Privacy Policy
This policy explains how Brightloop Consultancy collects, uses, stores, and protects your personal information in accordance with UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law).
1. Information We Collect
1.1 Information You Provide
When you engage with Brightloop Consultancy — through our website, consultation requests, or direct communications — we may collect: full name, professional title, organisation name, business email address, phone number, project scope details, and any documentation voluntarily submitted.
1.2 Information Collected Automatically
We may automatically collect technical information when you access our website, including: IP address, browser type and version, device identifiers, pages visited, time and date of access, and referring URLs. This data is collected via cookies and similar tracking technologies.
1.3 Information from Third Parties
We may receive information about you from business partners, publicly available databases, or referral sources in the context of a potential or existing engagement.
2. How We Use Your Information
2.1 Service Delivery
To process consultation requests, deliver contracted services, communicate project updates, and manage our ongoing client relationship.
2.2 Business Operations
To maintain our internal records, produce invoices and contracts, comply with legal obligations, and improve our service offerings.
2.3 Marketing & Communications
With your consent, to send executive briefings, industry insights, and updates relevant to your sector. You may opt out at any time by contacting us at info@brightloop.ae.
2.4 Security & Compliance
To detect and prevent fraudulent or unauthorised activity, conduct background verification where required by engagement protocol, and meet regulatory obligations under UAE law.
3. Data Storage & Security
3.1 UAE Data Residency
Brightloop Consultancy is incorporated in the AL Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE. Where operationally possible, client data is stored within UAE-based infrastructure. International transfers are governed by appropriate safeguards in compliance with UAE Personal Data Protection Law (PDPL) Federal Decree-Law No. 45 of 2021.
3.2 Security Measures
We implement AES-256 encryption, access controls, regular security audits, and zero-trust network architecture to protect your data. Our internal systems adhere to ISO 27001-aligned information security practices.
3.3 Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by UAE law. Client engagement data is typically retained for seven (7) years following project completion.
4. Sharing Your Information
4.1 Service Providers
We may share data with vetted sub-processors (cloud infrastructure, legal, accounting) strictly to deliver our services. All processors are contractually bound to equivalent data protection standards.
4.2 Legal Obligations
We may disclose information to UAE regulatory authorities, courts, or law enforcement agencies where required by applicable law or valid legal process.
4.3 No Commercial Sale
We do not sell, rent, or trade your personal information to third parties for commercial purposes under any circumstances.
5. Cookies & Tracking
5.1 Types of Cookies
We use essential cookies (required for site function), analytical cookies (to understand usage patterns), and preference cookies (to remember your settings). We do not use advertising or cross-site tracking cookies.
5.2 Managing Cookies
You may manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality. A full cookie policy is available on request.
6. Your Rights
6.1 UAE Resident Rights
Under the UAE PDPL, you have the right to access personal data we hold about you, correct inaccurate data, request erasure (subject to legal retention obligations), object to processing, and withdraw consent where processing is consent-based.
6.2 Exercising Your Rights
To exercise any of these rights, submit a written request to info@brightloop.ae. We will respond within thirty (30) days. Identity verification may be required before processing your request.
7. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in law, technology, or our operations. The effective date at the top of this page will be updated accordingly. Continued use of our website or services after any update constitutes acceptance of the revised policy.
8. Contact
For any privacy-related enquiries, please contact our Data Protection Officer: Brightloop Consultancy CWEP3862, Compass Building, Al Shohada Road AL Hamra Industrial Zone-FZ Ras Al Khaimah, United Arab Emirates Email: info@brightloop.ae Phone: +971 54 350 8225