Legal
Privacy Policy
Last updated: 29 October 2026
This policy explains how DOMINUS CONSULTANCY - FZCO (“Dominus”, “we”, “us”) handles personal data of visitors to this website and of people who contact us. It is designed to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, for visitors in the European Economic Area and the UK, the General Data Protection Regulation (GDPR).
1. Who is the controller
DOMINUS CONSULTANCY - FZCO, Free zone company (FZCO), Trade Licence No. 57137 issued by Dubai Integrated Economic Zones Authority (DIEZ) - IFZA. Registered office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. Contact: the contact form on this website. Data protection contact: the contact form on this website.
2. Data we collect
- Enquiry data: name, company, email, phone, service of interest, budget range and message you submit through the contact form or calendar booking.
- Communications: emails and call notes when you contact us.
- Technical and usage data: IP address, device and browser information and pages viewed - collected through cookies and similar technologies only with your consent (except strictly necessary ones).
- Consent record: your cookie choices.
2A. Purposes and lawful basis
| Purpose | Lawful basis (PDPL / GDPR) |
|---|---|
| Responding to enquiries and arranging calls | Steps at your request prior to a contract; legitimate interests |
| Providing consultancy services and managing the relationship | Performance of a contract |
| Analytics and improving the website | Consent |
| Marketing communications (if any) | Consent, which you can withdraw at any time |
| Legal, tax, anti-money-laundering and regulatory obligations | Legal obligation |
| Security, fraud prevention and defending claims | Legitimate interests |
3. Sharing your data
We do not sell personal data. We share it only with service providers acting on our instructions - for example our website host (Vercel), transactional email provider (Resend), calendar provider (Cal.com / Calendly, if you use it) and analytics providers (Vercel Analytics and Google Analytics 4, only with your consent) - and with professional advisers, authorities or counterparties where you ask us to make an introduction or where the law requires.
4. International transfers
Some providers process data outside the UAE and the EEA, including in the United States. Where we transfer personal data internationally we rely on adequate protection as recognised by the relevant authority, standard contractual clauses or other safeguards permitted by the PDPL and GDPR.
5. Retention
- Enquiries that do not lead to an engagement: up to 24 months.
- Client records and contracts: for the duration of the relationship and the period required by UAE law (generally at least five years).
- Analytics data: according to the provider's settings, normally up to 14 months.
- Consent records: up to 6 months before we ask you again.
6. Your rights
Subject to applicable law you may request access to your data, correction, erasure, restriction or objection to processing, data portability, and you may withdraw consent at any time without affecting prior processing. To exercise a right, write to the contact form on this website. We will respond within the timeframes set by law (one month under the GDPR).
You may lodge a complaint with the UAE Data Office or, if you are in the EEA or UK, your local supervisory authority.
7. Security
We use technical and organisational measures proportionate to the risk, including encrypted connections (HTTPS), access controls and vetted processors. No system is perfectly secure; we will notify you and the authorities of a breach where required.
8. Cookies
See our Cookie Policy. You can change your choices at any time using “Cookie settings” in the footer.
9. Children
This website is intended for business users and is not directed at children under 18.
10. Changes
We may update this policy. Material changes will be flagged on this page with a new date.