Legal notice

Privacy Policy

This policy explains how Digital Ethics Advisors collects, uses, stores and protects personal data when you use this website and our services. It is written to align with the privacy expectations of the Gulf Cooperation Council (GCC) region, including the UAE Personal Data Protection Law (PDPL), DIFC Data Protection Law No. 5 of 2020, ADGM Data Protection Regulations 2021, the Saudi Personal Data Protection Law (PDPL), Qatar Law No. 13 of 2016, Bahrain Law No. 30 of 2018, Kuwait CITRA Data Privacy Protection Regulation and Oman Personal Data Protection Law.

Last updated: 16 August 2026

1. Who we are

Digital Ethics Advisors is a privacy and AI governance advisory practice based in Dubai, United Arab Emirates. We act as the data controller for personal data collected through this website and for initial enquiries submitted via our contact form.

For any privacy questions, you can reach us at: contact-us@digitalethicsuae.com.

2. What personal data we collect

We only collect the personal data you choose to give us:

  • Contact details: name, work email, company name and any other information you include in your message.
  • Technical data: IP address, browser type, device information and pages visited, collected through standard server logs and analytics cookies.
  • Communication records: emails and notes from calls or meetings that are necessary to provide our advisory services.

We do not intentionally collect sensitive personal data through this website.

3. How we use your data

We use personal data for the following purposes:

  • Responding to enquiries and arranging consultations.
  • Providing the privacy, AI governance and DPO advisory services you request.
  • Improving website performance, content and user experience.
  • Fulfilling legal, regulatory or professional obligations.
  • Sending occasional updates about regulatory developments, where you have consented.

We do not sell personal data, and we do not use it for automated decision making that produces legal or similarly significant effects.

4. Lawful basis for processing

Under GCC privacy frameworks, processing must be fair, lawful and transparent. We rely on the following bases:

  • Consent: where you tick a consent box or explicitly agree to receive communications.
  • Contract: where processing is necessary to enter into or perform an advisory engagement.
  • Legitimate interests: for website security, analytics and responding to unsolicited enquiries, balanced against your rights.
  • Legal obligation: where we are required to retain or disclose data by applicable law or professional rules.

5. Data sharing and international transfers

We only share personal data with trusted third parties when necessary to operate our business or deliver services, such as:

  • Cloud hosting, email and analytics providers.
  • Other specialists in our curated advisory circle, with your knowledge.
  • Regulators, courts or law enforcement when legally required.

Where data is transferred outside the GCC, we take steps to protect it in a manner consistent with regional expectations, including contractual safeguards and transfer impact assessments where appropriate.

6. How long we keep your data

We keep personal data only for as long as needed for the purpose it was collected, or as required by law. Enquiry data is typically retained for 12 months after our last interaction unless it becomes part of an active engagement. Client files are retained in line with professional practice and regulatory requirements.

7. Your rights

Depending on the GCC framework that applies to you, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion or restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests or direct marketing.
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us at: contact-us@digitalethicsuae.com.

8. Security

We apply appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure or destruction. These include encrypted transmission, access controls, secure cloud environments and regular review of our service providers.

9. Cookies and analytics

This website uses a small number of cookies and analytics tools to understand how visitors use the site and to improve its performance. Where required by local law, we will obtain your consent before placing nonessential cookies. You can manage cookies through your browser settings.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The latest version will always be available on this page, and significant changes will be noted with a revised date.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: contact-us@digitalethicsuae.com
Location: Dubai, United Arab Emirates