Privacy Policy

1. Introduction & UAE Compliance

ApexFlow Digital ("ApexFlow", "we", "our", or "us") provides enterprise SEO engineering, web development, and AI workflow automation services in Dubai and throughout the United Arab Emirates. We are committed to safeguarding personal data in adherence with UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL), and international standards.

2. Information We Collect

We only collect data necessary to provide professional services, analyze site usage, and respond to commercial inquiries:

• Direct Communications: Contact information (name, business email, WhatsApp phone number, company website) submitted via our audit request forms, ROI calculator, or direct messaging channels.
• Technical & Telemetry Data: Anonymized metrics such as browser type, device resolution, referring URLs, and approximate geographic region collected via standard web telemetry (e.g. Google Analytics 4) to monitor performance.
• Client Project Context: Credentials, API tokens, and business systems access provided under signed Non-Disclosure Agreements (NDAs) solely for delivering SEO and workflow automation engagements.

3. How We Use Collected Data

We process personal and business information exclusively for legitimate commercial purposes:

• Generating free digital audit reports and ROI calculations requested by users.
• Direct communication via email, phone, or verified WhatsApp business channels regarding project scopes.
• Continuous optimization of website accessibility, Core Web Vitals, and user experience.
• Compliance with applicable UAE statutory and financial regulations.

Zero Selling Guarantee: We do not sell, rent, or trade personal data or client confidential business information to third-party data brokers or marketing aggregators under any circumstances.

4. Data Security & Storage

We employ modern encryption protocols (TLS 1.3 in transit, AES-256 at rest) across all digital assets, databases, and serverless hosting infrastructures. Any third-party cloud infrastructure utilized (including Vercel, Supabase, Google Cloud) complies with ISO 27001 and SOC 2 certifications.

5. Your Rights Under UAE PDPL

Under the UAE Personal Data Protection Law, you retain full rights regarding your personal records, including the right to request access, correction, restriction of processing, or permanent erasure of your data from our systems. To exercise these rights, submit a written notice to our privacy contact below.

6. Contact Details