REX SAI LLC, founded by Rex Sai, is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage our services.
REX SAI LLC operates the website rexsai.mom and provides computer systems design and integration services. This Privacy Policy describes our data handling practices in compliance with applicable laws including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) for EU residents, and other regional data protection frameworks. By using our website or services, you agree to the practices described herein.
When you contact us through our website contact form, send us an email at guide@rexsai.mom, or engage with our services, we may collect the following categories of personal information:
When you visit our website, certain information is automatically collected through standard web technologies. This includes:
Our website may use cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. Cookies are small text files placed on your device that help us recognize returning visitors and understand usage patterns. The types of cookies we may employ include:
You can control cookie preferences through your browser settings at any time. Most browsers allow you to block, delete, or receive alerts when cookies are set. Please note that disabling certain cookies may affect the functionality of our website. We do not currently use advertising or third-party marketing cookies on our website.
We do not knowingly collect sensitive personal data categories as defined under GDPR Article 9, including but not limited to racial or ethnic origin, political opinions, religious beliefs, genetic data, biometric data, health information, or data concerning sexual orientation. We do not collect payment card information or financial account details through our website. Our website is designed for business-to-business interactions and we do not maintain consumer credit profiles.
We use the information we collect for the following business and commercial purposes, each grounded in a lawful basis under applicable regulations:
For individuals located in the European Economic Area (EEA), United Kingdom, and other jurisdictions requiring a lawful basis for processing, we process your personal data under the following legal grounds:
REX SAI LLC does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:
We engage trusted third-party service providers to perform functions on our behalf, including web hosting, email delivery, data storage, analytics processing, and IT infrastructure management. These providers are bound by contractual obligations to handle your data securely, to process it only in accordance with our documented instructions, and to maintain confidentiality at all times. We conduct due diligence on all service providers and require them to maintain industry-standard security certifications.
In the event of a merger, acquisition, reorganization, asset sale, or similar corporate transaction involving REX SAI LLC, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any change in ownership or material change in the use of your personal data.
We may disclose your information if required to do so by law, court order, subpoena, or other legal process, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent fraud, or protect the personal safety of our users or the public.
We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with partners, researchers, or for public reporting purposes. This data is not considered personal information under applicable privacy laws.
REX SAI LLC is headquartered in Houston, Texas, United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central database are located. The data protection laws of the United States may differ from those of your jurisdiction.
For transfers of personal data from the EEA, UK, or Switzerland to the United States, we implement appropriate safeguards in accordance with GDPR Article 46 and Chapter V, which may include the use of Standard Contractual Clauses (SCCs) approved by the European Commission or the UK International Data Transfer Agreement, as applicable. We also conduct Transfer Impact Assessments (TIAs) to evaluate the legal landscape and implement supplementary technical, organizational, and contractual measures to ensure an equivalent level of protection for transferred data.
By using our website or services, you consent to the transfer of your information to the United States and other countries where we or our service providers operate, subject to the safeguards described in this policy.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our retention periods are determined based on the following criteria:
When personal data is no longer needed for the purposes described in this policy, we will securely delete, anonymize, or archive it in accordance with our data lifecycle management procedures. Contact form submissions and associated metadata are typically retained for a period of three years after the last communication unless a longer retention period is mandated by law or contract.
We implement and maintain administrative, technical, and physical security measures designed to protect your personal information against accidental, unauthorized, or unlawful destruction, loss, alteration, access, disclosure, or use. Our security controls include:
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is entirely secure. We cannot guarantee absolute security, but we are committed to promptly notifying affected individuals and relevant authorities in the event of a data breach as required by applicable law.
Depending on your jurisdiction, you may have the following rights regarding your personal data. We will respond to verified requests within the timeframes prescribed by applicable law:
You have the right to request access to the personal information we hold about you. Upon verification of your identity, we will provide a copy of your data in a structured, commonly used, and machine-readable format. You may also request confirmation of whether we are processing your personal data and details about the categories of data, purposes of processing, and any third-party recipients.
You have the right to request correction of inaccurate or incomplete personal data that we hold about you. We encourage you to keep your information current and will promptly update any data found to be incorrect upon verified request.
You may request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, when you withdraw consent upon which processing is based, or when the data has been unlawfully processed. This right is subject to legal obligations that may require us to retain certain information.
You may request that we restrict the processing of your personal data in specific situations, including when you contest the accuracy of the data, when the processing is unlawful and you oppose erasure, or while we are verifying whether our legitimate grounds override your privacy interests.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller without hindrance from us, where processing is based on consent or contract and carried out by automated means.
You may object to the processing of your personal data based on our legitimate interests or for direct marketing purposes. Upon receiving a valid objection, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know what personal information we collect, use, disclose, and sell; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; and the right to limit the use and disclosure of sensitive personal information. REX SAI LLC does not sell or share personal information as defined by the CCPA and does not use or disclose sensitive personal information for purposes other than those permissible under the act. We will not discriminate against you for exercising any of your CCPA rights.
To exercise any of the rights described above, please contact us using the details provided in Section 10 of this policy. We may need to verify your identity before processing your request, which may require you to provide additional information such as your name, email address, and a description of your relationship with REX SAI LLC. We aim to acknowledge all verifiable requests within 10 business days and resolve them within 30 to 45 calendar days depending on the complexity of the request and the applicable legal framework.
If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For EU residents, a list of national data protection authorities is maintained by the European Data Protection Board at edpb.europa.eu. For UK residents, the Information Commissioner's Office (ICO) can be contacted at ico.org.uk. For California residents, the California Privacy Protection Agency is the designated enforcement authority.
Our website and services are not directed to, and we do not knowingly collect or solicit personal information from, children under the age of 16. REX SAI LLC provides enterprise-focused computer systems design and integration services to business clients, and our marketing and content are tailored for professional audiences. If we become aware that we have inadvertently collected personal data from a child under 16 without verifiable parental consent, we will take prompt steps to delete that information from our records. If you believe a child under 16 has provided us with personal information, please contact us immediately.
If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us through any of the following channels. We take all privacy-related inquiries seriously and will respond promptly.
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or operational needs. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, provide notice on our website homepage or via email to clients with whom we maintain an active business relationship.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or services after any changes to this policy constitutes your acknowledgment and acceptance of the updated terms. If a change materially reduces your rights, we will not apply the change retroactively to data collected before the effective date of the change without your consent where required by law.