Privacy Policy.

ORTH Privacy Policy

This Privacy Policy explains how AYDI TECHNOLOGIES FZCO ("Company", "we", "us", "our") collects, maintains, processes, shares, and uses personal information on https://www.aydi.com/ and the ORTH platform, and how users/visitors can manage their data.

By accessing or using ORTH or the website, you acknowledge you have read and accepted this Policy (as amended from time to time). Please also review the ORTH Terms & Conditions.

1. The Collection of Data or Information

We collect and use information when necessary for our legitimate interests and in a fair, balanced way. We collect both non‑personally identifiable information (from visitors) and personally identifiable information (from users).

1.A Non‑Personally Identifiable Information

We may collect: browser type, language preference, referring site, timestamp of requests, pages viewed before/after using our Solutions or site, interactions with the site and other users via server log files, and other information a visitor chooses to provide. We use this to understand site usage and may publish aggregate, non‑identifying statistics.

1.B Personally Identifiable Information (PII)

We may collect PII necessary to access and use the Solutions/website, including (as applicable):

• First/last name (natural persons) or company name (juristic persons)
• Active mobile number and email address
• Location and area (farm/field location)
• Job title and department
• Phone numbers (business, fax, mobile)
• Company postal code
• Corporate website URL(s) and social media URL(s)
• Metadata such as IP addresses, dates messages are sent/received, subject lines
• Encrypted account password

We use this information to understand users, and to test, develop, improve, and enhance our Solutions and website; to contact customers about Solutions/promotions/opportunities; and to investigate potential security or license breaches.

1.C Purpose for Collecting and Processing

• Detect, investigate, and prevent fraud or illegal activities
• Respond to comments, questions, requests; provide support
• Fulfill access/correction/deletion requests and other legal rights
• Protect rights and property of ORTH, customers, and others
• Provide and deliver Solutions; send related communications and invoices
• Send technical notices, updates, security alerts, and admin messages
• Comply with legal/contractual obligations; resolve disputes; enforce agreements
• Analyze usage, in-app interactions, and app performance to improve the usability and functionality of our Solutions

1.D Data Retention

We follow industry standards and ISO requirements to protect information during transmission and at rest. We retain data as long as needed for purposes in this Policy, to comply with legal obligations, resolve disputes, and enforce agreements. Retention periods consider amount, nature, sensitivity, and purposes. After the period ends, we delete personal information.

1.E Cookies and Tracking Technologies

We use cookies and similar technologies to enhance functionality, analyze usage, personalize content, and deliver relevant advertising. Non‑essential cookies (analytics/personalization/marketing) are set only after clear, affirmative consent via our cookie banner, per GDPR/ePrivacy. You can manage preferences anytime via "Cookie Settings." Strictly necessary cookies are always active. We do not respond to browser "Do Not Track" signals; control cookies via your browser or our consent tool. Disabling certain cookies may affect features.

2. The Disclosure of Data or Information

2.1 Disclosure to Third Parties

We may use third‑party services (e.g., payment gateways). Your PII may be disclosed where necessary and will be subject to those third parties' privacy policies. Payments processed by third‑party processors are not accessible or controlled by us; we are not liable for third‑party service/data privacy failures. Our site may contain links to third‑party sites; review their privacy policies — we do not control their content or practices.

2.2 Disclosure for Legal Reasons

We may disclose information to comply with lawful requests or orders; address legal violations; protect rights/property/safety; exercise legal rights or respond to claims; or respond to data subject access requests as required by law.

2.3 Disclosure to a Buyer

If ORTH or substantially all assets are acquired, or in a merger/bankruptcy, your information may be transferred.

2.4 Disclosure to Affiliates

We may share non‑personal information with affiliates (current/future parents, subsidiaries, and companies under common control) for the purposes in this Policy.

2.5 Disclosure to Service Providers

We may disclose information to service providers solely to operate the site/Solutions (e.g., payment processors, analytics). These providers may set cookies and receive browsing data to deliver their services.

2.6 Other Disclosures

Testimonials (with consent) may display names; to update/delete, email dpo@aydi.com. Public blogs/forums may expose content to others; request removal via dpo@aydi.com.

3. Users' and/or Visitors' Rights

Residents of the EEA, UK, Switzerland, or UAE are entitled to the following rights under GDPR and UAE Federal Decree‑Law No. 45/2021 (identity verification may be required):

• Access, Correction, Restriction: Request access to/copies of personal information, and details of processing; request correction/completion; restrict processing while accuracy is verified.
• Data Portability: Receive data in a machine‑readable format and request transmission to another entity where technically feasible.
• Erasure: Request deletion where data is no longer necessary, consent is withdrawn, or rights override our interests.
• Objection: Object where processing is based on legitimate interests/public interest, for direct marketing, or for research/statistics.
• Complaint: Lodge complaints with the relevant supervisory authority.

4. Privacy by Default

We apply Privacy by Design and Default (GDPR Art. 25) and ISO standards. By default, we collect/process/store/share the minimum personal data necessary. Non‑essential data collection is disabled until you provide active, informed consent.

• No non‑essential cookies/tracking without explicit consent
• New accounts and profiles default to private/limited visibility
• Email subscriptions and promotions are opt‑in
• AI features use the least data necessary
• Retention settings auto‑delete/anonymize data when no longer needed
• Role‑based access controls restrict internal access

5. GDPR / UAE Compliance

We process personal information only where we have a lawful basis: consent; contract performance; legal obligation; or legitimate interests. We provide required notices (GDPR Arts. 13/14) and honor rights in Arts. 12–23, including the right to be forgotten. For privacy requests, email dpo@aydi.com.

6. Data Protection Impact Assessments (DPIAs)

We conduct DPIAs (GDPR Art. 35; ISO requirements) when processing is likely to result in high risk (e.g., innovative technologies like AI Agronomist, large‑scale profiling, or sensitive data). DPIAs assess nature/scope/context/purposes; necessity/proportionality; risks to individuals; and measures to mitigate risks.

7. Automated Decision‑Making and Profiling

ORTH does not make decisions based solely on automated processing that produce legal or similarly significant effects, unless necessary for a contract, authorized by law, or based on explicit consent. Where used, we will inform you of the logic, significance, and consequences, and ensure your right to human intervention, to express your view, and to contest decisions.

8. Data Protection Officer (DPO)

Contact our DPO for data protection matters under GDPR and UAE law: dpo@aydi.com.

9. Children's Privacy

Our website is not intended for individuals under 16. We do not knowingly collect personal information from anyone under 16. If we learn we have, we will delete it as soon as possible. Contact dpo@aydi.com if you believe we collected such data.

10. Privacy Policy Changes

We may modify this Policy periodically. Material changes will be announced here, by email, and/or via a homepage notice before taking effect. Continued use of the website after updates constitutes acceptance.

11. Governing Law & Dispute Resolution

Disputes should first be settled amicably. If unresolved within 30 days, disputes shall be finally settled by arbitration under DIAC rules, seat at DIFC, Dubai, language English, by a sole arbitrator. UAE law governs.

12. Language

If translated, the English version prevails.

13. Contact Us

Email: dpo@aydi.com · Website: https://www.aydi.com/