal data only to the extent strictly necessary to deliver high-performance software subscriptions, custom engineering consultations, electronic equipment orders, and responsive customer support. The categories of personal data collected encompass:
2.1 Information You Voluntarily Provide
When you submit a contact inquiry, request a solution quotation, configure software specifications, subscribe to a cloud service, or communicate with our engineering teams, you may provide your full legal name, professional title, corporate organization name, corporate email address, direct telephone and WhatsApp contact numbers, physical corporate address, billing details, and written requirements or technical project specifications.
2.2 Commercial, Transaction & Subscription Data
For commercial engagements, we collect records of your purchased software licenses, SaaS subscription tiers, billing intervals (monthly or annual), Statement of Work (SOW) milestone approvals, electronic tax invoice records, corporate Tax Registration Numbers (TRN), and payment settlement confirmation metadata. PCI-DSS Notice: All digital debit and credit card transactions are processed directly by certified, PCI-DSS Level 1 compliant financial payment gateways; BYS Technologies never captures, handles, or stores raw credit or debit card security codes (CVV) on our servers.
2.3 Technical & Usage Data Collected Automatically
When you navigate our website, our web servers and edge delivery network automatically record standard diagnostic technical identifiers. This includes your Internet Protocol (IP) address, browser brand and engine version, operating system, device screen resolution, referring Uniform Resource Locator (URL), access timestamps, and essential cookie storage states (governed by our Cookie Policy).
2.4 SaaS Platform & Software Verification Telemetry
To guarantee cloud platform security, prevent unauthorized seat duplication, and fulfill service level agreements (SLAs), our hosted SaaS software generates operational security logs, authentication session tokens, encrypted API rate-limiting metrics, and system crash diagnostics. For on-premise standalone software products, our systems process periodic cryptographic license verification checks strictly to validate active seat entitlements without accessing your underlying corporate databases.
3. How & Why We Use Your Personal Data (Purposes & Legal Basis)
Under Article 4 and Article 5 of the UAE PDPL, BYS Technologies processes personal data only where there is an explicit, legitimate statutory ground. The matrix below outlines our operational purposes and their corresponding legal bases:
| Operational Purpose | Statutory Legal Basis (UAE PDPL) |
|---|---|
| Responding to B2B technology consultations, AI architectures, hardware RFQs, and commercial inquiries. | Pre-Contractual Measures / Legitimate Interest — Necessary to evaluate requirements and provide requested proposals prior to contract execution. |
| Provisioning Cloud SaaS accounts, issuing cryptographic license keys, managing user seats, and fulfilling electronic hardware orders. | Performance of a Contract — Essential to fulfill our commercial commitments under the agreed software terms or purchase order. |
| Generating digital UAE tax invoices, collecting payments, accounting reconciliation, and statutory commercial record-keeping. | Legal & Tax Obligation — Required to comply with UAE Federal Tax Authority (FTA) VAT laws and corporate audit mandates. |
| Protecting web infrastructure, mitigating DDoS attacks, verifying software license integrity, and maintaining enterprise cybersecurity. | Legitimate Interest & Security Compliance — Vital to protect our network perimeter, proprietary IP, and customer tenant isolation. |
| Transmitting operational service notifications, security advisories, billing reminders, and (where opted-in) technology insights. | Contractual Performance (for operational updates) or Explicit Consent (for optional marketing communications). |
4. Cookie Collection & Tracking Technologies
BYS Technologies utilizes browser HTTP cookies, cryptographic session storage, and client local storage keys (principally bys_cookie_consent) to maintain website security, remember your customized interface preferences, and analyze aggregated platform traffic.
We do not deploy invasive third-party cross-site behavioral tracking networks. For an itemized technical audit of every cookie deployed, its retention period, and to manage or withdraw your preferences at any time, please review our dedicated Cookie Policy & Consent Management Center.
5. Data Sharing, Sub-Processors & Third-Party Disclosures
Strict No-Sale Guarantee
BYS Technologies maintains an absolute corporate commitment: We do not sell, rent, monetize, or trade personal data to third-party data brokers, marketing agencies, or advertising aggregators under any circumstances.
We share personal data strictly on a need-to-know basis with vetted third-party operational entities under binding data protection agreements:
- Infrastructure & Security Providers: Trusted enterprise cloud hosting providers, Content Delivery Networks (e.g., Cloudflare for DDoS protection and edge caching), and transactional email infrastructure operating under strict confidentiality.
- Financial Gateways & Merchant Banking: Central Bank of the UAE licensed financial institutions and PCI-DSS Level 1 certified digital payment gateways solely to execute approved commercial transactions.
- Logistics & Courier Partners: Commercial freight forwarders and courier services (e.g., DHL Express, Aramex) strictly to fulfill physical deliveries of electronic equipment, PCB prototypes, and enterprise hardware.
- Statutory & Law Enforcement Authorities: Competent judicial authorities, regulators, or government agencies of the United Arab Emirates where disclosure is strictly required by statutory decree, court summons, or national regulatory compliance.
6. International Data Transfers & Cross-Border Safeguards
BYS Technologies is headquartered in the United Arab Emirates. However, because we operate global software distribution networks, edge CDN caching nodes, and international electronics procurement channels, certain technical data may be transferred to and processed by vetted sub-processors located outside the UAE.
Pursuant to Articles 22 and 23 of the UAE PDPL, all international transfers of personal data are conducted under strict legal safeguards, including Standard Contractual Clauses (SCCs), robust technical encryption (TLS 1.3 in transit and AES-256 at rest), and verification that the recipient jurisdiction provides an adequate level of data protection. Enterprise clients requiring 100% in-country data residency may opt for dedicated UAE-region cloud deployments or on-premise air-gapped installations as detailed in our Terms & Conditions.
7. Data Security & Technical Safeguards
In alignment with Article 20 of the UAE PDPL, BYS Technologies enforces multi-layered technical, physical, and administrative safeguards designed to protect personal data against accidental loss, unauthorized access, destruction, alteration, or disclosure:
- Cryptographic Protection: Enforcement of Transport Layer Security (TLS 1.3) with modern cipher suites for all data in transit across our public web properties and APIs; AES-256 encryption for data at rest across cloud databases and backup volumes.
- Access Governance & Identity: Strict Role-Based Access Control (RBAC), mandatory Multi-Factor Authentication (MFA) for administrative infrastructure access, and least-privilege credential separation.
- Network Defense: Web Application Firewall (WAF) filtering, automated rate limiting, continuous intrusion detection, and isolated multi-tenant software container architectures.
- Audits & Resilience: Routine automated vulnerability scanning, independent penetration testing reviews, automated encrypted snapshot backups, and comprehensive disaster recovery plans.
8. Data Retention Periods
We retain personal data only for the duration necessary to satisfy the commercial purposes for which it was originally collected, or to comply with statutory legal, accounting, and regulatory obligations:
- Inquiry & Prospective Client Records: Contact submissions, RFQ records, and technical scoping correspondence are retained for the duration of the commercial evaluation and up to three (3) years from the date of last recorded contact.
- Commercial Contracts, Tax & Billing Data: Executed Statements of Work, software license registries, tax invoices, and accounting records are retained for at least five (5) to seven (7) years following contract termination, in accordance with UAE Federal Tax Authority regulations and commercial company record-keeping statutes.
- Technical Server Logs & Telemetry: Network access logs, security monitoring logs, and operational telemetry are retained on a rolling cycle between 90 days and 24 months, after which they are automatically anonymized or cryptographically purged.
9. Your Statutory Data Protection Rights
Pursuant to Chapter 3 (Articles 13 through 18) of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), data subjects hold enforceable statutory rights regarding their personal data:
Right to Access & Information
Obtain confirmation of whether we process your personal data, the categories of data held, and receive a copy in a clear format.
Right to Rectification
Request immediate correction or updating of any inaccurate, incomplete, or outdated personal data maintained in our systems.
Right to Erasure (“Right to Be Forgotten”)
Request permanent deletion of your personal data where it is no longer required for its original purpose or where consent has been revoked.
Right to Restriction & Objection
Request the suspension or restriction of data processing if accuracy is contested or where processing is deemed unlawful.
Right to Data Portability
Receive your personal data in an organized, machine-readable format (e.g., JSON or CSV) or request its direct transfer to another controller.
Right to Withdraw Consent
Withdraw previously granted consent at any time without compromising the legality of processing conducted prior to the withdrawal.
Procedure & Timelines: To exercise any of the statutory rights above, please transmit a written request to our team at info@bystechnologies.com. We verify applicant identity and respond comprehensively within thirty (30) calendar days, without assessing administrative fees for standard requests.
10. Children’s Privacy Protection
Our website, commercial software suites, cloud SaaS applications, and electronic engineering services are intended exclusively for commercial business enterprises, technology professionals, and adults aged eighteen (18) years or older. We do not intentionally collect, solicit, or maintain personal data relating to minors under the age of 18. If we become aware that personal data relating to a minor has been collected inadvertently, we will immediately execute secure deletion procedures.
11. Modifications to This Privacy Policy
BYS Technologies reserves the right to amend, update, or revise this Privacy Policy periodically to reflect enhancements in our cloud technologies, changes in applicable United Arab Emirates data protection regulations, or shifts in international best practice.
Any material modification will be published directly on this page with an updated “Last Updated” effective date. For significant changes impacting active subscribers or ongoing enterprise engineering engagements, we will provide advance notification through direct email correspondence or prominent portal announcements. Continued engagement with our digital services following published updates signifies acceptance of the revised terms.
12. Contact Information
For questions, requests regarding your statutory privacy rights, data transfer inquiries, or to submit a formal inquiry, please contact BYS Technologies:
Privacy & Data Protection Contact
Entity: BYS Technologies F.Z.E. (BYS Technologies)
Jurisdiction: Ajman Free Zone (AFZ), Emirate of Ajman, United Arab Emirates
Registered Office: BYS Technologies, Ajman Free Zone, Sheikh Rashid Bin Saeed Al Maktoum Street, Ajman, United Arab Emirates
Email: info@bystechnologies.com
Formal grievance resolution target: acknowledgment within 24 hours; comprehensive statutory response within 30 calendar days.