Privacy Policy

Last updated: September 1, 2025

This Privacy Notice describes how Klyvavo collects, uses, and protects users’ personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and local Dubai legislation, including the Data Protection Law No. 5 of 2020 (“DPL 2020”).

The website and the related services are operated by BLY L.L.C., registered office at Sharjah Media City (Shams), Al Messaned, Al Bataeh | Sharjah, UAE, Trade License / TRN: 104825441900001.

Data Controller

The data controller for all processing activities is BLY L.L.C.
For any request related to data protection, you may contact: info@klyvavo.com

Types of Data Collected

While browsing the website or using our services, we may collect different categories of personal data:

Browsing data and cookies

Technical information automatically transmitted (IP addresses, logs, essential and analytical cookies).

Contact data

Name, email, phone number, and any additional information voluntarily provided through contact forms, newsletter subscriptions, or chat.

Service- or purchase-related data

Information required to manage bookings, demo requests, subscriptions, or orders (including payment information, never stored directly by us but processed through secure third-party providers).

Marketing data

Information collected with prior consent through profiling cookies or advertising campaigns.

For more details on the cookies used, please refer to our Cookie Policy.

Purposes and Legal Bases of Processing

The collected data is processed for the following purposes:

Service provision

To allow website navigation, process user requests, and provide the requested services.
Legal basis: performance of pre-contractual and contractual measures.

Newsletter subscription

To send informational and promotional communications exclusively with explicit consent.
Legal basis: consent.

Analytics and improvement

To monitor traffic, site performance, and service usage in order to improve the user experience.
Legal basis: legitimate interest or consent, depending on the type of cookie.

Legal compliance

To comply with laws, regulations, and official authority requests.
Legal basis: legal obligation.

Processing Methods

Data is processed using electronic systems and appropriate security measures to ensure confidentiality, integrity, and availability.
No fully automated decision-making processes producing legal effects on users are employed.

Data Recipients

Personal data may be shared with:

• authorized internal personnel;

• technology service providers (hosting, payment systems, CRM, newsletter tools) acting as data processors;

• external entities legally entitled under applicable laws or competent authority requests.

No data is disclosed to unauthorized third parties.

International Data Transfers

As the company is based in Dubai, personal data may be processed within the United Arab Emirates.
In case of transfers to third countries, adequate safeguards will be implemented to ensure a level of protection consistent with GDPR (Articles 44 et seq.) and local regulations.

Data Retention

Data is stored only for the time strictly necessary to fulfill the purposes described and subsequently for the periods required by law or to defend against possible legal claims.

Examples:

• technical cookies: for the duration of the session;

• analytical and marketing cookies: according to third-party providers’ retention periods;

• newsletter data: until consent is withdrawn;

• contractual data: up to 5 years after the end of the relationship, unless longer retention is required by law.

Data Subject Rights

Users have the right to:

• access their personal data;

• request rectification, updating, or deletion;

• restrict processing or object on legitimate grounds;

• withdraw consent at any time;

• request data portability;

• lodge a complaint with the competent authority (Data Protection Authority in the EU, or the Dubai Data Office in the UAE).

To exercise these rights, please contact: info@klyvavo.com

Consent and Withdrawal

Where processing is based on consent, it may be withdrawn at any time without affecting the lawfulness of processing performed before withdrawal.

Complaints

If you believe your rights have not been respected, you may file a complaint with the Data Protection Authority of your country or with the Dubai International Financial Centre Authority if applicable.

Mandatory Data

Providing technical data (essential cookies) is mandatory for the proper functioning of the website.
Providing other data (newsletter subscription, demo requests, additional services) is optional, but lack of consent may limit access to those functionalities.