How we handle your information.

This notice is a draft pending legal review.

This notice explains what personal information we collect through orumlabs.ai, why we collect it, who handles it for us and how long we keep it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the UAE Personal Data Protection Law (PDPL), and it applies wherever you are when you use the site.

Who we are

Orum Labs is the AI lab of NEXA. The data controller for this site is NEXA, with its head office at Floor 2, Building 4, Union Business Park, Dubai Investment Park 1, Dubai, United Arab Emirates. NEXA operates from offices in London, Birmingham, New York, Dubai, Riyadh and Melbourne.

You can reach us about anything in this notice at hello@orumlabs.ai or, for data protection matters across NEXA, at support@digitalnexa.com.

What we collect

When you send a message through the contact form we collect your name, your work email address, your company or organisation, the route you are interested in if you choose one, and the message you write. We also record the time the message was sent and the internet address it came from, which helps us tell real enquiries from automated ones.

When anyone visits the site, our hosting provider records standard technical logs: the address of the page requested, the time, the visitor's internet address and the browser or crawler identification string. The Ask Orum AI page runs entirely in your browser and does not send what you type to us.

Why we use it and on what basis

• Replying to your enquiry. We use your contact details and message to answer you and to follow up on what you asked about. We rely on your consent, which you give by ticking the box on the form, and on our legitimate interest in responding to people who contact us.
• Keeping the site running and secure. We use technical logs to keep the site available, to understand how it is used, and to detect abuse. We rely on our legitimate interest in operating a safe and reliable website.

We do not sell personal information, and we do not use it for automated decisions that affect you.

Who processes it for us

A small number of service providers handle information on our behalf under contracts that restrict what they can do with it:

• Vercel hosts the site, runs the contact form endpoint and provides privacy-friendly, cookie-free web analytics.
• Axiom stores the site's request logs so we can monitor availability and crawler activity.
• SendGrid, part of Twilio, delivers contact form messages to our mailbox and sends you the acknowledgement.
• Google Workspace provides the mailboxes that receive and store your messages.

These providers operate in the United States, the European Union and the United Kingdom. Where information leaves the UK or the UAE, we rely on the providers' standard contractual safeguards.

How long we keep it

In line with NEXA's retention policy, we keep enquiry and customer information for six years after the last interaction between you and us, after which it is erased and securely disposed of. Technical request logs are kept for 30 days.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to withdraw consent you have given. To exercise any of these rights, email hello@orumlabs.ai. We will respond within one month.

If you are in the United Kingdom you can complain to the Information Commissioner's Office. If you are in the United Arab Emirates you can complain to the UAE Data Office. We would rather hear from you first so we can put things right.

Cookies and analytics

This site sets no cookies. Visitor analytics come from Vercel Web Analytics, which counts page views without cookies or cross-site tracking and does not identify individual visitors.

Changes to this notice

We will update this page when our practices change and show the date of the latest version at the top. Significant changes will be explained here before they take effect.

Contact

Questions about this notice, or about how your information is handled, can be sent to hello@orumlabs.ai, or by post to NEXA, Floor 2, Building 4, Union Business Park, Dubai Investment Park 1, Dubai, UAE.