Privacy Policy (Updated for GDPR, POPIA & GCC)
Introduction
At iXerv, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or engage with our services.
We comply with global data protection regulations, including the General Data Protection Regulation (GDPR) in the European Union, the UK Data Protection Act, the Protection of Personal Information Act (POPIA) in South Africa, and applicable data protection laws in the United Arab Emirates (UAE) and wider GCC region.
Information We Collect
- Personal details you provide (name, email, phone number, company).
- Information submitted through forms (e.g., CV uploads, contact forms).
- Analytics data collected via tools such as Google Analytics and Microsoft Clarity.
How We Use Your Information
- To respond to enquiries and provide requested services.
- To process applications submitted through our Careers page.
- To improve our website performance and user experience.
- To meet compliance, legal, or regulatory obligations under GDPR, POPIA, UAE DP Law, and other applicable frameworks.
Legal Basis for Processing (GDPR / EU Users)
If you are located in the EU or UK, we will only process your personal data where we have a legal basis, such as:
- Your consent.
- Performance of a contract.
- Compliance with legal obligations.
- Our legitimate business interests (provided your rights are not overridden).
Data Sharing & International Transfers
As an international business, iXerv may transfer your data between our offices in the United Kingdom, South Africa, and the United Arab Emirates. Where required, we will ensure appropriate safeguards are in place to protect your information during international transfers, in line with GDPR, POPIA, and other applicable laws.
We do not sell or rent your personal information. Data may be shared with trusted service providers only where necessary to deliver our services.
Data Security
We use industry-standard measures, including firewalls and encryption, to protect your personal data. Access is restricted to authorised personnel only.
Your Rights
Depending on your location, you may have rights under GDPR, POPIA, or GCC/UAE data laws, including the right to:
- Request access to the personal data we hold about you.
- Request correction or deletion of your data.
- Withdraw consent for data processing (where applicable).
- Request data portability (GDPR only).
If you are based in South Africa, under the Protection of Personal Information Act (POPIA), you also have the right to:
- Request confirmation of whether we hold your personal information.
- Request correction or deletion of personal information that is inaccurate, irrelevant, excessive, or obtained unlawfully.
- Object to the processing of your personal information in certain circumstances.
- Lodge a complaint with the Information Regulator of South Africa (complaints.IR@justice.gov.za) if you believe your rights have been infringed.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
📧 info@ixerv.com
- If you are based in the European Union or UK, you have the right to lodge a complaint with your local Data Protection Authority.
- If you are based in the United Arab Emirates, you may contact the UAE Data Office or applicable free zone regulator (e.g., DIFC, ADGM).
- If you are based in South Africa, you may contact the Information Regulator at complaints.IR@justice.gov.za.
