Skip to main content

Legal

Privacy Policy

DRAFT — for legal review before publication. Last updated: [DATE OF PUBLICATION]

This policy explains how Virtech Software Trading LLC ("Virtech", "we", "us") handles personal data collected through the EVaultOne website at evaultone.com and evaultone.ae (the "Website"). It covers the Website only. Personal data we process on behalf of customers within the EVaultOne managed service is governed by the service agreement and data processing agreement with each customer.

1. Who we are

Virtech Software Trading LLC, Office 605, Rania Business Center, Al Barsha 1, PO Box 36677, Dubai, United Arab Emirates. Contact for privacy matters: privacy@evaultone.com · +971 4 580 7555.

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable laws.

2. What we collect

Assessment and contact requests. When you submit the assessment form we collect: your full name, work email, organisation, country, approximate number of mailboxes, current Enterprise Vault version (optional) and any message you write. We also record technical context about the request: the page you sent it from, the site language, the referring website, and any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign). To protect the form from abuse, your IP address is used temporarily for rate limiting and is not stored with your request.

Website analytics. We use cookie-free, privacy-focused analytics (Cloudflare Web Analytics) that count page views and measure performance in aggregate. It does not use cookies, does not build profiles and does not identify individual visitors.

Server and security logs. Our hosting provider processes standard technical data (such as IP address, browser type and time of request) to deliver the Website securely and protect it from attacks.

We do not use advertising cookies or tracking cookies, and we do not sell personal data.

3. Why we use it and our legal basis

  • To respond to your request, prepare an assessment and discuss our services with you — at your request and in our legitimate interest in answering business enquiries; where required, based on the consent you give on the form.
  • To understand which pages and campaigns are useful, in aggregate — our legitimate interest in improving the Website.
  • To keep the Website secure and available — our legitimate interest and legal obligations.

4. Who we share it with

We use trusted service providers who process data on our behalf, under contract, and only for the purposes above:

  • Cloudflare — website hosting, security and cookie-free analytics.
  • Resend — delivery of form submissions by email to our sales team.
  • Microsoft 365 — our business email, where your request is received and handled.

Some of these providers process data outside the UAE (for example in the United States or the European Union). Where this happens, we rely on the transfer mechanisms permitted under UAE law, including contractual safeguards with the provider.

We may also disclose personal data if required by law or a competent authority. We do not share your data with other third parties for their own marketing.

5. How long we keep it

We keep assessment and contact requests for as long as needed to handle your enquiry and any resulting business relationship, and in any case no longer than [3] years after our last contact unless a longer period is required by law. Security logs are kept for a short period by our hosting provider in line with its own policies.

6. Your rights

Subject to applicable law, you can ask us to: access the personal data we hold about you; correct it; delete it; restrict or object to its processing; and withdraw consent at any time (without affecting processing already carried out). To exercise these rights, email privacy@evaultone.com. We will respond within the period required by law. You may also contact the UAE Data Office if you believe your rights have not been respected.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access restricted to authorised staff, and secure handling of credentials.

8. Children

The Website is intended for business users and is not directed at children.

9. Changes to this policy

We may update this policy. The latest version will always be available on this page, with the date it was last updated.