Privacy Policy

Last updated: 28 Oct 2026

Website: www.wearelxa.com

LXA Associates FZCO (“LXA”, “we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use www.wearelxa.com, why we collect it, how we use and protect it, who we may share it with and what rights you have.

This website represents LXA’s operations across the Middle East, including our teams in Dubai, United Arab Emirates, and Riyadh, Kingdom of Saudi Arabia.

Data Controller and Contact Details

Our Dubai team is the primary point of contact for enquiries and job applications submitted through this website. Where relevant, personal information may be shared with our Riyadh team for the purposes described in this policy.

For data protection enquiries, please contact enquiries@wearelxa.com.

1. What This Policy Covers

This Privacy Policy covers personal data collected through our website, including information submitted through our contact forms, job applications and information provided when communicating with us by email, telephone or WhatsApp in connection with the website.

It also covers certain technical information collected automatically when you visit the website.

This policy does not apply to external websites linked from our site, which may have their own privacy policies.

2. The Personal Data We Collect

2.1 When You Contact Us Through the Website

When you submit an enquiry through our website, we may collect:

Name

Email address

Telephone number, where provided

Company or organisation, where provided

Subject and message

Project details or other information you choose to share

We use this information to understand your enquiry and respond appropriately.

Please avoid including sensitive personal information unless it is necessary for your enquiry.

2.2 When You Apply for a Job

When you submit a job application through our website or associated recruitment email address, we may collect:

Name and contact details

Curriculum vitae (CV) or résumé

Cover letter, where provided

Qualifications and professional experience

Employment history

Portfolio or examples of previous work, where relevant

Other information you voluntarily provide in support of your application

Our Dubai team receives and coordinates job applications. Where a position relates to our Saudi Arabia operations, or where an applicant may be suitable for an opportunity in Riyadh, relevant application information may be shared with our Riyadh team.

We use this information to assess applications, communicate with candidates and manage our recruitment processes.

We ask applicants not to include sensitive personal information unless specifically requested and necessary for the recruitment process.

2.3 When You Contact Us Directly

If you contact us by email or telephone, we may collect your name, contact information and the contents of your correspondence.

We use this information to respond to your enquiry and maintain appropriate business records.

2.4 When You Contact Us Through WhatsApp

Our website includes a WhatsApp button to make it easier to contact our team.

If you choose to communicate with us through WhatsApp, we may receive your telephone number, profile name and the content of any messages or files you send.

We use this information to respond to enquiries and communicate with you about our services or potential projects.

WhatsApp is a third-party communication platform operated by WhatsApp and its parent company, Meta. Your use of WhatsApp is subject to its own terms and privacy policies.

We recommend that you avoid sharing sensitive or confidential information through WhatsApp unless necessary.

2.5 When You Visit the Website

Our website hosting and security providers may automatically process limited technical information, including:

IP address

Browser type and version

Device type

Pages visited

Date and time of visits

Basic technical and security information

This information is used to deliver the website, maintain its functionality and security, and protect against automated abuse.

2.6 What We Do Not Do

We do not use website analytics, advertising pixels, remarketing tags or session recording on this website.

We do not sell personal data.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

3. Why We Use Your Personal Data

We collect and process personal data only where necessary for legitimate business purposes or as otherwise permitted under applicable data protection laws.

These purposes include:

Responding to enquiries

To answer questions, respond to requests and communicate with prospective clients, consultants, partners and other contacts.

Managing business relationships

To maintain records of correspondence, understand project requirements and support existing or potential client relationships.

Managing recruitment

To receive, assess and respond to job applications, coordinate recruitment between our Dubai and Riyadh teams and consider candidates for relevant opportunities.

Operating and securing our website

To maintain website functionality, prevent misuse and protect our website and its users.

Meeting legal and regulatory obligations

To comply with applicable laws, regulations and lawful requests from relevant authorities.

Depending on the nature of the processing and the applicable law, we may rely on consent, our legitimate business interests where permitted, steps necessary to enter into or perform a contract, or compliance with legal obligations.

Where consent is required, you may withdraw it by contacting us. Withdrawal of consent does not affect processing lawfully carried out before the withdrawal.

We do not use information submitted through our website to send unsolicited marketing emails. If we introduce email marketing in the future, we will obtain any consent required by applicable law and provide an option to unsubscribe.

4. Cookies and Similar Technologies

Our website does not use advertising or analytics cookies and does not track visitors across other websites.

The following technologies may be used to support website functionality and security:

These technologies are used for essential website functions rather than advertising or behavioural tracking.

If we introduce non-essential cookies, analytics or advertising technologies in the future, we will update this policy and implement appropriate consent controls where required by applicable law.

You can block or delete cookies through your browser settings. However, restricting essential cookies may affect the functionality of certain parts of the website.

5. Who We Share Your Personal Data With

We do not sell or rent personal data.

We may share information only where reasonably necessary for the purposes described in this policy.

5.1 Within LXA

Personal information submitted through this website is generally received and managed by our Dubai team.

Where relevant, information may be shared with our Riyadh team, including:

Client enquiries relating to projects or services in Saudi Arabia

Business development opportunities

Job applications for positions in Riyadh

Other enquiries requiring input from our Saudi Arabia team

We limit internal access to individuals who reasonably need the information to perform their responsibilities.

5.2 Website and Technology Service Providers

We may share limited personal information with third-party providers who support our website and business operations.

These may include:

These providers may process certain information, such as IP addresses or other technical data, in accordance with their own services and applicable contractual arrangements.

5.3 Other Disclosures

We may also disclose personal data:

To professional advisers, auditors, insurers or legal representatives where necessary

To regulatory authorities, law enforcement agencies or courts where required by law

Where necessary to establish, exercise or defend legal rights

In connection with a potential sale, restructuring or transfer of all or part of our business, subject to appropriate safeguards

We take reasonable steps to ensure that third parties receiving personal information are required to handle it appropriately.

6. International Transfers of Personal Data

LXA operates across the Middle East, with teams in the UAE and Saudi Arabia.

As part of our normal business operations, personal information may be shared between our Dubai and Riyadh teams where necessary for enquiries, recruitment, project opportunities or client relationships.

Some of our technology providers may also process or store information outside the UAE or Saudi Arabia, including in the United States or other locations.

Where personal data is transferred internationally, we take steps to ensure that such transfers comply with applicable data protection requirements, including the UAE Personal Data Protection Law and the Saudi Personal Data Protection Law where relevant.

These measures may include appropriate contractual arrangements, safeguards and other lawful transfer mechanisms.

We aim to limit transfers to the information reasonably necessary for the relevant purpose.

7. How Long We Keep Your Personal Data

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, regulatory and business requirements.

Our general retention approach is:

Where personal data is no longer required, we will take reasonable steps to delete it securely or anonymise it.

We may retain certain information for longer where required by applicable law, contractual obligations or legitimate legal claims.

8. How We Protect Your Personal Data

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures include:

Website encryption in transit using HTTPS

Appropriate access controls

Restricting access to information based on business need

Website security and bot protection

Appropriate arrangements with service providers that process personal data on our behalf

Internal procedures intended to maintain confidentiality and information security

While we take reasonable precautions, no method of transmitting or storing information online can be guaranteed to be completely secure.

Where a personal data breach occurs, we will assess the circumstances and take any notification or remedial steps required under applicable law.

9. Your Rights

Depending on your location and the data protection laws applicable to the processing of your information, you may have rights relating to your personal data.

These may include:

Right to information: To understand what personal data we collect and how we use it.

Right of access: To request access to personal information we hold about you.

Right to correction: To request that inaccurate or incomplete information be corrected.

Right to deletion: To request deletion of personal information in circumstances permitted by law.

Right to restrict or object to processing: To request that certain uses of your information be restricted or stopped where applicable.

Right to withdraw consent: Where processing is based on consent, to withdraw that consent.

Other applicable rights: Including rights relating to copies or portability of personal data, where provided by applicable law.

These rights may be subject to legal conditions or exceptions.

To exercise your rights, please contact enquiries@wearelxa.com.

We will review and respond to requests in accordance with applicable legal requirements.

We may ask for reasonable information to verify your identity before processing a request.

10. Complaints

If you have any concerns about how we collect, use or protect your personal information, please contact us at enquiries@wearelxa.com so that we can review the matter and seek to resolve it.

Depending on your circumstances and the law applicable to your personal data, you may also have the right to raise a complaint with the relevant data protection or regulatory authority in the UAE, Saudi Arabia or another applicable jurisdiction.

11. Children

Our website is intended for business users, professional clients, consultants, partners and prospective employees.

It is not directed at children under the age of 18, and we do not knowingly collect personal data from children through our website.

If we become aware that personal data has been collected from a child without an appropriate legal basis or required authorisation, we will take steps to delete it as soon as reasonably practicable.

If you believe that a child has provided personal information through our website, please contact enquiries@wearelxa.com.

12. Links to Other Websites

Our website may include links to third-party websites and platforms, including LinkedIn, Instagram, WhatsApp and our London team’s website at www.lxa.london.

These external websites operate independently and may have their own privacy policies and data protection practices.

We are not responsible for the privacy practices or content of third-party websites.

We encourage visitors to review the relevant privacy policies before providing personal information to external services.

13. If Our Business Changes Hands

LXA may expand, restructure or transfer all or part of its business in the future.

Where personal information is relevant to such a transaction, it may be disclosed to appropriate parties involved in the process, including prospective purchasers or their professional advisers, subject to applicable legal requirements and appropriate safeguards.

If personal data is transferred as part of a business transaction, we will take reasonable steps to ensure that it continues to be protected and used for appropriate purposes.

14. General

This Privacy Policy is intended to explain how we process personal data in connection with our website and associated communications.

Nothing in this policy limits any rights you may have under applicable data protection legislation.

Where the processing of personal data is subject to the laws of the UAE, Saudi Arabia or another relevant jurisdiction, the applicable legal requirements will govern that processing.

If any part of this policy is found to be invalid or unenforceable, the remaining provisions will continue to apply to the extent permitted by law.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our website, business operations, technology providers or applicable legal requirements.

When changes are made, we will update the “Last updated” date at the top of this page.

Where changes are significant, we may provide additional notice on our website or through other appropriate communication channels.

We encourage visitors to review this policy periodically.

16. Contact Information

For any questions, concerns, requests or complaints regarding this Privacy Policy or the handling of your personal information, please contact: