Legal
Privacy Policy
Effective date: April 18, 2026
This policy explains what personal data Oryn collects, why we collect it, how we use it, and the rights you have over it. We comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and align with internationally recognised data-protection standards.
1. Who We Are
Oryn ("we", "our", "us") is an AI services company incorporated in the United Arab Emirates. Our registered address is [Registered Address], Dubai, United Arab Emirates.
We operate the website at oryn.ai (the "Site") and any related services, tools, or pages that link to this policy.
For data-protection enquiries contact us at privacy@oryn.ai.
2. Data We Collect
2.1 Information you give us
- Name, email address, company name, and message — when you submit our contact form.
- Name, email address, and calendar availability — when you book a discovery call via our scheduling tool.
- Any other information you choose to include in your communications with us.
2.2 Information collected automatically
- IP address, browser type and version, operating system, and referral URL.
- Pages visited, time spent on each page, and navigation paths.
- Device identifiers and general geographic region (country/city level).
2.3 Cookies and similar technologies
We use strictly necessary cookies to operate the Site and, where you consent, analytics cookies to understand how the Site is used. We do not use advertising or behavioural tracking cookies. You can manage cookies through your browser settings at any time.
2.4 What we do not collect
We do not intentionally collect sensitive personal data (such as health, financial, biometric, or government ID information) through this Site. Please do not submit such data via our contact forms.
3. How We Use Your Data
We use your personal data to:
- Respond to enquiries and schedule discovery calls.
- Assess your project requirements and prepare proposals.
- Deliver agreed services and manage our client relationship.
- Send you relevant updates about our services where you have consented or where we have a legitimate interest.
- Operate, maintain, and improve the Site.
- Comply with our legal and regulatory obligations under UAE law.
- Detect and prevent fraud, abuse, or security incidents.
We process data on the following legal bases: your consent (e.g., marketing communications); performance of a contract or pre-contractual steps; our legitimate interests (e.g., Site analytics, security); and legal obligation under applicable UAE law.
4. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We share it only in the following circumstances:
Service processors
We use third-party tools that process data on our behalf, including our contact-form provider (Formspree), appointment-scheduling platform (Calendly), and website analytics. Each processor is bound by a data-processing agreement and must handle your data in accordance with applicable law.
Legal requirements
We may disclose your data if required by UAE courts, regulators, or law-enforcement authorities, or to protect our rights and the safety of others.
Business transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.
Some processors are located outside the UAE. Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with UAE PDPL requirements.
5. Data Retention
We retain personal data only as long as necessary:
- Enquiry data — up to 2 years from last contact, unless converted to a client engagement.
- Client engagement data — up to 5 years after project completion, in line with UAE commercial record-keeping requirements.
- Analytics data — aggregated and anonymised after 26 months.
- Legal and compliance records — as required by applicable UAE law.
When data is no longer needed, it is securely deleted or anonymised.
6. Your Rights
Under the UAE PDPL and aligned international standards, you have the right to:
Access
Request a copy of the personal data we hold about you.
Correction
Ask us to correct inaccurate or incomplete data.
Erasure
Request deletion of your data where no legal basis exists to retain it.
Restriction
Ask us to pause processing while a dispute is resolved.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, email privacy@oryn.ai with "Data Rights Request" in the subject line. We will respond within 30 days. You also have the right to lodge a complaint with the UAE Data Office (dataoffice.ae) if you believe your rights have been violated.
7. Security
We implement technical and organisational measures proportionate to the risk — including TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We will notify affected individuals and relevant authorities of any qualifying data breach in accordance with UAE PDPL requirements.
8. AI and Automated Processing
We build AI systems for clients but do not use fully automated decision-making that produces legal or similarly significant effects on individuals visiting this Site. Where we use AI-assisted tools internally to process enquiry data (e.g., routing or summarisation), a human reviews all outputs before action is taken.
9. Children's Privacy
Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.
10. External Links
Our Site may contain links to third-party websites (e.g., Calendly, LinkedIn). We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.
11. Governing Law
This policy is governed by the laws of the United Arab Emirates. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the competent courts of Dubai, UAE.
12. Updates to This Policy
We may update this policy from time to time. When we do, we will revise the "Effective date" at the top. Material changes will be communicated via a notice on the Site or by email where we hold your contact details. Continued use of the Site after any change constitutes acceptance of the revised policy.
Questions or Requests?
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact our privacy team:
Email: privacy@oryn.ai
Address: [Registered Address], Dubai, United Arab Emirates
This document does not constitute legal advice. Oryn recommends you seek independent legal counsel for advice specific to your situation.