Privacy policy
What happens to information about you on this site, written to match how the site works today.
Who is responsible for your data
Operator details are published here before this site launches. The controller's legal name, licence, address and contact email will appear in this section, and no personal data is collected through the site until they do.
What is collected
When you read the site: the site is a set of static pages. It sets no cookies, runs no analytics and embeds no advertising or tracking code. Our host, Cloudflare, receives the technical data any website request carries, such as your IP address, browser type and the page requested, in order to deliver the page and protect the service from abuse.
When you send a quote request: the request service is not open yet, so no page on the site currently has form fields and nothing is collected this way. When it opens, the form will collect the country, type of business activity and number of visas you choose, your name, and either an email address or a WhatsApp number, together with the page you sent it from and your two consent choices.
When a business asks about the website plan: your name, the business name, a work email, a phone or WhatsApp number if you give one, the country your firm works in, and your consent to be contacted. Bookings are not open yet, so nothing is collected this way today.
Why it is used, and on what basis
- Passing your request to setup consultants so they can quote. The basis is your consent, given with the first tick box on the form.
- Letting those consultants contact you on the channel you chose. The basis is your consent, given separately with the second tick box.
- Replying about the website plan, arranging the call and, if you go ahead, preparing the agreement. The basis is your consent, given on the form, and the steps you ask us to take before a contract.
- Delivering and securing the site through our host. This is necessary to provide a service you asked for by visiting a page.
Consultants may pay us a fee for an introduction. It doesn't change what you pay, and it is not a sale of your data to advertisers or list brokers.
Who receives it
- Cloudflare, Inc., which hosts the site on Cloudflare Pages and processes request data on its global network, including in the United States.
- A form-processing service that receives submitted requests and forwards them to us. Its name and the country where it stores data will be listed here before the form opens.
- Business setup consultants licensed in the country you choose: firms that register companies, arrange visas and handle the paperwork with the licensing authority. Once a consultant receives your request, they hold it as a separate controller under their own privacy policy.
Transfers outside your country
Cloudflare and form-processing services run infrastructure in several countries, and consultants may be based in a different Gulf country from you. Where personal data leaves the UAE, Qatar or Kuwait, we rely on the transfer rules of the law that applies to you: under the UAE law, a transfer to a country with adequate protection or one of the exceptions it allows (Articles 22 and 23), including your consent, and contractual data protection terms with our processors. Your consent on the form covers the transfer of your request to the consultants who receive it.
How long it is kept
Quote requests and website plan enquiries are kept for 12 months from the day they are received, then deleted, unless you ask us to delete them sooner. If a business takes the plan, what we need to run the contract and keep its invoices is kept for as long as the agreement lasts and the law requires records to be kept. Our host keeps its request logs for the periods set in its own policy.
Your rights
Whichever of the three countries you are in, you can ask to see the personal data we hold about you, to have it corrected, to have it deleted, to limit or object to its use, and to withdraw consent at any time. Withdrawing consent does not undo a request already passed to a consultant; contact that firm as well. We answer requests without undue delay.
- United Arab Emirates: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you are not satisfied with our answer, you can complain to the UAE Data Office. Companies in the DIFC and ADGM follow those centres' own data protection laws.
- Qatar: Law No. 13 of 2016 on Personal Data Privacy Protection. Complaints go to the National Cyber Security Agency, which oversees the law.
- Kuwait: the Data Privacy Protection Regulation issued by the Communication and Information Technology Regulatory Authority (CITRA). Complaints about processing covered by it go to CITRA.
Cookies, analytics and advertising
Today there are none. If we add analytics or advertising, this section will be updated before they go live, and any cookie that is not strictly necessary will wait for your choice in a consent banner.
Security
Pages and form submissions travel over an encrypted connection. The site itself stores no submissions. No system is free of risk, so please do not send passport copies, bank details or other sensitive documents through a form.
Children
The site is for adults setting up companies. It is not aimed at children and does not knowingly collect their data.
Changes to this policy
When this policy changes, the date below changes with it. This version is dated .