Privacy Policy

Regulatory compliance is a core part of how Avelia runs outbound. This policy explains what we collect, why we collect it, and how we protect it under GDPR, UAE PDPL, and applicable data protection law.

AVELIA.AI LTD operates Avelia. Registered office: 20 Wenlock Road, London, N1 7GU, England.

Our commitment

Avelia processes personal data to deliver governed outbound for sales and recruiting teams. We apply data minimization, purpose limitation, and security by design. Privacy and contact regulations are built into how outbound runs on every campaign, not added as afterthoughts.

Information we collect

  • Information you provide directly (name, email, company, market details).
  • Usage data (IP address, browser type, pages visited on our website).
  • Prospect, candidate, and account data processed on your behalf for outbound campaigns.
  • Campaign outcomes (replies, customer conversion outcomes, message metadata) required to operate the service.

How we use information

  • To operate governed outbound campaigns you authorize.
  • To enforce market rules, contact permissions, and regulatory requirements.
  • To improve the service and communicate about your account.
  • To comply with legal obligations and respond to lawful requests.

Website cookies and analytics

We store your cookie choice in this browser. Google Analytics stays off until you accept optional analytics. You can reject optional cookies or change your choice using Cookie settings at the bottom of any page. Rejecting cookies does not prevent you from browsing or booking a call. Analytics choices are separate from permission to contact you.

Lawful basis (GDPR)

For European data subjects, we process personal data on lawful bases including legitimate interest (B2B outreach where permitted), consent where required, and contractual necessity to deliver the service. We document purpose and limit processing to what is necessary for each campaign.

GDPR (European Union)

For campaigns in European markets, we process personal data in accordance with the General Data Protection Regulation (GDPR). This includes:

  • Data subject rights: access, rectification, erasure, restriction, portability, and objection.
  • Data minimization and storage limitation.
  • Appropriate technical and organizational security measures.
  • Contact and outreach activity aligned with applicable ePrivacy and national contact rules.

UAE PDPL and GCC data handling

For campaigns in Gulf markets, we align data handling with the UAE Personal Data Protection Law (PDPL) and applicable GCC data protection standards. This includes:

  • Processing personal data only for specified, legitimate outbound purposes.
  • Respecting data subject rights under PDPL and local requirements.
  • Contact permissions and data minimization built into campaign workflows.
  • Secure storage and restricted access to prospect and candidate data.

Outbound and contact compliance

Beyond privacy law, Avelia applies market-specific contact rules before every send: who may be contacted, on which channel, at what frequency, and with what consent or legitimate-interest basis.

Data retention

We retain personal data only as long as needed to operate campaigns, meet legal obligations, and maintain structured campaign memory. Retention periods vary by data type and market requirements. You may request deletion subject to legal and contractual limits.

Data security

We use industry-standard technical and organizational measures to protect data, including access controls, encryption in transit where applicable, and restricted internal access on a need-to-know basis.

International transfers

Where personal data is transferred outside its country of origin, we apply appropriate safeguards consistent with applicable law, including GDPR transfer mechanisms where required.

Your rights

  • Request access, correction, or deletion of your personal data.
  • Object to or restrict certain processing where applicable law provides that right.
  • Lodge a complaint with your local data protection authority (EU) or the UAE data office (PDPL).
  • For privacy requests, email privacy@avelia.ai.

Changes

We may update this policy to reflect legal or operational changes. Material updates will be posted on this page with a revised effective date.

Last updated: 6 October 2026