Privacy Policy

Effective Date: February 13, 2026   |  
Last Updated: February 13, 2026

Mindlyx FZ LLC (“Mindlyx”, “we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website (mindlyx.co), use our services, or interact with us in any capacity.

This policy applies to users in the United Arab Emirates (UAE), the United Kingdom (UK), and the United States of America (USA). Where different laws apply, we have clearly indicated your specific rights in the relevant sections below.

By using our website or services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our website and services.

1. Who We Are

Mindlyx is a brand strategy, identity, and digital growth agency headquartered in Dubai, UAE, with service operations extending to clients in the United Kingdom and the United States.

Registered Entity: Mindlyx FZ LLC
Registered Address: 447 Sutter St, Ste 506-1471, San Francisco, CA 94108, USA
UAE Office: Innovation One, DIFC, Dubai, UAE
Email: info@mindlyx.co
Website: mindlyx.co

2. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use our website, and in some cases, information from third-party sources.

2.1 Information You Provide Directly

• Full name, email address, phone number, and company name when you fill out a contact or inquiry form.
• Project details, briefs, or documents shared with us during a consultation or onboarding process.
• Billing information, including payment details, when you engage our services.
• Communication records when you email, message, or contact us through any channel.

2.2 Information Collected Automatically

• IP address, browser type, operating system, and device information.
• Pages visited, time spent on pages, and links clicked on our website.
• Referring URL and exit pages.
• Cookie and tracking data as described in Section 7 of this policy.

2.3 Information from Third Parties

• Data from analytics platforms such as Google Analytics.
• Information from social media platforms if you interact with our content or ads.
• Publicly available professional information such as LinkedIn profiles, where relevant to a business inquiry.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide the services you have requested.
• To process payments and manage client accounts.
• To send project updates, proposals, and service-related communications.
• To improve our website performance, content, and user experience.
• To send marketing communications where you have given consent or where permitted by law.
• To comply with legal obligations applicable in the UAE, UK, and USA.
• To detect and prevent fraud, unauthorized access, or other harmful activities.

We do not use your personal information for any purpose that is incompatible with the purposes described above without your consent.

4. Legal Basis for Processing

4.1 United Arab Emirates (UAE)

In the UAE, we process your personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Our legal bases include your consent, the performance of a contract with you, compliance with a legal obligation, and our legitimate business interests.

4.2 United Kingdom (UK)

For users in the United Kingdom, we process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our lawful bases for processing include consent, contract performance, legal obligation, and legitimate interests. You have full rights under UK GDPR as described in Section 9.

4.3 United States (USA)

For users in the United States, particularly residents of California, we comply with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We do not sell your personal information. California residents have the right to know, delete, and opt out of the sharing of their personal information as detailed in Section 9.

5. How We Share Your Information

Mindlyx does not sell, rent, or trade your personal information. We may share your information only in the following circumstances.

5.1 Service Providers

We work with trusted third-party service providers who assist us in operating our website, processing payments, and delivering services. These providers are contractually obligated to protect your data and may only use it for the specific purposes we have authorized.

This includes payment processors such as Stripe and PayPal, cloud hosting and storage providers, email and communication platforms, and analytics and marketing tools.

5.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority in the UAE, UK, or USA, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, resolve disputes, and enforce our agreements.

Client project data is retained for a minimum of 5 years following the completion of a project for legal and financial compliance purposes. Inquiry and contact form data is retained for 12 months unless a business relationship is established. Website analytics data is retained for up to 26 months. Marketing communication preferences and consent records are retained for as long as the relationship is active plus 3 years.

When your data is no longer required, we securely delete or anonymize it in accordance with applicable data protection standards.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver relevant content.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the website to function correctly and cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Marketing Cookies: Used to deliver relevant advertisements based on your interests.
• Preference Cookies: Remember your settings and preferences for future visits.

7.2 Managing Cookies

You can control and manage cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. For users in the UK, we obtain your consent before placing non-essential cookies on your device in compliance with the Privacy and Electronic Communications Regulations (PECR).

8. International Data Transfers

As Mindlyx operates across the UAE, UK, and USA, your personal data may be transferred across international borders. Where such transfers occur, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses as required under UK GDPR, adequacy decisions recognized by relevant data protection authorities, and contractual agreements with third-party processors that meet required data protection standards.

For UAE residents, cross-border data transfers are conducted in accordance with the UAE PDPL and any relevant data transfer regulations issued by the UAE Data Office.

9. Your Rights

Depending on your location, you have specific rights regarding your personal information. We are committed to honoring all of these rights promptly and transparently.

9.1 Rights Under UAE PDPL

• The right to be informed about how your data is used.
• The right to access your personal data.
• The right to correct inaccurate or incomplete data.
• The right to request deletion of your data.
• The right to withdraw consent at any time.

9.2 Rights Under UK GDPR

• The right to access, correct, and delete your personal data.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent without affecting the lawfulness of prior processing.
• The right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

9.3 Rights Under CCPA / CPRA (California Residents)

• The right to know what personal information we collect, use, share, or sell.
• The right to delete personal information we hold about you.
• The right to opt out of the sale or sharing of personal information. We do not sell personal data.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise any of the rights listed above, please contact us at info@mindlyx.co. We will respond to all verified requests within 30 days or sooner as required by applicable law.

10. Data Security

Mindlyx implements industry-standard technical and organizational measures to protect your personal information from unauthorized access, loss, alteration, or disclosure.

These measures include SSL/TLS encryption for all data transmitted through our website, secure access controls and authentication protocols for internal systems, regular security assessments and vulnerability monitoring, and strict data access policies limited to authorized personnel only.

While we take every reasonable precaution, no method of data transmission over the internet is entirely secure. We cannot guarantee absolute security but are committed to addressing any breach promptly and in accordance with legal requirements.

11. Children’s Privacy

Our website and services are intended for use by businesses and professionals. We do not knowingly collect personal information from individuals under the age of 18.

If we become aware that we have collected data from a minor without appropriate consent, we will delete it immediately. If you believe a minor has submitted information to us, please contact us at info@mindlyx.co.

12. Third-Party Links

Our website may contain links to third-party websites, platforms, or services. These links are provided for your convenience and do not signify our endorsement of those websites.

We have no control over the content or privacy practices of third-party sites and encourage you to review their privacy policies independently before providing any personal information.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the Effective Date at the top of this document and, where appropriate, notify you by email or through a prominent notice on our website.

Your continued use of our website or services after any changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please reach out to us.

Mindlyx FZ LLC
Email: info@mindlyx.co
Website: mindlyx.co
UAE Office: DIFC, Dubai, UAE
US Office: San Francisco, CA 94108
Phone: +1 (415) 358-6757

For UK-specific data protection queries, you may also contact the Information Commissioner’s Office at ico.org.uk.

For UAE-specific inquiries, you may contact the UAE Data Office at uaedataoffice.gov.ae.