Privacy Policy

Payment Data Protection

Credit/debit card details and personally identifiable information will not be stored, sold, shared, rented, or leased to any third parties. The merchant will not pass any debit/credit card details to third parties under any circumstances. Payments are processed securely via our PCI-compliant payment provider.

1. Who We Are

Vectaga is operated by Nikhat Vcloud Solutions ("we", "our", "us") in the United Arab Emirates. We are committed to protecting your personal data and processing it responsibly in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and relevant executive decisions.

2. Scope

This Policy explains how we collect, use, disclose, transfer, and safeguard personal data when you visit our website, use our products and services, contact us, or interact with our content and marketing. Additional notices may apply to specific products, features, or campaigns.

3. What Data We Collect

We may collect the following categories of personal data:

• Identification & contact: name, email, phone, company, role.
• Account data: login identifier, preferences, support history.
• Transactional: plan selection, invoices, payment references (processed via PCI-compliant providers; we do not store full card details).
• Technical/usage: device and browser data, IP address, pages visited, time on page, referrer, interactions, crash logs.
• Communications: messages you send via forms or email, feedback, survey responses.
• Recruitment (if applicable): CVs, experience, certifications.

4. How We Use Personal Data

We use personal data to:

• Provide and operate our services, websites, and support.
• Set up and manage accounts, authenticate users, prevent fraud and abuse.
• Process orders, billing, VAT invoicing, and service communications.
• Improve performance, security, and user experience; develop new features.
• Send service notifications and (with your consent or where permitted) marketing.
• Comply with legal obligations and enforce our Terms.

Legal bases under PDPL include your consent, performance of a contract, compliance with legal obligations, and our legitimate interests (e.g., service security, quality improvement), balanced against your rights and freedoms.

5. Cookies & Similar Technologies

We use cookies and similar technologies (such as local storage and pixel tags) to operate our website, remember your preferences, analyze traffic, and deliver relevant content. Where required by law, we obtain your consent via a cookie consent banner before placing non-essential cookies.

Essential Cookies

These cookies are strictly necessary for the website to function and cannot be switched off. They are typically set in response to actions you take, such as logging in, filling in forms, or setting privacy preferences. They include session management cookies, security tokens, and consent preference cookies. Without these, core site functionality may be unavailable.

Analytics Cookies

These cookies allow us to measure and improve the performance of our website by collecting anonymous information about how visitors use it — for example, which pages are visited most often, how long visitors stay, and where traffic originates. All data collected is aggregated and does not identify individual users.

Functional Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have integrated. They remember choices you make — such as currency selection or language preferences — so you do not have to re-enter them on each visit.

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please refer to your browser's help documentation for instructions. Note that disabling essential cookies may significantly affect the functionality of this website and prevent access to certain features.

6. Marketing Communications

We may contact you about news, features, and offers. You can opt out at any time using the "Unsubscribe" link in emails or by contacting us. We do not sell your personal data. We may work with advertising or analytics partners under appropriate safeguards.

7. Sharing Personal Data

We may share data with:

• Service providers (e.g., hosting, analytics, payments, support) bound by confidentiality and data processing obligations.
• Affiliates/partners to help deliver services you request.
• Authorities where required by applicable law or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or reorganisation, under appropriate safeguards.

8. International Transfers

If we transfer personal data outside the UAE, we implement safeguards consistent with PDPL (e.g., adequacy decisions, contractual clauses, or other lawful mechanisms) to ensure an adequate level of protection.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this Policy, to comply with legal obligations (including tax/VAT requirements), resolve disputes, and enforce agreements. Retention periods vary by data category and purpose.

10. Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.

• Encryption in Transit: All data transmitted between your browser and our website is encrypted using SSL/TLS (HTTPS), ensuring that information cannot be intercepted during transmission.
• Payment Security: Card payment details are transmitted directly and securely to our payment processor, Telr, using their PCI DSS-compliant infrastructure. Vectaga does not receive, process, or store your full card details on our servers at any point.
• Access Controls: Access to personal data is restricted on a need-to-know basis. We employ role-based access controls and require authentication for all administrative functions.
• Secure Infrastructure: Our systems are hosted on secure, professionally managed infrastructure with regular patching and monitoring to guard against known vulnerabilities.
• Security Reviews: We conduct periodic reviews of our security practices, policies, and infrastructure to identify and address potential risks in a timely manner.

Despite these safeguards, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant authorities and affected individuals as required by applicable law.

11. Your Rights (PDPL)

Subject to legal limitations, you may have the right to:

• Access your personal data and request a copy.
• Request correction or erasure of inaccurate or unnecessary data.
• Object to or restrict certain processing, including direct marketing.
• Withdraw consent, where processing is based on consent.
• Request data portability where applicable.
• Complain to the UAE data protection authorities if you believe your rights are infringed.

To exercise rights, contact us using the details below. We may need to verify your identity and the scope of your request.

12. Children's Privacy

Our services are not directed to children, and we do not knowingly collect personal data from children without appropriate consent where required by law. If you believe a child provided personal data to us, contact us to request deletion.

13. Third-Party Links

Our website may contain links to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing personal data.

14. Changes to this Policy

We may update this Policy periodically. Material changes will be posted on this page with an updated "Last Updated" date. Your continued use of the services after changes take effect constitutes acceptance.

Contact

For privacy queries, email contact@vectaga.com.

Last Updated: 20 September 2025