1. Overview
acSys Technologies LLC ("acSys", "we", "us" or "our") is committed to protecting the personal data of everyone who interacts with our software products, website and services. This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, and the rights you have under the UAE Personal Data Protection Law (PDPL) and, where applicable, the General Data Protection Regulation (GDPR).
This policy applies to: www.acsysit.com, acSys ERP, acSys CRM, acSys HRMS, acSys HMS and all associated mobile applications.
2. Data We Collect
Contact & Identity Data
Full name, job title, company name, business email, phone — collected on demo requests, contact forms and newsletter sign-ups.
Technical & Usage Data
IP address, browser type, device identifiers, pages visited, session duration — collected via cookies and server logs to improve performance.
Software Product Data
Data entered into acSys ERP, CRM, HRMS or HMS by your organisation — processed on your behalf as data processor under a Data Processing Agreement.
Communication Data
Records of emails, support tickets and chat sessions maintained for service continuity and quality assurance.
3. Legal Basis for Processing
- →Contractual necessity — processing required to deliver the contracted software or service
- →Legitimate interests — website analytics, security monitoring and product improvement
- →Consent — marketing emails, newsletters and optional analytics cookies (withdrawable any time)
- →Legal obligation — financial records, VAT data and employee records as required by UAE law
4. Data Sharing
We do not sell personal data. We share data only where necessary:
- →Infrastructure providers — UAE/GCC hosting, backup and CDN under strict data processing agreements
- →Google Analytics 4 — anonymised website usage analysis (IP anonymisation enabled)
- →Legal authorities — when required by UAE law or court order
5. Data Retention
Typical retention periods: CRM enquiries — 3 years; active client data — contract duration plus 5 years; financial records — 5 years (UAE FTA requirement); website analytics — 14 months; support communications — 2 years. Data is securely deleted or anonymised upon expiry.
6. Your Rights
Access
Request a copy of data we hold
Rectification
Correct inaccurate data
Erasure
Request deletion where no legal basis exists
Portability
Receive data in machine-readable format
Objection
Object to legitimate-interest processing
Withdraw Consent
Withdraw marketing consent at any time
Submit requests to dpo@acsysit.com. Responses within 30 days per UAE PDPL.
7. Security
acSys employs AES-256 encryption at rest, TLS 1.3 in transit, RBAC, MFA, annual penetration testing, 24/7 threat monitoring and ISO-aligned incident response. On-premise deployments are subject to identical security standards.
8. Contact & DPO
Data Protection Officer
acSys Technologies LLC · #904 Dubai Pearl Building, Deira, Dubai, UAE
dpo@acsysit.com · +971 56 10 11 915
acSys Technologies LLC · #904, Dubai Pearl Building, Deira, Dubai, UAE · dpo@acsysit.com