Legal

    Privacy Policy

    How we collect, use, and protect personal data.

    Last updated: 9 February 2026

    Nexus S³ – FZCO

    Nexus S³ – FZCO ("Nexus S³", "we", "us", "our") is a company incorporated in the United Arab Emirates and registered in the Dubai Silicon Oasis Free Zone (IFZA).

    Registered Office:
    IFZA Business Park, Dubai Silicon Oasis, United Arab Emirates

    Contact: privacy@nexuss3.com

    Scope

    This policy explains how we collect, use, disclose, and protect personal data when you visit www.nexuss3.com, contact us, or engage us for professional consultancy services. Nexus S³ provides business-to-business professional services only.

    Personal Data We Collect

    We may process:

    • Identity and professional data (name, job title, organisation)
    • Contact data (email address, phone number)
    • Enquiry and correspondence data
    • Technical data (IP address, browser/device data)

    We do not intentionally collect sensitive personal data.

    Legal Basis

    We process personal data in accordance with:

    • UAE Federal Decree-Law No. 45 of 2021 (PDPL)
    • Internationally recognised data protection principles (including GDPR where applicable)

    Legal bases include legitimate interests, contractual necessity, legal obligation, and consent where required.

    Use of Data & Minimisation

    Personal data is used only to:

    • Respond to enquiries
    • Deliver and manage professional services
    • Maintain client relationships
    • Meet legal and regulatory obligations

    Nexus S³ collects only the minimum data necessary and does not repurpose data without lawful basis or written agreement. We do not sell personal data.

    Client Data Confidentiality

    Any data processed in the course of providing services ("Client Data") is handled strictly in accordance with contractual obligations, applicable law, and client instructions. Client Data is never used for marketing or analytics.

    Sub-processors & Sharing

    We may use trusted service providers (IT hosting, security, analytics, professional advisers). All are bound by appropriate confidentiality and data protection obligations. Categories of sub-processors may be provided upon reasonable request.

    International Transfers

    Where data is processed outside the UAE, appropriate safeguards consistent with UAE PDPL and international standards are applied.

    Retention

    Data is retained only as long as necessary for business, legal, or regulatory purposes.

    Security & Incident Management

    Appropriate technical and organisational security measures are in place. Any personal data breach affecting Client Data will be notified without undue delay, in line with legal and contractual obligations.

    Audit & Compliance

    Nexus S³ will reasonably cooperate with client compliance requests, subject to confidentiality and security requirements.

    Your Rights

    Subject to applicable law, individuals may request access, correction, deletion, restriction, or withdrawal of consent by contacting privacy@nexuss3.com.

    This Privacy Policy supports Nexus S³'s engagement with regulated, public-sector, and enterprise clients.