VortexWeb LLC ("Company", "we", "us", "our") is committed to protecting the privacy and security of personal data we collect and process. This Privacy Policy explains how we collect, use, store, share, and protect your information when you interact with our website (vortexweb.org), engage our services, or communicate with us through any channel. This policy applies to all individuals whose data we process, including website visitors, prospective clients, existing clients, partners, job applicants, and other stakeholders.
We collect personal data you voluntarily provide through:
When you visit our website, we automatically collect:
We may receive information from: (a) CRM platforms (Bitrix24, Monday.com, Kommo) when you interact with systems we've implemented; (b) analytics providers (Google Analytics, Meta Pixel); (c) advertising platforms (Google Ads, Meta Ads); (d) referral partners who introduce you to our services; (e) publicly available business directories and LinkedIn.
We process personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries | Legitimate interest / Pre-contractual steps |
| Delivering contracted services | Performance of contract |
| Sending invoices and payment processing | Performance of contract / Legal obligation |
| Marketing communications | Consent (opt-in) |
| Website analytics and improvement | Legitimate interest |
| Fraud prevention and security | Legitimate interest / Legal obligation |
| Compliance with tax and accounting laws | Legal obligation |
| Job application processing | Pre-contractual steps / Consent |
We use your data to: respond to inquiries and schedule consultations; prepare proposals and statements of work; deliver CRM implementation and IT consultancy services; provide technical support and training; send project updates, milestone notifications, and delivery reports; process invoices and manage billing; provide post-delivery monitoring and maintenance.
We use your data to: improve our website, services, and user experience; analyze service usage patterns and client satisfaction; conduct internal business analysis and reporting; manage our partner referral program; prevent fraud and ensure security; comply with legal and regulatory obligations.
With your explicit consent, we may use your data to: send newsletters, industry insights, and service updates; share case studies and thought leadership content; invite you to webinars, events, or training sessions; deliver targeted advertising through Google Ads and Meta Ads platforms. You may withdraw consent at any time (see Section 6).
VortexWeb does not sell, rent, lease, or trade your personal data to any third party for their marketing purposes.
We share data with trusted service providers who assist in our operations, all of whom are bound by data processing agreements:
We may disclose data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of VortexWeb, our clients, or the public.
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections.
We implement industry-standard security measures including: SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; role-based access controls with principle of least privilege; multi-factor authentication for administrative access; regular security audits and vulnerability assessments; automated backup systems with geo-redundancy; firewalls, intrusion detection, and DDoS protection.
We maintain: employee confidentiality agreements; security awareness training for all staff; documented incident response procedures; vendor security assessment processes; access logging and monitoring; clean desk and screen lock policies.
Client CRM data is hosted on the client's own platform accounts (Bitrix24, Monday.com, etc.). VortexWeb accesses this data only as necessary for service delivery and does not retain copies after the engagement concludes unless specifically agreed.
Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may request identity verification before processing your request.
| Data Category | Retention Period | Reason |
|---|---|---|
| Client project data | 3 years after project completion | Warranty support, legal compliance |
| Financial records & invoices | 7 years | UAE tax law requirement |
| Marketing contact data | Until consent withdrawn | Ongoing marketing relationship |
| Website analytics | 26 months | Performance analysis |
| Job application data | 2 years (if unsuccessful) | Future opportunity consideration |
| Communication logs | 3 years | Service quality, dispute resolution |
| Partner referral data | Duration of partnership + 2 years | Commission tracking, legal compliance |
After the retention period, data is securely deleted or anonymized within 90 days.
Required for website functionality: session management, security tokens, language preferences, theme settings (light/dark mode). These cannot be disabled.
Google Analytics 4 (GA4): Tracks page views, user journeys, traffic sources, and engagement metrics. Data is aggregated and anonymized after 26 months. You can opt out using the Google Analytics Opt-out Browser Add-on.
Meta Pixel and Google Ads conversion tracking: Used for advertising performance measurement and remarketing. You can manage preferences through your browser settings or the platforms' ad preference controls.
You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality. Third-party opt-out tools: Google (ads.google.com/settings), Meta (facebook.com/adpreferences).
Your data may be processed in the United Arab Emirates, India, and other jurisdictions where our service providers operate (including the United States for cloud services). We ensure appropriate safeguards for international transfers including: standard contractual clauses (SCCs); data processing agreements with all processors; compliance with applicable data protection regulations in each jurisdiction; encryption of data during transfer.
Our services are designed exclusively for business use and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] for prompt deletion.
VortexWeb complies with applicable data protection laws including: UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations; India's Information Technology Act 2000 and Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011; India's Digital Personal Data Protection Act 2023 and associated rules; applicable provisions of the EU General Data Protection Regulation (GDPR) where EU/EEA resident data is processed.
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated by: updating the "Last Updated" date; posting a notice on our website; sending email notification to active clients and marketing subscribers where appropriate. Continued use of our services after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
For privacy inquiries, data subject requests, or complaints:
VortexWeb LLC — Privacy Team
Meydan Grandstand, Dubai, UAE
Tower C, Ithum Tower, Sector 62, Noida, India
Email: [email protected]
Phone: +971 55 903 7246 (UAE) · +91 78200 85877 (India)
Response time: Within 30 days of verified request