United Arab Emirates Privacy Supplement
Last updated: August 22, 2026
Overview
This supplement describes how GrowWise Omnix360 addresses the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) when we process personal data of individuals in the UAE. It supplements the General Privacy Policy.
PDPL can apply to controllers and processors outside the UAE that process personal data of UAE residents.
Roles
- For school/tenant education data, the Institution is typically the controller and GrowWise is the processor, see Schools Notice.
- GrowWise may be controller for marketing-site and direct account data.
Your PDPL-related rights
Subject to PDPL conditions, individuals may have rights to:
- Obtain information about processing
- Access personal data
- Request rectification or erasure
- Restrict or stop processing in certain cases
- Object to automated processing in certain cases
- Data portability where applicable
Requests: connect@thegrowwise.com. School-controlled data may be routed through the Institution.
Cross-border transfers
Omnix360 primarily processes data in the United States and other locations where our subprocessors operate. Transfers outside the UAE rely on contractual safeguards, adequacy where recognized, consent, or other PDPL-permitted mechanisms. See also the Subprocessor List.
Security and breach notification
We maintain security measures described in the General Privacy Policy. Breach notification will follow PDPL and any Executive Regulations once fully applicable, and our customer contracts.
Executive Regulations
Some PDPL details depend on Executive Regulations. We will update this supplement when those regulations require changes to our notices or processes.