Varren - Registrations and Data Protection Contacts

Alpha Innovation Technologies - F.Z.C, a free zone company registered in Ajman Free Zone, United Arab Emirates, trading as AlphaIT Engineering. Effective date: 22 September 2026 Version: 1.2 Published at: https://varren.co/representatives

This page identifies the entity accountable for personal data at Varren, its registrations, and the contact route for data protection matters. It states the position in force on the date above.

1. Contact and response times

Data protection questions and requests to access, correct, port, delete, restrict or object to the processing of personal data are made to [email protected], with "Data request" in the subject line and a description of the request. There is no charge.

• European Economic Area and United Kingdom. Alpha Innovation Technologies - F.Z.C responds without undue delay and within one month of receipt, extendable by two further months for complex or numerous requests, in which case it notifies the requester within the first month with the reason, under Article 12(3) of the GDPR and of the UK GDPR.
• All other jurisdictions, including Nigeria, Kenya and the United Arab Emirates. Alpha Innovation Technologies - F.Z.C responds within thirty (30) days, with the same maximum extension and duty to explain it.
• California and other United States state privacy laws. Alpha Innovation Technologies - F.Z.C responds within forty-five (45) days, extendable once by a further forty-five days.

Every request is answered on the timetable above by Alpha Innovation Technologies - F.Z.C directly.

2. The controller

Alpha Innovation Technologies - F.Z.C is the contracting party and the entity responsible for the Service and for the Privacy Policy. A Nigerian company in the same group, Alpha Innovations Technologies Limited (Nigeria company registration RC 7450573), exists within the group. There is no Kenyan entity and no other group company. Where a group affiliate issues a local invoice, that determines who bills the customer and does not change the entity responsible for the customer's data.

3. Registrations by jurisdiction

4. Nigeria

Alpha Innovation Technologies - F.Z.C is not entered on the Nigeria Data Protection Commission's register of data controllers and data processors of major importance. It will register, and publish the registration number and tier on this page, once it processes the personal data of more than 200 persons in Nigeria in any six-month period.

Section 65 of the Nigeria Data Protection Act 2023 defines a controller or processor of major importance by reference to domicile, residence or operation in Nigeria and the processing of more than a prescribed number of Nigerian data subjects. Article 8(2) of the Commission's General Application and Implementation Directive 2025 provides that operating in Nigeria includes targeting a data subject in Nigeria. The prescribed number is 200 data subjects in six months. Neither the Act nor the Directive imposes a local address or a resident representative on a foreign organisation. The register is public at https://services.ndpc.gov.ng/repo/?flp=dcmi.

Enquiries from Nigeria are made to [email protected]. Complaints may be made to the Commission using the details in section 7.

5. Kenya

Alpha Innovation Technologies - F.Z.C is not registered with the Office of the Data Protection Commissioner in Kenya and holds no Kenyan registration certificate, because it does not process the personal data of persons located in Kenya. If and when it does, it will assess whether the small organisation exemption in regulation 13 of the Registration Regulations 2021 applies, register if it does not, and publish the certificate number and renewal position on this page.

Section 4(b)(ii) of the Kenya Data Protection Act 2019 reaches a controller or processor not established in Kenya that processes the data of persons located in Kenya, so a Kenyan entity is not required for the duty to apply; the trigger is a person in Kenya whose data is processed, who may appear within a customer's contact list. Regulation 13(2) exempts organisations with annual turnover below 5 million Kenyan shillings and fewer than ten employees, and regulation 13(4) withdraws that exemption from businesses wholly or mainly engaged in direct marketing. Whether a platform that conducts outreach on customers' behalf falls within regulation 13(4) will be assessed at the point Kenya becomes live.

6. United Arab Emirates

Alpha Innovation Technologies - F.Z.C is established in the United Arab Emirates and is subject to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

The executive regulations under that law have not been issued and the UAE Data Office is not fully operational, so mechanisms the law contemplates, including the approved-country list for international transfers, do not yet exist in practice. Alpha Innovation Technologies - F.Z.C applies the GDPR as its operating baseline in every country it serves and will file with the UAE Data Office when the regulations require it and publish the filing on this page. For transfers of UAE data it relies on Article 23 of Federal Decree-Law No. 45 of 2021, using contracts that impose enforceable data protection requirements.

7. Complaints

Complaints may also be made to Alpha Innovation Technologies - F.Z.C at [email protected].

8. Maintenance of this page

This page is updated when any registration is made or any assessment behind it is completed, and reviewed at least every six months. The following are published here on the day each occurs: the NDPC registration number and tier, and the Kenyan certificate number and renewal position if Kenya becomes live.

Read this page together with the Privacy Policy at https://varren.co/privacy, the Data Processing Addendum at https://varren.co/dpa, and the Terms of Service at https://varren.co/terms. Varren is a product of Alpha Innovation Technologies - F.Z.C, trading as AlphaIT Engineering.