Last Updated: august, 2023
Privacy Policy
This Privacy Policy is designed to protect the privacy, secrecy, safety, unity, and integrity of our clients’ personal data in accordance with the best international standards and practices.
The provisions of this Privacy Policy shall apply to the processing of personal data, whether totally or partially, through automatically operated electronic systems or other means about:

  • visitors of the website (hereafter, the “Site”)
  • contact persons for our clients and/or prospective clients
  • contact persons for suppliers of goods and services to the Company
  • any other individuals about whom the Company obtains Personal Data
We ensure your personal data is kept securely and protected from any breach, infringement, illegal or unauthorized processing. This Privacy Policy establishes technical and organizational measures and procedures in accordance with the latest data protection legislation and laws of the United Arab Emirates and Creative City Free Zone Authority.
1. Definitions
As used in this Privacy Policy, the following terms shall have the following meanings:
2. Purposes of Personal Data processing
The Company may process or ensure processing of Personal Data for the following purposes:

  • for the provision of professional services, including any professional advice given by the Company prior to the respective agreement,
  • for effective client relationship management and coordination of interactions with Clients,
  • to improve and develop the provision of services by the Company in order to ensure higher quality and reach higher standards of such services,
  • to comply with applicable laws, regulations, or regulatory requirements to which the Company is subject, including anti-money laundering laws and KYC checks,
  • to make our Site more intuitive and easier to use,
  • to protect the security and effective functioning of our Sites and information technology systems,
  • for any other purpose related or ancillary to any of the purposes listed hereabove, or for any purpose for which Personal Data was provided to the Company.
3. Principles of Personal Data protection
  • Processing must be made in a fair, transparent, and lawful manner.
  • Personal Data may be collected for the purposes stated in this Privacy Policy and may not be processed in a manner incompatible with such purposes. Personal Data may be processed if the purpose of processing is similar or close to the purpose for which such data is collected.
  • Personal Data shall be sufficient for and limited to the purpose for which the processing is made.
  • Personal Data must be accurate and correct and must be updated whenever necessary.
  • Personal Data must be kept securely and protected from any breach in accordance with other principles set by this Privacy Policy.
4. Types of Personal Data
The Company processes or ensures processing of the following types of Personal Data:
5. Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track the activity on Our Site and store certain information.

Cookies on our Sites are generally divided into the following categories:
6. Sources of Personal Data
The sources from which the Company collects Personal Data may include:

  • the natural person whose data is being collected,
  • third parties connected with the natural person, including an employer or service provider,
  • our Clients,
  • our service providers and counterparties,
  • other third parties,
  • anti-money laundering, anti-fraud databases, and sanctions lists,
  • other publicly available registers or sources of information.
Where the Company receives data from its clients about employees, customers or other individuals, the client is responsible for ensuring that any such data is transferred to us in compliance with applicable data protection laws.
7. Categories of recipients of Personal Data
Personal Data may be accessible to the Company and its employees. The categories of recipients of Personal Data may also include:
8. The Company’s obligations
  • The Company shall take the appropriate technical and organizational measures and procedures to apply the necessary standards to protect and secure Personal Data, in order to maintain its confidentiality and privacy and to ensure that it is not infringed, damaged, altered or tampered with, taking into account the nature, scope and purposes of processing and the potential risks to the confidentiality and privacy of the Personal Data.
  • The Company shall ensure that the processing of Personal Data is limited to its intended purpose.
  • The Company shall apply appropriate measures, both when defining the means of processing and during the processing itself, in order to comply with the applicable data protection legislation and laws, and provisions of this Privacy Policy.
  • In case of appointment of a processor, the Company shall ensure that such processor provides sufficient guaranties to apply technical and organizational measures in a manner that ensures that the processing meets the requirements, rules and principles stipulated in the applicable personal data protection legislation and laws.
  • The Company shall not take any action that would disclose the Personal Data or the results of processing, except in cases permitted by law.
  • The Company shall comply with other obligations arising from this Privacy Policy or the applicable personal data protection legislation and laws.
9. Cross-border Transfers of Personal Data
The Personal Data may be transferred outside the United Arab Emirates in the following cases:

  • if there is an adequate level of personal data protection in the country or territory to which the Personal Data is to be transferred,
  • if the United Arab Emirates accedes to bilateral or multilateral agreements related to personal data protection with the countries to which the Personal Data is to be transferred,
  • if it is permitted by a contract that obliges the parties to implement the provisions, measures, principles, and requirements set out in the applicable data protection legislation and laws of the United Arab Emirates and Creative City Free Zone Authority,
  • the express consent of the Data Subject to transfer his/her Personal Data outside the United Arab Emirates,
  • if the transfer is necessary to fulfill obligations and establish, exercise, or defend rights before judicial authorities,
  • if the transfer is necessary to enter into or execute an agreement between the Company and the Data Subject, or between the Company and a third party to achieve the Data Subject’s interests,
  • if the transfer is necessary to perform a procedure relating to international judicial cooperation,
  • if the transfer is necessary to protect the public interest.
10. Consent to Personal Data processing
The Client who is the Data Subject gives his/her consent to Personal Data processing, by performing any actions listed in chapter 1 paragraph 5 of current Privacy Policy.

The Client who is the Data Subject confirms that his/her consent to Personal Data processing is given in a clear, simple and unambiguous manner.

If the Client provides (disclose) Personal Data of another Data Subject, this Client guarantees that he/she has the prior consent of the Data Subject for such disclosure.
11. Retention of data
The Company shall only retain the Personal Data for as long as it is necessary to fulfill the purpose for which it was collected.

The Personal Data will typically be retained by the Company for the duration of the relevant retainer and up to 10 years thereafter unless such information is or may be otherwise required to be retained for a longer period by any applicable laws or regulations, in which case such Personal Data shall be retained for such longer period.
12. Your Rights and Choices
You have certain rights regarding your personal information.
13. Changes
We may update this Privacy Policy to reflect changes in our practices or applicable laws. The "Last Updated" date at the top indicates the latest revision date. Continued use of our Site after such changes constitutes your acceptance of the revised Privacy Policy.
14. Contact us
If you have any further questions, concerns, or complains in relation to our use of your Personal Data, please do not hesitate to email us at info@mdc-consulting.group.