Data Protection & Privacy Summary

Organisation Overview

• Legal Entity: Nexus S³ – FZCO
• Jurisdiction: United Arab Emirates
• Free Zone: Dubai Silicon Oasis (IFZA)
• Registered Office: IFZA Business Park, Dubai, UAE

Nexus S³ is a specialist consultancy delivering programme delivery, AI, and Cloud initiatives in highly regulated environments.

Applicable Data Protection Frameworks

Nexus S³ operates in accordance with:

• UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law – PDPL)
• Internationally recognised privacy and security principles
• GDPR-aligned controls where applicable to international engagements

Nature of Personal Data Processed

Primarily business-related data:

• Names, job titles, organisations
• Business contact details
• Professional correspondence
• Limited technical data (e.g. IP address via analytics)

Nexus S³ does not intentionally process sensitive personal data, consumer data, or children's data.

Purpose Limitation & Data Minimisation

• Personal data is processed only for defined business purposes
• Collection is limited to what is necessary
• Client Data is not reused, monetised, or repurposed

Client Data Confidentiality

• Client Data is handled strictly under contractual obligations
• No Client Data is used for marketing or analytics
• Access is restricted to authorised personnel

Security Controls

Nexus S³ maintains proportionate technical and organisational measures including:

• Access control and least-privilege principles
• Secure infrastructure and providers
• Incident response procedures

Sub-processors

• Trusted third-party providers may be used where required
• All sub-processors are subject to confidentiality and data protection obligations
• Categories of sub-processors available upon request

Incident Management

• Defined incident response approach
• Client notification without undue delay where Client Data is affected
• Cooperation with client regulatory requirements

Audit & Assurance

Nexus S³ cooperates with reasonable audit and assurance requests, subject to confidentiality and security requirements.

Contact

Data protection enquiries: privacy@nexuss3.com