General Data Protection Policy

Working draft — pending review by UAE-licensed legal counsel before being relied on for external audits or procurement due diligence. Last updated: September 13, 2026.

1. Purpose

This policy sets out how DXI Logistics LLC (“DXI”, “we”) collects, uses, stores, and protects personal data belonging to customers, employees, job applicants, and business partners, in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”) and its executive regulations.

2. Scope

This policy applies to all personal data processed by DXI in the course of its relocation, warehousing, and freight forwarding operations, whether collected via our website, in person, by phone, or through business partners, and to all employees, contractors, and third-party processors acting on DXI’s behalf.

3. Data Protection Principles

• Personal data is collected for specified, explicit, and legitimate purposes only.
• Data collected is adequate, relevant, and limited to what is necessary.
• Data is kept accurate and, where necessary, kept up to date.
• Data is retained only for as long as necessary — see our Privacy Policy for specific retention periods.
• Data is processed securely, protecting against unauthorized access, loss, or damage.

4. Data Subject Rights

Under the PDPL, individuals whose data we process have the right to:

• Request access to their personal data.
• Request correction of inaccurate data.
• Request erasure of their data, subject to legal retention requirements.
• Object to or restrict certain processing.
• Withdraw consent previously given, where processing is consent-based.

Requests can be submitted to [DATA_PROTECTION_CONTACT_EMAIL]. We aim to respond within [RESPONSE_PERIOD].

5. Cross-Border Data Transfers

Where personal data is transferred outside the UAE (for example, to a third-party service provider), DXI ensures an adequate level of protection is in place, consistent with PDPL requirements for cross-border transfers.

6. Data Breach Response

In the event of a personal data breach likely to result in a risk to individuals’ rights, DXI will assess the breach and, where required by the PDPL, notify the UAE Data Office and affected individuals without undue delay.

7. Roles & Responsibilities

Overall accountability for this policy sits with [RESPONSIBLE_ROLE_OR_NAME]. All staff handling personal data are required to complete data protection awareness training on joining and periodically thereafter.

8. Policy Review

This policy is reviewed at least annually, or sooner if UAE data protection law changes. Approved by: [APPROVER_NAME_AND_TITLE].