Legal Document

Privacy Policy

This policy explains how Brightloop Consultancy collects, uses, stores, and protects your personal information in accordance with UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law).

calendar_monthEffective Date: 1 January 2026
location_onJurisdiction: Ras Al Khaimah, UAE
verified_userAES-256 Encrypted Processing

1. Information We Collect

1.1 Information You Provide

When you engage with Brightloop Consultancy — through our website, consultation requests, or direct communications — we may collect: full name, professional title, organisation name, business email address, phone number, project scope details, and any documentation voluntarily submitted.

1.2 Information Collected Automatically

We may automatically collect technical information when you access our website, including: IP address, browser type and version, device identifiers, pages visited, time and date of access, and referring URLs. This data is collected via cookies and similar tracking technologies.

1.3 Information from Third Parties

We may receive information about you from business partners, publicly available databases, or referral sources in the context of a potential or existing engagement.

2. How We Use Your Information

2.1 Service Delivery

To process consultation requests, deliver contracted services, communicate project updates, and manage our ongoing client relationship.

2.2 Business Operations

To maintain our internal records, produce invoices and contracts, comply with legal obligations, and improve our service offerings.

2.3 Marketing & Communications

With your consent, to send executive briefings, industry insights, and updates relevant to your sector. You may opt out at any time by contacting us at info@brightloop.ae.

2.4 Security & Compliance

To detect and prevent fraudulent or unauthorised activity, conduct background verification where required by engagement protocol, and meet regulatory obligations under UAE law.

3. Data Storage & Security

3.1 UAE Data Residency

Brightloop Consultancy is incorporated in the AL Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE. Where operationally possible, client data is stored within UAE-based infrastructure. International transfers are governed by appropriate safeguards in compliance with UAE Personal Data Protection Law (PDPL) Federal Decree-Law No. 45 of 2021.

3.2 Security Measures

We implement AES-256 encryption, access controls, regular security audits, and zero-trust network architecture to protect your data. Our internal systems adhere to ISO 27001-aligned information security practices.

3.3 Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by UAE law. Client engagement data is typically retained for seven (7) years following project completion.

4. Sharing Your Information

4.1 Service Providers

We may share data with vetted sub-processors (cloud infrastructure, legal, accounting) strictly to deliver our services. All processors are contractually bound to equivalent data protection standards.

4.2 Legal Obligations

We may disclose information to UAE regulatory authorities, courts, or law enforcement agencies where required by applicable law or valid legal process.

4.3 No Commercial Sale

We do not sell, rent, or trade your personal information to third parties for commercial purposes under any circumstances.

5. Cookies & Tracking

5.1 Types of Cookies

We use essential cookies (required for site function), analytical cookies (to understand usage patterns), and preference cookies (to remember your settings). We do not use advertising or cross-site tracking cookies.

5.2 Managing Cookies

You may manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality. A full cookie policy is available on request.

6. Your Rights

6.1 UAE Resident Rights

Under the UAE PDPL, you have the right to access personal data we hold about you, correct inaccurate data, request erasure (subject to legal retention obligations), object to processing, and withdraw consent where processing is consent-based.

6.2 Exercising Your Rights

To exercise any of these rights, submit a written request to info@brightloop.ae. We will respond within thirty (30) days. Identity verification may be required before processing your request.

7. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in law, technology, or our operations. The effective date at the top of this page will be updated accordingly. Continued use of our website or services after any update constitutes acceptance of the revised policy.

8. Contact

For any privacy-related enquiries, please contact our Data Protection Officer: Brightloop Consultancy CWEP3862, Compass Building, Al Shohada Road AL Hamra Industrial Zone-FZ Ras Al Khaimah, United Arab Emirates Email: info@brightloop.ae Phone: +971 54 350 8225

call+971 54 350 8225