Privacy Policy

1. Introduction

Synthorix Consulting LLC ("Synthorix", "we", "us") is a business consulting practice registered and operating in Dubai, United Arab Emirates. We take the handling of personal information seriously and are committed to processing it only in ways that are necessary, proportionate, and secure.

This policy explains what personal data we collect, why we collect it, how long we keep it, and what rights you have in relation to it. It applies to data collected through our website, through our enquiry form, and through the course of advisory engagements. Questions may be directed to [email protected].

2. What Data We Collect and Why

We collect a limited amount of personal data. The categories and their purpose are as follows:

• Contact information (name, email address, phone number): collected when you submit our enquiry form. Used to respond to your enquiry and to manage the engagement if one proceeds. Legal basis: legitimate interest in responding to a business enquiry; or performance of a contract where an engagement is agreed.
• Engagement data: financial records, operational documents, and other business information shared during an advisory engagement. Collected only with explicit client agreement. Used solely to carry out the agreed engagement. Legal basis: performance of contract.
• Website usage data: anonymised analytics data (pages visited, session duration) collected via cookies if you consent. Used to understand how the website is used and to improve it. Legal basis: consent.

Retention: Contact enquiry data is retained for up to 24 months following initial contact, unless an engagement proceeds, in which case engagement records are retained for seven years in accordance with UAE commercial record-keeping requirements. Website analytics data is retained for 14 months. Engagement documents are returned or destroyed at the client's request upon conclusion of the engagement.

3. How We Use Your Data

• To respond to your initial enquiry and discuss whether an engagement is appropriate
• To carry out the advisory work you have engaged us to do
• To issue invoices and maintain financial records as required by UAE law
• To improve our website, where you have consented to analytics cookies

We do not sell, rent, or otherwise share personal data with third parties for commercial purposes. We do not send marketing communications. If we use a third-party service to process data (such as a secure file transfer service), we ensure it is bound by appropriate confidentiality and data processing obligations.

4. Data Protection Measures

We apply the following measures to protect personal data:

• Engagement documents containing sensitive data are transferred via encrypted channels only
• Access to client files is restricted to the assigned advisor and is not shared internally without reason
• Physical and digital records are stored securely and are not accessible to unauthorised persons
• In the event of a data breach affecting your personal data, we will notify you without undue delay and in accordance with applicable UAE regulations

5. Cookies

Our website uses a small number of cookies. Essential cookies are required for the site to function and are always active. Optional analytics and preference cookies are only placed if you accept them via the cookie consent notice. For full details, please see our Cookie Policy.

6. Your Rights

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and where applicable, under DIFC Data Protection Law 2020 (for DIFC entities), you have the following rights in relation to personal data we hold about you:

• Access: to request a copy of the personal data we hold about you
• Rectification: to ask us to correct inaccurate data
• Erasure: to ask us to delete your data, subject to our legal obligations to retain certain records
• Objection: to object to processing based on our legitimate interests
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing
• Complaint: you may lodge a complaint with the UAE Data Office or the DIFC Commissioner of Data Protection, as applicable

To exercise any of these rights, please write to [email protected]. We will respond within 30 days.

7. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

8. Children's Privacy

Our services are directed at businesses and their principals and are not intended for persons under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will note the new date at the top of this page. Continued use of our website or services after the updated date constitutes acceptance of the revised policy.

10. Contact

For any privacy-related question or request, please contact us:

Synthorix Consulting LLC
Bay Square Building 6, Office 412
Business Bay, Dubai 45718, UAE
Email: [email protected]