Legal · Privacy & data protection

Your data, your control. Plain-English privacy policy from Novasoft.

Verbatim policy text from the official novasoft.global record — plus explicit rights under EU/UK GDPR, the Saudi Personal Data Protection Law (PDPL, 2023) and the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection. Effective May 2026.

GDPREU / UK aligned
PDPLKSA & UAE aligned
30dResponse SLA
1 DPOSingle point of contact
Privacy Policy · Verbatim from the official novasoft.global record

Privacy Policy.

The policy text below is the canonical record as published on novasoft.global. Effective May 2026. For region-specific rights under GDPR, KSA PDPL or UAE PDPL, see the labelled sections further down.

Novasoft values your privacy. In this Privacy Policy (“Policy”), we describe how we collect, use, and disclose information, including Personal Information that we obtain about visitors to our website www.novasoft.global (“Website”) and the services available through our Website (“Services”).

Novasoft clearly understand that you and your Personal Information is one of our most important assets and we believe protection of your privacy as a very important principle.

We store, process your Information including any sensitive financial information collected, if any, on computers that may be protected by physical as well as reasonable technological security measures.

If you object to Your Information being transferred or used in this way please do not use Website.

We may disclose personal information if required to do so by law or in the good faith belief that such disclosure is reasonably necessary to respond to subpoenas, court orders, or other legal process.

We may disclose personal information to law enforcement offices, third party rights owners, or others in the good faith belief that such disclosure is reasonably necessary to:

  • Enforce our Terms or Privacy Policy
  • Respond to claims that an advertisement
  • Posting or other content violates the rights of a third party
  • Protect the rights, property or personal safety of our users or the general public

We and our third-party service providers use cookies and other common web tracking mechanisms to track information about your use of our Website and Services. We may use this information, which is collected and remains in aggregate form, to understand how visitors use our Website so that we can better tailor our interactions with you when you browse our Website and to improve our Website.

How we use personal data · Verbatim from novasoft.global

How we use personal data.

We use the information we collect from Users to provide you with rich, interactive experiences. We may use your personal information in the following ways:

  • To communicate with you about our products or services, respond to your inquiries, fulfill and process your request for our products and services, including helping you to complete transactions, process payments, and other customer service purposes.
  • To administer the careers portion of the Website and process your application.
  • When you connect with us through a social media platform, we may, depending on your privacy settings, receive some information from your social media account.
Access to Website · Verbatim from novasoft.global

Access to Website.

We will do our utmost to ensure that availability of the website will be uninterrupted and that transmissions will be error-free. However, due to the nature of the Internet, this cannot be guaranteed.

Also, your access to the website can be occasionally suspended or restricted to allow repairs, maintenance, or the introduction of new facilities or services at any time without prior notice. We will attempt to limit the frequency and duration of any such suspension or restriction for easy usage.

Terms & Conditions · Verbatim from novasoft.global

Terms & Conditions.

This offering comprises commercial software products and services and related materials of NOVASOFT FZCO & NOVASOFT FZCO Programs. NOVASOFT FZCO Programs are separately licensed under the NOVASOFT FZCO Software License Agreement available in the Dynamics of the NOVASOFT FZCO Programs.

Your data rights · Added value beyond the official policy

Six rights you have over your personal data with Novasoft.

The official policy above describes how we handle data. The rights listed below are the ones you can actively exercise — under GDPR (EU/UK), KSA PDPL or UAE PDPL depending on where you are located. Email contact@novasoft.global to exercise any of these. We respond within 30 days.

1. Right of access

Request a copy of the personal data we hold on you, what we use it for, who we share it with and how long we keep it.

2. Right of rectification

Correct any personal data that is inaccurate or incomplete, including contact details, company affiliation, or career application information.

3. Right of erasure

Ask us to delete the personal data we hold on you, where there is no overriding legal obligation for us to retain it (e.g. statutory record-keeping).

4. Right to restrict processing

Ask us to pause processing your personal data while a dispute or correction request is resolved — we hold the data but stop using it during that window.

5. Right to data portability

Receive your personal data in a structured, machine-readable format (e.g. CSV) so you can transfer it to another controller. Applies to data we hold based on your consent or a contract with you.

6. Right to object & complain

Object to processing based on our legitimate interests (including direct marketing) and lodge a complaint with your local supervisory authority — e.g. ICO in the UK, CNIL in France, SDAIA in KSA, UAE Data Office in the UAE.

EU & UK General Data Protection Regulation

GDPR — for visitors and customers in the EU and UK.

If you are located in the European Economic Area, the United Kingdom or Switzerland, the EU/UK General Data Protection Regulation (GDPR) applies to our processing of your personal data. The lawful bases on which Novasoft processes personal data are:

  • Performance of a contract — processing necessary to deliver the services you have requested, fulfil orders or respond to enquiries.
  • Legitimate interests — improving the website, analytics, direct marketing to existing customers, and security against fraud or abuse, balanced against your rights.
  • Consent — for non-essential cookies, marketing emails and any sensitive data we explicitly request from you. You can withdraw consent at any time.
  • Legal obligation — statutory record-keeping, tax compliance and responding to lawful requests from regulators or courts.

International transfers. Novasoft is headquartered in the UAE with operating entities in the USA, KSA and India. Where personal data flows from the EEA/UK to Novasoft entities outside that region, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary technical and organisational safeguards.

Lodge a complaint. You have the right to complain to your national supervisory authority — for example the UK Information Commissioner’s Office (ICO), the French CNIL, or the data protection authority in your member state.

To exercise any GDPR right, email contact@novasoft.global with the subject “GDPR request”. We respond within 30 days as required by the Regulation.

Saudi Personal Data Protection Law

KSA PDPL — for data subjects in the Kingdom of Saudi Arabia.

The Saudi Personal Data Protection Law (PDPL), issued by Royal Decree M/19 of 9/2/1443H and amended in March 2023, governs the processing of personal data of individuals in the Kingdom of Saudi Arabia. The implementing regulator is the Saudi Data and Artificial Intelligence Authority (SDAIA).

Data controller for KSA. Novasoft’s Riyadh-based operating entity processes personal data of KSA data subjects. Our local entity address is #204, 2nd Floor, Ameera Building, Olaya, Riyadh.

Your PDPL rights include the right to be informed about how your data is processed, the right of access, the right to request correction or destruction of inaccurate data, and the right to withdraw consent. KSA PDPL also requires explicit consent for processing of sensitive personal data (health, biometric, financial, religious belief) and restricts cross-border transfers outside the Kingdom.

To exercise any PDPL right, email contact@novasoft.global with the subject “PDPL request” or call our Riyadh office on +966 50 360 2541. We respond within 30 days.

UAE Personal Data Protection Law

UAE PDPL — for data subjects in the United Arab Emirates.

The UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) regulates the processing of personal data of individuals residing or working in the United Arab Emirates, alongside sector-specific frameworks (DIFC Data Protection Law 2020, ADGM Data Protection Regulations 2021, DHA & healthcare-specific rules). The UAE Data Office is the federal regulator.

Data controller for the UAE. Novasoft FZCO is registered in Jebel Ali Free Zone, Dubai, UAE. Our UAE office is at Building # S50120, Jebel Ali Free Zone.

Your UAE PDPL rights mirror most of the GDPR rights — the right of access, rectification, erasure, restriction of processing, data portability, and the right to withdraw consent. The law also requires data-processor notification of breaches within strict timeframes and applies extraterritorially where UAE data subjects are concerned.

To exercise any UAE PDPL right, email contact@novasoft.global with the subject “UAE PDPL request” or call +971 56 712 5155. We respond within 30 days.

Cookies & tracking · Detailed disclosure beyond the official policy

Cookie Policy.

novasoft.global uses cookies and similar tracking technologies in three categories:

  • Strictly necessary cookies — required for the website to function (session management, security, load balancing). You cannot opt out of these without breaking the site.
  • Analytics cookies — aggregate, anonymous usage statistics (which pages visited, time on page, referral source) that help us understand site performance. We use a privacy-respecting analytics platform with IP anonymisation enabled.
  • Marketing cookies — set only after you give consent via the cookie banner. Used to deliver relevant Novasoft content via LinkedIn Insight Tag, Microsoft Ads UET, and Google Ads Conversion Tracking.

Your cookie choices. Manage non-essential cookies via the cookie banner on first visit, or via your browser settings at any time (most browsers let you block all cookies, third-party cookies, or specific domains). Blocking cookies will not affect the strictly necessary ones but will disable analytics and marketing.

We do not sell cookie data to third parties. Cookie consent is logged with a timestamp so we can demonstrate compliance.

Data retention · How long we keep what

Retention schedule.

Personal data is retained only for as long as needed to fulfil the purpose for which it was collected, satisfy a legal or regulatory obligation, or pursue legitimate business interests. Standard retention windows:

  • Website enquiry form — up to 24 months from the date of enquiry, then deleted unless a customer relationship has started.
  • Customer support records — for the duration of the support relationship plus 36 months thereafter, to address any retrospective audit or warranty claim.
  • Career applications — 12 months from the date of application unless we ask the applicant for permission to retain longer.
  • Newsletter subscriber lists — until the subscriber unsubscribes (one-click in every email).
  • Cookie consent log — 24 months from the date of consent, so we can demonstrate the basis for our processing.
  • Statutory financial records — retained for the period required by UAE, KSA, India and USA tax law (typically 5–7 years).
Contact for privacy questions · Data Protection Officer

One inbox for every privacy or data-rights question.

Email contact@novasoft.global with the subject line marking the request type so the response is routed correctly. We respond within 30 days as required by the applicable law.

Email

Primary: contact@novasoft.global
Subject lines: “GDPR request” · “PDPL request” · “UAE PDPL request” · “Cookie consent withdraw” · “Data deletion request”

Postal

Novasoft FZCO
Building # S50120, Jebel Ali Free Zone, Dubai, UAE
(Primary data controller address for international requests)

Sources · Privacy regulators & statutory references
  1. EU General Data Protection Regulation (GDPR) · Official reference text
  2. UK Information Commissioner's Office (ICO) · UK supervisory authority
  3. Saudi Data and Artificial Intelligence Authority (SDAIA) · KSA PDPL regulator
  4. UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection · UAE PDPL official reference
  5. UAE Federal Tax Authority · Statutory records retention reference

Last reviewed May 2026.

Chat with us