Privacy Policy

Depending on how you interact with ALPHX, we may collect the following categories of information.

We may collect information:

• directly from you through forms;
• directly from you through uploads;
• directly from you through communications;
• from your company or a colleague who identifies you as a business contact;
• automatically through essential security and website technologies;
• through analytics or preference technologies after any required consent;
• from publicly available professional or corporate sources where permitted by applicable law.

We use personal data only for defined business, operational, security and legal purposes, which may include:

1. receiving, recording and responding to your enquiry;
2. reviewing Water Analysis and RO system information for structured technical-commercial follow-up;
3. preparing or discussing a quotation, product requirement or commercial opportunity;
4. delivering a requested Company Profile or controlled download;
5. requesting missing information and maintaining business correspondence;
6. operating, securing, troubleshooting and improving the website and forms;
7. preventing spam, malware, fraud, misuse and unauthorised access;
8. maintaining records required for compliance, disputes, audits or protection of legal rights;
9. meeting obligations imposed by applicable laws, regulators, courts or competent authorities;
10. sending marketing communications only where an appropriate lawful basis and opt-out mechanism exist.

ALPHX will process personal data only where a basis permitted by applicable law exists.

Depending on the circumstances, processing may be based on:

• your clear consent;
• your request for information;
• your request for technical review;
• your request for a quotation;
• pre-contract communication;
• performance or administration of a business relationship;
• compliance with a legal obligation;
• protection of ALPHX, its systems, users or legal rights;
• another basis permitted by applicable data-protection law.

Withdrawal does not affect processing that was lawful before withdrawal and may not require deletion of records that must be retained under another lawful basis.

We may share relevant information, on a need-to-know basis, with:

• website hosting providers;
• form providers;
• email and SMTP providers;
• security providers;
• analytics providers;
• file-storage providers;
• IT service providers;
• employees;
• contractors;
• authorised representatives supporting the enquiry;
• product suppliers;
• manufacturers;
• logistics providers;
• technical partners where disclosure is necessary to evaluate or fulfil a request and is legally permitted;
• professional advisers;
• auditors;
• insurers;
• regulators;
• courts;
• law-enforcement bodies;
• other competent authorities where required or permitted by law;
• a buyer, investor, successor or adviser in connection with a proposed corporate transaction, subject to appropriate safeguards.

ALPHX does not sell personal contact information or uploaded technical files as a commercial database.

ALPHX is based in Dubai and may use service providers or business partners located in other countries.

Personal data may therefore be stored, accessed or processed outside the United Arab Emirates.

Where cross-border processing occurs, ALPHX will use a mechanism and safeguards considered appropriate under applicable law.

Depending on the destination and circumstances, this may include:

• assessing the destination’s protection framework;
• contractual safeguards;
• explicit consent where legally appropriate;
• data minimisation;
• technical controls;
• organisational controls.

We retain personal data only for as long as reasonably necessary for the stated purposes, including:

• follow-up;
• recordkeeping;
• security;
• dispute management;
• legal obligations.

ALPHX intends to apply reasonable technical and organisational measures appropriate to the nature and risk of the information processed.

These measures may include:

• encrypted website connections;
• access controls;
• role-based permissions;
• secure form delivery;
• secure email delivery;
• file-type validation;
• file-signature validation;
• size validation;
• malware scanning where feasible;
• protected storage;
• non-public file URLs;
• logging;
• backup procedures;
• incident-response procedures;
• processor due diligence;
• contractual controls;
• staff confidentiality requirements;
• data-handling rules.

No website, email or storage system can be guaranteed to be completely secure.

Do not send information that is unnecessary for your enquiry.

ALPHX should maintain an internal process to:

• identify suspected incidents;
• contain incidents;
• investigate incidents;
• document incidents;
• respond to incidents.

Notifications to affected individuals or authorities will be made where required by applicable law and the facts of the incident.

Subject to applicable law, exemptions and verification of identity, you may be entitled to request:

• information about the categories and purposes of processing;
• access to personal data held about you;
• correction of inaccurate or incomplete data;
• erasure where legally applicable;
• restriction or cessation of certain processing;
• objection to certain processing;
• withdrawal of consent;
• receipt or transfer of data in a structured format where legal conditions apply;
• information about relevant cross-border processing and recipients;
• a complaint to the competent authority.

ALPHX may request information reasonably necessary to verify identity and authority.

ALPHX may retain a record of the request and response.

ALPHX will not treat:

• a technical enquiry;
• an RFQ;
• a Contact enquiry;
• a Company Profile request

as unrestricted consent to unrelated marketing.

Where marketing is used:

• service communication and marketing consent must be clearly separated;
• optional marketing consent must not be pre-ticked;
• each marketing message must provide a practical opt-out;
• suppression records may be retained to respect opt-out choices;
• purchased or scraped personal-contact lists must not be used without a documented lawful basis and compliance review.

We use essential technologies required for:

• security;
• forms;
• consent choices;
• core website operation.

Optional:

• analytics;
• preference;
• marketing technologies

will be used only after they are approved and any required consent mechanism is active.

The website is intended for business and professional users and is not directed to children.

ALPHX does not knowingly request personal data from children through its B2B enquiry forms.

Links to third-party websites are provided for convenience or reference.

ALPHX does not control their privacy practices.

Review the privacy notice of each third-party service before submitting information.

We may update this policy to reflect changes in:

• law;
• business operations;
• forms;
• technology;
• service providers;
• data-processing activities.

The current version will display:

• effective date;
• last-updated date.

Material changes should be reviewed by counsel before publication.

Information about the competent authority and complaint route must be added after legal review confirms:

• applicable jurisdiction;
• legal entity;
• regulatory framework;
• competent authority.