Privacy PolicyLast Updated: January 30, 2026
1. IntroductionThis Privacy Policy describes how Digital Labs Group ("we", "us", "our", or "the Company") collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Digital Labs Group is committed to protecting your privacy and ensuring transparency in our data processing activities.
2. Data Controller InformationData Controller: Digital Labs Group Email: nabiullin@digitallabsgroup.ae
If you have any questions about this Privacy Policy or our data processing practices, please contact us at the email address above.
3. Personal Data We CollectWe collect and process the following categories of personal data:

• Full name (surname, first name, patronymic)
• Telephone numbers
• Telegram account information

4. Purpose of ProcessingWe process your personal data for the following purposes:

• Conclusion, performance, and termination of civil law contracts
• Communication regarding our services
• Fulfillment of contractual obligations
• Compliance with legal obligations

5. Legal Basis for ProcessingWe process your personal data based on the following legal grounds under Article 6(1) GDPR:
a) Consent - You have given clear consent for us to process your personal data for specific purposes
b) Contract - Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract
c) Legal obligation - Processing is necessary for compliance with a legal obligation to which we are subject
d) Legitimate interests - Processing is necessary for the purposes of legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms
6. Types of Processing ActivitiesWe perform the following processing activities with your personal data:

• Collection
• Recording
• Organization
• Structuring
• Storage
• Adaptation or alteration
• Retrieval
• Consultation
• Use
• Disclosure by transmission
• Dissemination or otherwise making available
• Alignment or combination
• Restriction
• Erasure
• Destruction
• Anonymization

7. Automated ProcessingWe may carry out automated processing of personal data with or without the transmission of information via information and telecommunication networks.
Currently, we do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
8. Data RetentionWe retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• For the duration of our contractual relationship
• To comply with legal, accounting, or reporting requirements
• Until you withdraw your consent (where consent is the legal basis)

When the retention period expires, personal data will be deleted or anonymized in accordance with our data retention procedures.
9. Data SecurityWe implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Pseudonymization and encryption of personal data
• Ensuring ongoing confidentiality, integrity, availability, and resilience of processing systems and services
• Regular testing, assessment, and evaluation of the effectiveness of technical and organizational measures
• Access controls to prevent unauthorized access to personal data
• Staff training on data protection principles

10. Data Sharing and Disclosure 10.1 General PrincipleWe will never transfer your personal data to third parties under any circumstances, except:

• Where required by applicable law
• Where you have given explicit consent for transfer to a specific third party for the performance of a civil law contract

10.2 Third-Party Service ProvidersWhen we use third-party service providers (such as payment systems, communication services, or other service providers), such third parties process your data in accordance with their own Privacy Policies and User Agreements. We are not responsible for the actions of third-party service providers.
We ensure that any third-party processors we engage provide sufficient guarantees to implement appropriate technical and organizational measures in compliance with GDPR requirements.
11. International Data TransfersIf we transfer personal data outside the European Economic Area (EEA), we will:

• Ensure that the transfer is to a country that the European Commission has determined provides an adequate level of protection
• Use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission
• Obtain your explicit consent for the transfer

We will notify the relevant supervisory authority before undertaking cross-border data transfers where required by law.
12. Your Data Protection RightsUnder the GDPR, you have the following rights regarding your personal data:
12.1 Right of Access (Article 15 GDPR)You have the right to obtain confirmation as to whether or not we are processing your personal data and, where that is the case, access to the personal data.
12.2 Right to Rectification (Article 16 GDPR)You have the right to obtain the rectification of inaccurate personal data concerning you. To update your personal data, please send a notification to nabiullin@digitallabsgroup.ae with the subject line "Personal Data Update".
12.3 Right to Erasure (Article 17 GDPR)You have the right to obtain the erasure of personal data concerning you under certain circumstances.
12.4 Right to Restriction of Processing (Article 18 GDPR)You have the right to obtain restriction of processing under certain circumstances.
12.5 Right to Data Portability (Article 20 GDPR)You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
12.6 Right to Object (Article 21 GDPR)You have the right to object to processing of your personal data on grounds relating to your particular situation.
12.7 Right to Withdraw Consent (Article 7(3) GDPR)Where processing is based on your consent, you have the right to withdraw your consent at any time. To withdraw your consent, please send us a notification by email to nabiullin@digitallabsgroup.ae with the subject line "Withdrawal of Consent to Personal Data Processing".
The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
12.8 Right to Lodge a ComplaintYou have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.
13. Exercising Your RightsTo exercise any of your data protection rights, please contact us at:
Email: nabiullin@digitallabsgroup.ae
We will respond to your request within one month of receipt. In complex cases, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for the delay.
14. Data Protection OfficerIf required by law, we will appoint a Data Protection Officer (DPO). Contact details for our DPO (if appointed) will be provided here.
15. Cookies and Similar TechnologiesIf our website uses cookies or similar tracking technologies, we will provide separate, detailed information about this in our Cookie Policy, which will be made available on our website.
16. Children's PrivacyOur services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.
17. Changes to This Privacy PolicyWe may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Updating the "Last Updated" date at the top of this policy

The current version of this Privacy Policy is always available on our website.
18. Contact InformationIf you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
Email: nabiullin@digitallabsgroup.ae
We are committed to resolving any complaints about our collection or use of your personal data in accordance with GDPR principles of transparency, fairness, and accountability.