Privacy Policy

Last Updated: May 7, 2026

1. Introduction

Atlio Information Technology ("Atlio", "we", "us", or "our") operates the website atlio.ae and provides AI automation, software development, and digital services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy in accordance with the UAE Personal Data Protection Law (PDPL), the General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and contact information (email, phone number)
• Company name and job title
• Project requirements and business information
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Device information (browser type, operating system)
• IP address and approximate location
• Pages visited and time spent on site
• Referral source and navigation patterns

3. How We Use Your Information

We use the information we collect to:

• Respond to inquiries and provide requested services
• Send project updates and relevant communications
• Improve our website and services
• Comply with legal obligations
• Protect against fraudulent or unauthorized activity

4. Lawful Basis for Processing

Under the UAE Personal Data Protection Law (PDPL) and applicable regulations, we process your personal information only where we have a lawful basis to do so. The bases we rely on are:

• Consent: Where you have explicitly agreed to processing (e.g., subscribing to updates, accepting marketing cookies).
• Contractual necessity: Where processing is required to deliver a service you have requested (e.g., responding to a project enquiry, executing a signed statement of work).
• Legitimate interests: Where processing supports our legitimate business interests in a way that does not override your rights — for example, securing our website, preventing fraud, and improving the visitor experience.
• Legal obligation: Where we are required by UAE federal law, the UAE Federal Tax Authority, or a competent regulator to retain or disclose information.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. We use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements (with consent)
• Security Services: We use Google reCAPTCHA v3 to protect our contact forms from spam and abuse. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. This information is used to protect our website from bots and fraudulent activity. Google's use of information is governed by their Privacy Policy and Terms of Service.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers who assist in our operations (hosting, analytics)
• Professional advisors (lawyers, accountants) when required
• Authorities when required by law or to protect our rights

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights of affected individuals, we will notify the UAE Data Office and the affected individuals without undue delay, and in any event within seventy-two (72) hours of becoming aware of the breach, in accordance with UAE PDPL Article 9. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the mitigation measures we have taken or propose to take.

9. Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy, or as required by law. Project-related data may be retained for up to 7 years for legal and business purposes.

10. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the UAE Data Office (the supervisory authority under the UAE PDPL) if you believe our processing of your personal information infringes the law.

To exercise these rights, contact us at hello@atlio.ae. We aim to respond to verified requests within 30 calendar days.

11. International Data Transfers

Your information may be transferred to and processed in countries outside the UAE. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

12. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

13. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

15. Privacy Contact and Data Protection Officer

If you have questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact our designated privacy contact. We do not currently process the categories of sensitive personal data that mandate appointment of a formal Data Protection Officer under UAE PDPL Article 10; the contact below is our designated point of contact for all privacy-related enquiries:

16. UAE PDPL Compliance

This policy complies with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). As a UAE-based company, we are committed to upholding the highest standards of data protection for our clients and website visitors.