Privacy Policy.

Data Controller

The Nexum Group FZE LLC is the data controller responsible for your personal data collected through our website.

Contact details for data protection inquiries:

The Nexum Group FZE LLC (Free Zone Establishment LLC)
Email: privacy@thenexumgroup.com

You may contact us at the email address above with any questions, concerns, or requests relating to your personal data or this Privacy Policy.

Types of Personal Data We Collect

We collect the following categories of personal data when you visit or interact with our website:

• IP Addresses — your Internet Protocol address, which may identify your approximate geographic location and internet service provider;
• Cookies and Similar Technologies — data collected through cookies and other tracking technologies placed on your device (see Section 5 below for full details);
• Device Information — information about the device you use to access our website, including device type, operating system, browser type and version, screen resolution, and language settings; and
• Browsing Behaviour Data — information about how you interact with our website, including pages visited, time spent on pages, click patterns, referral sources, and navigation paths.

We do not intentionally collect special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) through our website.

Purposes of Processing

We process your personal data for the following purposes, each of which is directly related to our advertising, marketing, and e-commerce operations:

• Website Analytics — to understand how visitors use our website, identify trends, and measure the effectiveness of our content and marketing campaigns;
• Advertising and Ad Targeting — to deliver relevant advertisements to you based on your browsing behaviour and interests, and to measure the performance of advertising campaigns;
• Website Performance and Optimisation — to ensure our website functions properly, to diagnose technical issues, to improve loading speeds, and to enhance the overall user experience;
• Order Processing and E-Commerce Fulfilment — to process transactions, manage orders, and facilitate the delivery of products and services purchased through our website;
• Marketing Communications — to provide you with information about our products, services, and promotional offers, where you have consented to receive such communications or where we have a legitimate interest in doing so; and
• Security and Fraud Prevention — to protect our website, systems, and users against unauthorised access, cyberattacks, fraud, and other security threats.

Lawful Basis for Processing

Under the PDPL, we must have a lawful basis for each processing activity. We rely on the following lawful bases:

• Consent — where you have given clear, informed, and unambiguous consent to the processing of your personal data for one or more specific purposes. This applies in particular to the use of non-essential cookies (analytics and marketing cookies) and to the sending of marketing communications. You may withdraw your consent at any time (see Section 6 below);
• Contractual Necessity — where the processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract. This applies to the processing of personal data required to fulfil orders and process transactions through our website; and
• Legitimate Interest — where the processing is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. We rely on legitimate interest for purposes including website security, fraud prevention, and internal analytics used to improve our services. We carry out a balancing assessment before relying on this basis and will make available a summary of that assessment upon request.

Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files placed on your device when you visit a website. They serve various functions, including enabling the website to recognise your device, remembering your preferences, and collecting information about your usage.

Types of Cookies We Use

We use the following categories of cookies on our website:

• Essential Cookies — these cookies are strictly necessary for the operation of our website. They enable core functionality such as page navigation, access to secure areas, and shopping cart functions. You cannot opt out of essential cookies as they are required for the website to function. Lawful basis: contractual necessity and legitimate interest;
• Analytics Cookies — these cookies help us understand how visitors interact with our website by collecting information about pages visited, time spent on the website, and any error messages encountered. The data collected is aggregated and used to improve our website performance. Lawful basis: consent; and
• Marketing Cookies — these cookies are used to track visitors across websites and to display advertisements that are relevant to you. They are placed by us or by third-party advertising partners and are used to build a profile of your interests for targeted advertising purposes. Lawful basis: consent.

Third-Party Tracking Technologies

We may use third-party analytics and advertising services that place their own cookies or similar tracking technologies (such as pixels, web beacons, and local storage) on your device. These third parties process your data in accordance with their own privacy policies. We recommend that you review the privacy policies of any third-party services whose technologies are active on our website.

Managing and Disabling Cookies

You have the right to control and manage cookies at any time. You may do so in the following ways:

• Cookie Consent Banner — when you first visit our website, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies (analytics and marketing). You may update your preferences at any time through the cookie settings link on our website;
• Browser Settings — most web browsers allow you to manage cookies through the browser settings. You can set your browser to refuse all cookies, to accept only certain cookies, or to notify you when a cookie is being placed. Please note that disabling cookies may affect the functionality of our website; and
• Opt-Out Links — where applicable, we provide links to opt-out mechanisms offered by specific third-party analytics or advertising providers.

Your Rights Under the UAE PDPL

Under the PDPL, you have the following rights in relation to your personal data:

• Right of Access — you have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data along with information about how it is processed;
• Right to Rectification — you have the right to request that we correct any inaccurate personal data we hold about you, or that we complete any incomplete personal data;
• Right to Erasure — you have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent, or where the processing is otherwise unlawful;
• Right to Restriction of Processing — you have the right to request that we restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where the processing is unlawful but you do not wish the data to be erased;
• Right to Data Portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance, where technically feasible;
• Right to Object — you have the right to object to the processing of your personal data where we rely on legitimate interest as the lawful basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms;
• Right to Withdraw Consent — where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal; and
• Right to Lodge a Complaint — you have the right to lodge a complaint with the UAE Data Office if you believe that our processing of your personal data violates the PDPL (see Section 12 below).

To exercise any of these rights, please contact us using the details provided in Section 1 above. We will respond to your request within the timeframe prescribed by the PDPL.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The retention periods for each category of data are as follows:

• IP Addresses — retained for a maximum of 12 months from the date of collection, after which the data is anonymised or deleted;
• Cookie Data — the retention period depends on the type of cookie. Essential cookies expire at the end of your browsing session or within 12 months. Analytics and marketing cookies are retained for up to 24 months, unless you delete them sooner via your browser settings or our cookie consent tool;
• Device Information — retained for a maximum of 12 months from the date of collection; and
• Browsing Behaviour Data — retained for a maximum of 24 months in identifiable form, after which the data is aggregated and anonymised for long-term trend analysis.

Where personal data is processed for transactional purposes (e.g., order processing), we retain relevant data for the period required to fulfil the transaction and for any additional period required by applicable tax, commercial, or regulatory obligations under UAE law.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption — we use industry-standard encryption protocols (including TLS/SSL) to protect data transmitted between your device and our servers;
• Access Controls — access to personal data is restricted to authorised personnel who require it for their role, and is subject to strict authentication and authorisation procedures;
• Infrastructure Security — our servers and hosting infrastructure are secured with firewalls, intrusion detection systems, and regular security patching;
• Regular Audits — we conduct periodic security assessments and audits to evaluate the effectiveness of our security measures and to identify potential vulnerabilities; and
• Staff Training — our employees and contractors who handle personal data receive regular training on data protection principles and security best practices.

While we take all reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

Children's Data

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from children under 18 years of age. If we become aware that we have collected personal data from a child under 18 without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe that your child has provided personal data to us, please contact us using the details in Section 1, and we will take appropriate action.

Automated Decision-Making and Profiling

In connection with our advertising and marketing activities, we may use automated processes to analyse your browsing behaviour and interests in order to deliver targeted advertisements that are more relevant to you. This activity constitutes profiling within the meaning of the PDPL.

The profiling we carry out:

• is based on data collected through cookies and tracking technologies (as described in Section 5), including pages visited, content viewed, and interaction patterns;
• is used to categorise your interests and preferences for the purpose of serving relevant advertisements and personalised content;
• does not produce legal effects concerning you or similarly significantly affect you; and
• is carried out on the basis of your consent (for marketing cookies) or our legitimate interest (for aggregated analytics).

You have the right to object to profiling at any time by adjusting your cookie preferences, contacting us using the details in Section 1, or exercising your rights under Section 6 above. If you object, we will cease profiling your data for advertising purposes.

International Data Transfers

Some of the third-party analytics and advertising providers we use (as described in Section 5) operate global infrastructure and may store or process your personal data on servers located outside the United Arab Emirates. In particular, where you consent to analytics cookies, we use Google Analytics, which may transfer and process data on Google's servers outside the UAE.

Where personal data is transferred outside the UAE, we ensure that the transfer is carried out in compliance with the PDPL, including by relying on an adequate level of protection in the recipient jurisdiction or by implementing appropriate safeguards (such as contractual data-protection clauses) as required under the law. Such transfers take place only where you have consented to the relevant cookies, or where another lawful basis under the PDPL applies.

You can prevent these transfers by declining analytics and marketing cookies through our cookie consent tool, or by withdrawing your consent at any time (see Section 5).

Complaints and Contact Information

If you have any questions, concerns, or complaints about how we handle your personal data, we encourage you to contact us first so that we can seek to resolve the matter:

The Nexum Group FZE LLC
Email: privacy@thenexumgroup.com

We will acknowledge your complaint within a reasonable timeframe and work to resolve it promptly.

If you are not satisfied with our response, or if you believe that our processing of your personal data violates the PDPL, you have the right to lodge a complaint with the UAE Data Office. Information on how to submit a complaint to the UAE Data Office can be found on the official website of the UAE Government.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When we make material changes:

• we will publish the updated Privacy Policy on our website with a revised "Effective Date" at the top of the page;
• for significant changes that affect how we process your personal data, we will provide prominent notice on our website (such as a banner notification) prior to the changes taking effect; and
• where required by the PDPL, we will obtain your consent before applying any changes that expand the scope of processing beyond what was originally consented to.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

This Privacy Policy was last updated on 2 June 2026.