Demo Version

This is a test platform for demo purposes only. Any entered or saved data is automatically reset at 5:00 am UTC.

Rexalto Privacy Policy

Effective February 2023.

General Information

This privacy policy describes the personal data (defined below) that Rexalto FZ-LLC (Dubai Internet City, 100891 Dubai) and its affiliates ("Rexalto", "wev, "us" and/or "our") collect about you, how we use and protect this personal data, and the choices you can make about how we may use your personal data.

Your privacy and security of your personal data matter to us, so please get to know our privacy practices and contact us should you have any questions about your personal data.

If you are a visitor located in the EEA, the UK or Switzerland, please note that Rexalto complies with the General Data Protection Regulation (EU Regulation 2016/679) ("EU GDPR"), its incorporation into the laws of England and Wales, Scotland, and Northern Ireland by virtue of section 3 of the UK European Union (Withdrawal) Act 2018 ("UK GDPR") and/or the Swiss Federal Act on Data Protection ("FADP"), as applicable (together, the "GDPR"). Your rights in relation to the GDPR are detailed below. If you have any questions, please contact

If Rexalto products collect information about you (e.g., as an employee of a Rexalto customer), please note that this privacy policy covers only those instances when the purposes and means of processing your personal data are determined by us (e.g., when we are a "controller" as defined by the GDPR). It, therefore, does not apply to any of your personal data which we may process on behalf of our customers (e.g., when we are a "processor" as defined by the GDPR). Please therefore directly contact the relevant controller (e.g., your employer, if you are an employee of a Rexalto customer) for more information about their privacy practices.


Rexalto is the controller for the personal data we process unless otherwise stated.There are many ways you can contact Rexalto, including by emailand post:

You can contact our DPO directly via email

Information we collect and use

Personal Data. Personal Data is any information relating to an identified or identifiable individual or as defined by an applicable data protection law or regulation. Rexalto may collect a variety of personal data about you in a number of ways:

  • Personal data you provide directly. We may collect personal data that you provide directly, such as when youaccess our website, create a user account with us, register our products, or otherwise give us your name, email address, etc. You may also choose to submit personal data to us via other methods. E.g., in response to marketing or other communications; through social media or online forums; through participation in an offer, program or promotion; in connection with an actual or potential business relationship with us; or by giving us your business card or contact details at trade shows or other events. When you contact Rexalto, we may also keep a record of your communication to better support you in the future. From time to time, we may offer referral programs to refer prospective customers to us. Please refer prospective customersand provide their personal data to us only if you have their permission. If you later find out you did not have such consent, please inform us as soon as possible.
  • Personal data we collect automatically. We may automatically collect information about how you use and engage with our businesses (e.g., via our websites and/or applications), products and/or services over time and some of this may be personal data.In addition, we may use cookies and other technologies to function effectively. For more information, please refer to this privacy policy`s "Cookies and Similar Technologies" section below

Depending on your interaction with our business, we may typically collect next categories of personal data:

  • Personal identifiers include your real name, alias, postal address, unique personal identifier, online identifier, government-issued identifiers, email address, phone number, account name, or other similar identifiers.
  • Internet activity information, such as Internet protocol (IP) address, device and advertising identifiers, browser type, operating system, Internet service provider, the web page that directed you to our services, the date and time of your visit, information about how you engage with us (e.g., the links or buttons you click and pages you view of our website or applications), whether an email was opened, and other standard server log information.

We operate in the capacity of the controller of your personal data. This implies that we autonomously define the processing purposes and select relevant processing services and tools.

To provide products and services sought or to respond to queriesName, surname, email address, phone number,Biometric data (face liveness recognition), Company name, Information about the products or service you ordered, your positionContract, Consent2 years after the end of the provision of the products and/or service and the expiration of the contract
To respond to your comments, questions, and requests and to provide customer serviceName, surname, email address, postal address, phone numberLegitimate interest to develop our business and satisfy our clients’ needs1 year after your last communication with our company, unless you have objected to such processing
To handle and boost client experience by enhancing our understanding of our clientsInternet activity information, information provided by third-party cookies(Find more information about using cookies in our Cookie policy).ConsentUntil consent withdraw
To propose a service to a client drawing on services she/he formerly boughtName, surname, email address, phone number, Company name, Information about the products or the service you ordered, your positionLegitimate interest to foster our company and to serve our clients’ requirements2 years after your last communication withour company, unless you have objected to such processing
Mailing of advertising productsemail addressConsentUntil you withdraw consent

We neither use automated decision-making nor your personal data to automatically assess aspects of your personality (automated profiling).

  • Access, correct or erase (right to be forgotten)

You have the right to access, correct, or erase your personal data and the right to restrict their processing, as well as the right to data portability.

  • Restrict

You have the right to restrict the processing of your personal data.

  • Data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided where technically feasible.

  • Withdraw Consent

If we process your data based on your consent, you have the right to withdraw your consent at any time. If you would like to exercise your right to withdraw your consent, please contact us.

  • Complaint

Pursuant to Art. 77 GDPR, you, as a data subject, have the right to file a complaint with a supervisory authority of the EU Member State in which your permanent place of residence, place of work or in which there was an alleged violation of your information privacy.

To exercise any of these rights or in case some questions about the protection of your personal data remain, you can contact us at

Our website, products and services are not directed to minors under 16. If we learn that we have collected the personal data of a minor under 16 we will take steps to delete such information from our files as soon as possible.

Who do we share your personal data with?

Info regarding these business entities and their data protection methods:

  • Auth0: Email verification, user authorization. Privacy policy link
  • SumSub — personal verification & liveness check, document validation. Privacy policy link
  • Altpay —payment service provider, payment details keeper. Altpay privacy policy
  • CreditReform —credit score provider. CreditReform privacy policy
  • Mailgun — email service provider. Mailgun privacy policy
  • Google Analytics —information about use of the Site and the Services. Google Analytics may also collect information about your IP address, browser type, and access times. Google privacy policy
  • Google Tag Manager —marketing and analytics tags on the Site. Google Tag Manager may collect information about your use of the Site and theServices, such as your IP address, browser type, and access times. Google privacy policy
  • Digital Ocean —hosting provider for our websites. May collect information about your use of the Site and the Services, such as your IP address, browser type, and access times. Digital Ocean privacy policy
  • Webflow —hosting provider for our website. They may collect information about your use of the Site and the Services, such as your IP address, browser type, and access times. Webflow privacy policy

As part of our business processes, it is possible that we also transfer your personal data to recipients in countries outside the European Economic Area (EEA), which do not have an adequacy decision by the Commission. In such transfers,we have provided appropriate safeguards such as standard data protection clauses (SCC) adopted by the Commission.

To the extent that we do so, we comply with applicable data protection requirements and take appropriate security measures to protect your personal information. This is done in particular by using the applicable EU standard contractual clauses.

If you would like to obtain a copy of adopted appropriate safeguards and additional information about adopted supplementary measures, you can always contactus using the contact details below.

How we protect personal information

We use technical and organizational restrictions to protect personal data from unauthorized access or misuse. These protective measures include the implementation of certain technologies and procedures to protect your privacy, such as secure servers, firewalls and SSL encryption. We act at all times in accordance with applicable laws and regulations regarding the confidentiality and security of personal data.

© 2024 Rexalto. All rights reserved.