Scope
This Privacy Policy sets out the principles and conditions governing the collection, use, processing, and protection of personal data by Novignis Group DMCC in the context of its collaborations, consulting engagements, and service delivery. It applies to all interactions with clients, partners, and users, unless otherwise specified in a written agreement or required by applicable law.

Data collection and purpose
Novignis may collect personal data necessary for the performance of its services, including but not limited to identification details, contact information, professional data, and information relevant to the execution of assignments. Such data is collected solely for legitimate business purposes, including contractual performance, communication, compliance, and improvement of services. Data is processed in a lawful, fair, and transparent manner.

Legal basis and effective date
Personal data is processed on the basis of contractual necessity, legal obligations, legitimate interests, or the consent of the data subject where required. This Privacy Policy takes effect from the date of publication or from the commencement of the contractual relationship, whichever occurs first. Any material changes to this Policy will be communicated appropriately.

Data retention and security
Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected, including legal, regulatory, or contractual requirements. Novignis implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

Data sharing and disclosure
Personal data may be shared with trusted partners, service providers, or regulatory authorities where necessary for the execution of services or compliance with legal obligations. Such disclosures are limited to what is strictly necessary and subject to appropriate confidentiality safeguards. Novignis does not sell personal data to third parties.

Rights of data subjects
Individuals whose data is processed have the right to request access, rectification, erasure, restriction of processing, or objection to processing, subject to applicable law. Requests may be submitted in writing and will be handled within a reasonable timeframe.