PRIVACY POLICY STATEMENT

                                                          Aleph LLC FZ | United Arab Emirates

The following statement contains Aleph LLC FZ (hereinafter referred to as "Aleph" and also as "we" or "our") policies and practices with respect to the collection, use, processing, storage, transfer and security of personal data. We are committed to protecting the privacy, security and confidentiality of personal data that we may hold according to the requirements of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and/or laws of any other applicable jurisdiction and shall ensure compliance by our staff members with the standards as prescribed under those laws.

We reserve the right to update and/or modify this statement from time to time, at our sole discretion, without having to provide notice thereof unless we decide to use your personal data for a different purpose than specified at the time of collection. Please read this Privacy Policy Statement carefully and check for updates and/or modifications to this statement on a regular basis.

From time to time, we may collect Personal Data from you through the following channels:

1. Our website when you register and become a member through our online registration system and/or when you send emails/requests/enquiries to us through our website contact function or through our official social media pages.

2. Registration at exhibits and other events held by us.

3. Surveys and marketing campaigns held by us.

Collectively, we refer to our website, social media pages and marketing campaigns together with offline channels (i.e. exhibits) as "the Services". By using the Services you agree to the Terms.

"Personal Data" means any information relating (directly or indirectly) to any living individual from which it is practicable to identify that individual. The type of personal data that we may collect from you may include your name, age, gender, birth date, marital status, e-mail and mailing addresses, country of residence (and other geographical position / location-based information), preferred language, phone and fax numbers, education level, occupation, business information, experience, certifications, username, password, identity card number and tracking information.

If you submit any personal data regarding other people for us or our service providers, you shall have the authority and power to do so and you permit us to use the data in accordance with this Privacy Policy Statement.

"Other Data" means any data that does not reveal your specific identity or does not relate to an individual. We may collect other data such as browser and device data (including IP address and data collected through cookies, aggregated data relative to your geographical position and responses to promotional offers (landing pages) and surveys.

In some instances, we may combine Personal Data with Other Data. If we do so, we will treat the combined data as personal data as long as it is combined.

While you are not obliged to supply your personal data, however, if you do not provide us with the personal data that we request, your application or request may not be processed and/or our services may not be available to you.

We collect personal data by requesting that you complete forms, questionnaires and/or surveys, when you register to the Aleph website, communicate with us through email, social media pages or other means, and when you sign up for our newsletter or participate in our marketing campaigns.

When you use or interact with our website and/or Services, we receive, and store information generated by your activity and information automatically collected from your browser or mobile device. For example, like many websites, we obtain certain information when your web browser accesses our website including your IP address, device type, browser type, operating system, sites that were accessed during your visit, pages viewed and access dates. This information helps us to communicate with our customers and enhances our provision of services and products.

We may also collect personal data when you visit Aleph exhibitions and when you attend promotional events that we host or in which we participate. We further collect personal data when you visit our properties; information may be collected through such properties closed circuit television systems (CCTV) or other security systems.

We may store your personal data on our database and may aggregate data that we collect, and this aggregated data will not personally identify you or any other user.

Your personal data may be processed and used by us for the following purposes:

1. Identifying and verifying your identity as well as registering you as a member.

2. Processing your applications, orders and requests.

3. Providing our information and services to you.

4. Communicating with you, including but not limited to responding to your inquiries and sending you invitations and relevant publications.

5. Development, management, operation and maintenance of our website, social media pages and business relationship with you.

6. Administering and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests or other promotional activities or events.

7. Enforcing the applicable terms of use, establishing or preserving a legal claim or defense, preventing fraud or other illegal activities, solving disputes and enforcing our contractual agreements.

8. Communicating with you about products, services and projects of Aleph we think may be of interest to you and sending you important information regarding our website, changes to our terms, conditions, policies or other administrative issues.

9. Planning, performing and managing the (contractual) relationship with business partners, including performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing support services.

10. Maintaining and protecting the security of our products, services, websites and social media pages, preventing and detecting security threats, fraud or other criminal or malicious activities.

11. Ensuring compliance with legal obligations (such as record keeping obligations), complying with legal and regulatory requirements or demands in accordance with applicable UAE law, regulations, or other legal processes including exerting controls.

12. Internal business purposes such as developing new products, enhancing our website and social media pages, improving our services, identifying usage trends and visiting patterns, determining the effectiveness of our promotions, evaluating third party performance.

13. Performing statistical calculations (some of which may be presented on our website or other services, but such calculations will not include any personally identifiable information or details).

14. Any other purposes ancillary or related to the above.

The legal basis for processing your personal data is made up of one or more of the following reasons:

4. Your consent.

5. Providing our products and services.

6. Compliance with applicable UAE laws, regulations or other legal process.

7. Legitimate business interests pursued by Aleph.

We may also process information contained in or relating to any communication that you send to us ("correspondence data"). The correspondence data may include the communication content and metadata associated with the communication (such as groups, meetings and events). The correspondence data may be processed for the purposes of communicating with you and record-keeping.

We may engage certain agents, contractors and service providers (including third-party IT service providers, marketing and advertisement agents, auditors, advisers, research companies and other service providers for administrative, data processing, digital storage, maintenance, social media and other similar services) in connection with our products, services, business operations and the specified purposes for collecting your personal data, and may disclose, transfer or share your personal data with them, our affiliate companies and relevant members of staff who are responsible for the service and/or matter concerned.

We may also disclose your personal data when required by UAE law or in compliance with a court order of any jurisdiction or as requested by any government or law enforcement authorities or administrative organs, or otherwise necessary to the establishment of legal claims or defenses, to exercise, defend and protect our rights or property and those of our affiliate companies and to enforce our agreements with you.

Unless otherwise provided in this statement or with prior consent, your personal data will not be disclosed to any third party other than the above-named parties.

In the event of any reorganization, restructuring, amalgamation, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of Aleph business and assets, your personal data may be transferred to the new entity as part of the transaction provided that the new entity abides by this statement and continues to exercise the same level of care and attention in respect of your personal data. In such circumstances, you will be notified and may decide to withdraw your consent to use of your personal data.

As a general principle, data processing is held within the UAE and in jurisdictions recognized under UAE PDPL as providing adequate data protection levels.

Some information might be held on cloud servers outside the UAE, but we will endeavour to ensure that they will be within jurisdictions approved under applicable UAE data protection regulations. We will ensure that appropriate measures have been put in place to ensure that your personal data is treated with a substantially similar level of protection through standard contractual clauses or other approved safeguards.

We will also ensure that the cloud service provider(s) will keep personal data secure and delete them once no longer needed and comply with the applicable data protection regulations and provisions. In the event that the recipients to whom Aleph transfers your personal data are located in countries in which applicable laws do not offer the same level of data protection, Aleph will take reasonable steps to implement appropriate and suitable safeguards for the protection of your personal data.

Subject to your consent, we may use your personal data to promote and market products and services to you through direct marketing which may include but not be limited to messages and/or notifications to your mobile device, telephone calls, email, facsimile, direct mailing, etc.

You can opt-out from receiving such marketing communications at any time and at no charge by notifying us at our contact details set out herein.

Aleph will only retain your personal data so collected for a period no longer than necessary for an identifiable and ongoing business need, any notified regulatory investigations or active legal proceedings, compliance with any applicable UAE law, regulation, legal process (including without limitation court orders and/or compulsory disclosures required by governmental authorities), fulfilment of legitimate interest of Aleph and/or third parties, fulfilment of the purposes referred to in this statement or as otherwise specified at the time of collection unless otherwise required or permitted by law.

Your personal data may be stored in physical locations and/or servers located within or outside the UAE. Please rest assured that Aleph will take all reasonable steps to ensure that your personal data is stored and processed securely.

Unless specifically requested, we recommend that you do not send us or disclose to us any sensitive personal data (such as national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, administrative or criminal proceedings and/or sanctions).

Aleph does not knowingly collect personal data from any person under the age of 18.

We implement reasonable administrative, organizational and technical safeguards and security measures to protect your personal data from unauthorized access, disclosure, destruction or alteration, accidental loss, misuse or damage. We regularly review and monitor such safeguards and security measures.

When disclosure of personal data to third parties is necessary and authorized, we will take reasonable steps to ensure that these third parties undertake the same duty and level of protection, security and confidentiality as offered by us and that the personal data so disclosed are exclusively used and/or processed for the purposes you have accepted.

If you have reason to believe that your interaction with us is no longer secure (i.e. if you feel that the security of your account has been compromised), please immediately notify us.

Like many other websites, in order to enhance your experience on our website, some of our webpages may use cookies. By using our website, you consent to the use of these cookies. If you do not agree to the use of these cookies, please disable them by following the instructions for your web browser. Please note that certain features on our website may not work properly if cookies are disabled.

"Cookies" are small data files containing certain information which are placed onto your computer or device when you visit certain parts of our website for record-keeping purposes. Some cookies assist your computer/device to remember certain inputs that you may have placed to make it easier for you to navigate our website. We use cookies to understand website usage/traffic, to improve the content and offerings on our websites, to personalize and enhance your browsing experience and to display relevant information. However, cookies, by themselves, are not used to collect any personal data unless you choose to provide such information to us.

We use session cookies to support the functionality of the website and to understand your use of the website (i.e. which pages you visit, links you use and length of stay on each page etc.). These session cookies are stored only temporarily during a browsing session and are deleted from your computer or device when you close your browser.

We may also use Google Analytics (a third-party cookie) to collect and analyze usage of our website. We use the information to compile reports and to help improve our website. These cookies collect information in an anonymous form, for example determining the number of visitors, from where visitors come to the website and which pages they visit. For the avoidance of doubt, we are not responsible for the privacy practices of any third-party websites which may be linked to our website or social media pages.

If you are a resident or data subject within the UAE, you have the following rights under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL):

1. You have the right to be informed about the processing of your personal data in a clear and transparent manner.

2. You are entitled to obtain confirmation of whether your personal data has been processed, and to receive a copy of such data.

3. You are entitled to request the rectification or correction of any inaccurate personal data we hold about you.

4. You have the right to request the erasure of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing.

5. You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

6. You have the right to withdraw your consent at any time where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

7. You have the right to lodge a complaint with the UAE Data Office or other competent regulatory authority if you believe your data protection rights have been infringed.

8. You have the right to data portability — to receive your personal data in a structured, commonly used format where technically feasible.

To exercise any of the rights listed above, please contact us using the details provided below. We will respond to your request in accordance with the timelines prescribed under applicable UAE law.

If you have any questions, concerns or requests regarding this Privacy Policy Statement or the processing of your personal data, please contact us at:

Aleph LLC FZ

Email: info@alephuae.com

Website: www.alephuae.com

Last updated: May 2026