Legal

Privacy Policy

This Privacy Policy explains how GULF CONSULT Advisory ("GULF CONSULT", "we", "us" or "our") collects, uses, stores, and protects information you provide when interacting with our website (gulfconsult.ae) and our services. We are committed to protecting your personal data in accordance with applicable UAE data protection laws, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

Last updated: January 2025 · Effective date: January 2025 · Governing law: UAE Federal Law

1. Who We Are

GULF CONSULT Advisory is a UAE-licensed business consultancy providing e-invoicing, accounting, tax, audit, business setup, ERP implementation, compliance and growth advisory services across Dubai and the United Arab Emirates. Our registered address is in Dubai, UAE. For all privacy-related queries, contact us at [email protected].

2. Information We Collect

We collect the following categories of personal data:

a) Information you provide directly: name, email address, phone number, company name, job title, and any other details you submit via our website contact forms, consultation booking forms, newsletter subscription, or direct communication with our team.

b) Service engagement data: business details, financial information, corporate documents, and other information you share with us in the course of receiving our advisory services. This information is treated as strictly confidential professional information.

c) Website usage data: IP address, browser type, pages visited, time spent on pages, referring URLs, and device information, collected via standard web analytics tools. This data is aggregated and not linked to your identity unless you have also submitted a contact form.

d) Communication records: records of emails, calls, and meetings you have with our advisory team, retained for service quality and compliance purposes.

3. How We Use Your Information

We use your personal data to respond to enquiries and provide the advisory services you have requested; to send our Monthly Intelligence Report and other content you have subscribed to; to manage our client relationship and comply with our professional obligations; to improve our website and service offerings; to comply with applicable UAE legal, regulatory and professional obligations (including Anti-Money Laundering / Know Your Customer requirements where applicable); and to contact you about services or updates relevant to your business where we have a legitimate interest in doing so.

We do not sell, rent or trade your personal data to third parties for marketing purposes. We do not process online payments, no payment card data is collected or stored by GULF CONSULT on this website.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UAE PDPL and applicable law: your consent (e.g. newsletter subscription); contractual necessity (e.g. delivering services you have engaged us for); legal obligation (e.g. AML/KYC compliance, tax record retention); and our legitimate interests in operating and improving our advisory business, where these do not override your rights.

5. How We Share Your Information

We share personal data only in the following limited circumstances:

Service providers: we engage trusted third-party technology and service providers (e.g. email platforms, website hosting, analytics) who process data on our behalf under contractual data processing agreements. These providers are not permitted to use your data for their own purposes.

Professional advisors: lawyers, insurers and other professional advisors bound by duties of confidentiality.

Regulatory authorities: where required by UAE law, court order, FTA, or other competent regulatory authority.

Business transfers: in the event of a merger, acquisition or sale of our business, subject to confidentiality obligations.

We do not share client data with third parties for commercial or marketing purposes without your explicit consent.

6. Data Retention

We retain personal data for as long as necessary to provide our services and comply with our legal obligations. Client engagement files are typically retained for a minimum of 5 years following the end of an engagement, in line with UAE tax record retention requirements. Newsletter and marketing data is retained until you unsubscribe. Website analytics data is retained in aggregated form. You may request deletion of your data at any time (see Section 8).

7. Cookies & Website Tracking

Our website uses cookies and similar tracking technologies to improve user experience and measure website performance. These include strictly necessary cookies (required for the site to function), analytics cookies (used in anonymised form), and preference cookies. You may disable non-essential cookies via your browser settings. Disabling cookies may affect some website functionality but will not prevent you from accessing our content.

8. Your Rights

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), you have the following rights in relation to your personal data:

Right of access: request confirmation of whether we hold your personal data and obtain a copy. Right to correction: request correction of inaccurate or incomplete data. Right to erasure: request deletion of your data, subject to our legal retention obligations. Right to withdraw consent: withdraw consent at any time where processing is based on consent. Right to object: object to processing based on our legitimate interests. Right to data portability: request transfer of your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may request proof of identity before processing your request.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no internet transmission is completely secure and we cannot guarantee absolute security.

10. International Data Transfers

Our primary operations are based in the UAE. Some of our third-party service providers (e.g. cloud hosting, email platforms) may process data outside the UAE. Where this occurs, we ensure appropriate contractual safeguards are in place to protect your data in accordance with UAE PDPL requirements.

11. Children's Privacy

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us immediately at [email protected].

12. Third-Party Links

Our website contains links to third-party websites (including UAE government portals such as tax.gov.ae and mof.gov.ae). We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.

14. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or our handling of your personal data, please contact GULF CONSULT Advisory at [email protected], or write to us in Dubai, United Arab Emirates.