Privacy
Policy.

1. Who we are

The controller responsible for the personal data described in this Privacy Policy is:

We process personal data primarily under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”). Where the EU General Data Protection Regulation (“GDPR”) applies because we offer services to individuals in the European Economic Area, the relevant GDPR requirements also apply.

2. Scope of this policy

This policy applies to personal data processed through this website and in connection with enquiries made by email, telephone or WhatsApp.

The website is used to present our services and allow potential clients to contact us. We do not operate an online checkout and no service contract is concluded merely by visiting the website or clicking a contact button.

3. Data we collect

Information you provide

• name;
• email address;
• telephone or WhatsApp number;
• company or proposed company information you choose to provide;
• the content of your enquiry and subsequent communications;
• documents or information you voluntarily send during a later consultation or onboarding process.

Technical and usage data

When you use the website, technical information may be processed automatically, including IP address, browser type, device information, operating system, referring URL, pages visited, timestamps and similar server or security information.

Analytics, advertising and interaction information

Our website uses measurement and website-usage technologies including Google Analytics, Google Ads conversion tracking and Microsoft Clarity. Depending on your consent choices, location and the configuration of these services, they may process information such as page views, approximate location, device and browser information, IP-related information, referral information, advertising or click identifiers, conversion events, session information, online identifiers and interactions with website elements.

Microsoft Clarity may additionally process interaction events such as clicks, scrolling, mouse movements, window resizing and similar events, as well as page and DOM information used to provide website analytics and session-replay functionality. Privacy-sensitive form fields are intended to be masked by Clarity; nevertheless, you should avoid entering sensitive information into website fields unless it is necessary for your enquiry.

4. How and why we use personal data

• to respond to enquiries and requested consultations;
• to prepare or discuss an individual quotation;
• to take steps requested by you before entering into a service agreement;
• to communicate by email, telephone or WhatsApp;
• to operate, secure, maintain and troubleshoot the website;
• to prevent misuse, fraud, security incidents and unauthorised access;
• to understand website usage through Google Analytics and Microsoft Clarity where permitted and, where required, after consent;
• to measure the effectiveness of our advertising and enquiries through Google Ads conversion tracking where permitted and, where required, after consent;
• to comply with applicable legal, regulatory or governmental obligations;
• to establish, exercise or defend legal claims where necessary.

UAE legal basis

Under the UAE PDPL, processing is carried out with consent where consent is required or under an applicable statutory exception. In particular, the UAE PDPL permits processing without consent where it is necessary to perform a contract with the data subject or to take steps requested by the data subject to conclude, amend or terminate a contract, and in certain other cases provided by law.

GDPR legal basis where applicable

• Article 6(1)(b) GDPR for enquiries, quotations and pre-contractual steps requested by you;
• Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation;
• Article 6(1)(f) GDPR for proportionate website security, fraud prevention, troubleshooting and protection of legal claims;
• Article 6(1)(a) GDPR for non-essential analytics and advertising storage and related processing through Google Analytics, Google Ads and Microsoft Clarity where consent is required.

We do not use the website to make solely automated decisions that produce legal or similarly significant effects about you.

5. Email, phone & WhatsApp

Email

If you contact us by email, your message and contact details are processed to handle your enquiry. Our public email address is operated using Microsoft Outlook services. Microsoft may process technical and communication data under its own service terms and privacy framework.

Telephone

If you call us, we process the information you provide during the call to respond to your request and, where relevant, prepare next steps for a potential engagement.

WhatsApp

Our website may contain a link that opens WhatsApp. No WhatsApp communication is initiated merely by viewing the page. When you choose to use WhatsApp, the service is provided by WhatsApp/Meta and your data may also be processed under WhatsApp’s own privacy terms. Please do not send sensitive personal documents by WhatsApp unless this has been specifically requested and an appropriate channel has been agreed.

6. Analytics, Google Ads & Microsoft Clarity

Google Analytics

We use Google Analytics to measure website usage and understand how visitors interact with our pages. Depending on the applicable consent state and Google configuration, Google Analytics may process online identifiers, IP-related information, device and browser information, approximate location, referral information, pages viewed, session information and website interactions.

Google Ads conversion tracking

We use Google Ads conversion tracking to measure whether advertising results in actions such as enquiries or other defined conversions. Google Ads may process advertising or click identifiers, conversion information, device/browser information and related technical data. We use this information to measure campaign effectiveness and improve our advertising.

Where Google Consent Mode is used, consent signals may include analytics_storage, ad_storage, ad_user_data and ad_personalization. These signals control how Google tags use storage and advertising-related data. We do not state that a visitor has consented unless a valid consent choice has been made.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors use and interact with the website. Clarity can collect page and technical information and interaction events such as clicks, scrolling, mouse movements, window resizing and similar usage events. It can also process DOM and layout information to provide heatmaps, diagnostics and session-replay functionality. Clarity uses masking and other privacy controls for privacy-sensitive content.

Clarity may use first-party and third-party cookies or pseudonymous identifiers when the applicable consent state permits this. Where Clarity operates without cookie consent, functionality and cross-page session continuity may be limited.

7. Cookies, consent & your choices

The website may use cookies, similar browser storage and online identifiers for necessary website operation, analytics and advertising measurement. Non-essential analytics or advertising storage is managed according to the visitor’s consent choices where consent is required by applicable law or provider requirements.

For visitors in the European Economic Area, United Kingdom, Switzerland and other jurisdictions where prior consent is required, our intended configuration is that non-essential analytics and advertising storage remains denied until a valid choice is made. Google Consent Mode can communicate the visitor’s choices to Google services, and Microsoft Clarity Consent Mode can communicate the applicable analytics and advertising storage choices to Clarity.

You may refuse non-essential cookies or withdraw a previous consent choice. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Where a consent-management interface is available on the website, you can use it to update your preferences.

Browser settings may also allow you to block or delete cookies. Blocking cookies can affect the operation or measurement of some website features.

8. Hosting & server data

This website is hosted by Hostinger. In providing hosting, security, network and related technical services, Hostinger may process website visitor data on our behalf, including IP addresses, request information, server logs and security data.

Hostinger may use data centres and subprocessors in different countries. The exact infrastructure may depend on the hosting configuration and services used.

9. Who may receive your data

We do not sell personal data. We disclose personal data only where necessary, including to:

• Hostinger and its authorised subprocessors for website hosting and technical infrastructure;
• Google in connection with Google Analytics and Google Ads measurement/conversion tracking where enabled;
• Microsoft in connection with Microsoft Clarity and Outlook email services;
• WhatsApp/Meta when you choose to communicate with us through WhatsApp;
• professional advisers, accountants, legal advisers or service providers where necessary;
• government bodies, courts, regulators or law-enforcement authorities where disclosure is required or permitted by law.

If you later engage us for company formation or related services, additional information may need to be shared with licensing authorities, free-zone authorities, immigration bodies, banks, tax authorities, medical/ID service providers or other parties required for your specific setup. Where relevant, this will be explained as part of the service process.

10. International data transfers

Because we operate from the UAE and use international service providers, personal data may be processed outside your country of residence and outside the UAE or EEA.

Where cross-border transfer requirements apply, we use or rely on legally recognised transfer mechanisms as applicable, such as adequacy decisions, contractual safeguards, standard contractual clauses, approved frameworks, explicit consent or another transfer basis permitted by the relevant law.

Hostinger’s current data-processing terms include contractual safeguards for international transfers, including EU Standard Contractual Clauses where applicable. Google also maintains international transfer mechanisms for its services.

11. How long we keep data

• General enquiries that do not lead to an engagement: normally up to 24 months after the last meaningful communication, unless a shorter period is appropriate or a longer period is necessary for a legal reason.
• Client or contractual records: for the duration of the relationship and thereafter for any period required by applicable UAE law, accounting, regulatory, evidentiary or limitation requirements.
• Google Analytics and Google Ads data: according to the retention settings configured in the relevant Google properties and any retention periods applied by Google to the applicable service.
• Microsoft Clarity data: according to the retention periods and controls applied by Microsoft Clarity to the applicable analytics and recording data.
• Technical and security logs: for a limited period necessary for security, troubleshooting and abuse prevention, or longer where an incident requires investigation or applicable law requires retention.

When data is no longer required, it is deleted, anonymised or otherwise handled in accordance with applicable law.

12. Your privacy rights

Rights under UAE law

Subject to the conditions and exceptions in the UAE PDPL, you may have rights including the right to obtain information about the processing of your personal data, request transfer of personal data, request correction or deletion, restrict certain processing, object to certain processing and automated decisions, and withdraw consent where processing is based on consent.

Additional GDPR rights where applicable

If the GDPR applies to the processing of your data, you may also have the right to access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. You may also lodge a complaint with the competent data protection supervisory authority in the EEA country in which you live, work or consider that an infringement occurred.

Rights are not absolute and may be limited by applicable law. We may need to verify your identity before responding to a request.

13. Data security

We use reasonable technical and organisational measures appropriate to the nature of the data and the risks involved. These may include access controls, secure hosting configurations, encrypted communications where available, account-security measures, data minimisation and limiting access to people or providers who need it.

No internet transmission or storage method is completely risk-free. If we become aware of a personal data breach, we will assess and handle it in accordance with applicable legal notification requirements.

14. Changes to this policy

We may update this Privacy Policy when our website, service providers or legal obligations change. The date at the top of this page shows when this policy was last updated.

15. Privacy requests

To ask a privacy question or exercise a privacy right, contact us: