Legal
Privacy Notice
Last updated: 30 September 2026
This notice explains how PHII LABS (FZC) (“PHII Labs”, “we”, “us”) handles personal data when you use this website (https://phiilabs.com) or contact us. We are a business-to-business studio — the personal data we handle is limited to business contact details and basic website analytics We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
Who is responsible for your data
PHII LABS (FZC)
Block B, B57-006, Sharjah Research, Technology and Innovation Park, Sharjah, UAE
Licensed by Sharjah Research, Technology and Innovation Park (SRTIP) Free Zone, Licence No. 11340
Email: [email protected]
What we collect and why
If you request an audit or email usThe “Free audit” button opens a short form (name and WhatsApp number). If you write to [email protected], we receive your email address, name and whatever you include in the message. We use this only to answer your request, prepare the audit, and — if we proceed — to take steps before entering into a contract and to perform it Legal basis: steps taken at your request before a contract, and your consent where required
Website analyticsThis site uses Google Analytics to understand which pages are useful. Google Analytics runs only after you press “Accept” in the cookie banner; until then no analytics tag is loaded. You can withdraw consent at any time via the “Privacy settings” link in the footer. Analytics data may include your approximate location, device and pages visited
We do not run advertising trackers, do not sell personal data, and do not use your data for automated decisions that produce legal or similarly significant effects
Who receives your data
Emails go to our Google Workspace mailbox. Analytics events are processed by Google (Google Analytics). Both providers may process data on servers outside the UAE; we rely on their contractual safeguards for cross-border transfers (PDPL Art. 22–23). We do not share your data with other third parties unless required by law
How long we keep it
Emails are kept for as long as the conversation and any resulting engagement require, then deleted or archived as business records Analytics data retention is set in Google Analytics (up to 14 months). We keep personal data no longer than necessary for the purposes above
Your rights
Under the UAE PDPL you may, subject to statutory conditions and exemptions, request access to your personal data, correction or updating, erasure, restriction of processing, data portability, and stop or object to processing — including objection to automated processing. To exercise any of these, email [email protected]with the subject “Privacy request”. We will respond within a reasonable time
You may also lodge a complaint with the UAE Data Office, the federal data protection authority
Security
We use standard organisational and technical measures — access control on our mailboxes and analytics, HTTPS on this site — to protect personal data against unauthorised access, loss or misuse. No method is completely secure; if a breach affects your data, we will handle it in line with PDPL requirements
Changes
If we change how we process personal data, we will update this page and the date above. Significant changes will be flagged where reasonable
Contact
Questions about this notice or your data: [email protected]. See also our Terms of Use.