Privacy Policy

Last updated: 1 January 2026

GDPR & UAE PDPL Aligned

Otolink LLC (“Otolink”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) (“UAE PDPL”).

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you access our website or use our products and services (the “Services”).

________________________________________

1. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.

• Data Subject: The individual whose personal data is processed.

• Controller: The entity that determines the purposes and means of processing personal data.

• Processor: The entity that processes personal data on behalf of the Controller.

Unless otherwise stated, Otolink acts as a Data Controller for website data and as a Data Processor for customer data processed through its products.

________________________________________

2. Personal Data We Collect

2.1 Data You Provide

• Name, email address, phone number

• Company name, job title

• Information submitted via contact forms, demos, support requests, or inquiries

2.2 Automatically Collected Data

• IP address

• Browser and device type

• Operating system

• Pages visited, timestamps, and usage behavior

• Cookies and similar technologies (see Cookies Policy)

2.3 Customer Data Processed on Behalf of Clients

When using Otolink products, we may process personal data strictly according to our customers’ instructions. In such cases, the customer is the Data Controller, and Otolink is the Data Processor.

________________________________________

3. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent (GDPR Art. 6(1)(a), UAE PDPL)

• Performance of a contract

• Legal obligation

• Legitimate interests, such as service improvement, security, fraud prevention, and business operations, provided such interests do not override data subject rights

________________________________________

4. Purposes of Processing

We use personal data to:

• Operate and improve our website and Services

• Respond to inquiries and provide support

• Deliver and manage products and integrations

• Send service-related or marketing communications (where permitted)

• Ensure security, monitoring, and compliance

• Fulfill legal and regulatory obligations

________________________________________

5. Data Sharing and Disclosure

We do not sell personal data.

Personal data may be shared with:

• Authorized employees and affiliates

• Trusted third-party service providers (hosting, analytics, payment, messaging, infrastructure)

• Regulatory authorities where legally required

All third parties are contractually bound to comply with applicable data protection laws.

________________________________________

6. International Data Transfers

Personal data may be transferred or processed outside the country of origin, including outside the UAE or EEA. Where required, Otolink ensures appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions

• Other lawful transfer mechanisms under GDPR and UAE PDPL

________________________________________

7. Data Security

Otolink implements appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. Despite these measures, no system can guarantee absolute security.

________________________________________

8. Data Retention

Personal data is retained only for as long as necessary to:

• Fulfill the purposes described in this Privacy Policy

• Comply with contractual, legal, or regulatory requirements

________________________________________

9. Data Subject Rights

Under GDPR and UAE PDPL, you may have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Request erasure (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent at any time

• Request data portability

• Lodge a complaint with a supervisory authority

Requests may be submitted using the contact details below.

________________________________________

10. Children’s Data

Our website and Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

________________________________________

11. Third-Party Websites

Our website may contain links to third-party sites. Otolink is not responsible for the privacy practices or content of such third parties.

________________________________________

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be published on this page with an updated effective date. Continued use of the Services constitutes acceptance of the updated policy.

________________________________________

13. Contract Information

Otolink LLC

📧 Email: info@otolink.com

🌐 Website: www.otolink.com