Introduction
This Privacy Policy explains how Aurlume Consultants ("we," "us," or "our"), a consulting firm registered in Dubai, United Arab Emirates, collects, uses, discloses, and protects the personal information of our clients, prospective clients, and visitors to our website.
This policy applies to all individuals who visit our website or engage with our services, regardless of where you are located. We are committed to handling your information responsibly and in compliance with applicable privacy laws — including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA), where applicable.
By using our website or engaging our services, you acknowledge the practices described in this policy.
Information We Collect
- Name, email address, phone number, and job title
- Company name and business address
- Project details, goals, and materials shared during engagements
- Payment and billing information
- Communications, meeting notes, and correspondence
- Website usage data (pages visited, time spent, referring URLs)
- IP address and approximate geographic location
- Browser type, device type, and operating system
- Cookies and similar tracking technologies (see Section 9)
We do not intentionally collect sensitive personal data — such as health information, financial account credentials, or government ID numbers — unless specifically required for a service engagement and with your explicit consent.
How We Use Your Information
We use the information we collect to:
- Deliver consulting services and fulfill our contractual obligations
- Communicate with you about projects, proposals, and deliverables
- Send invoices and process payments
- Improve our services and website experience
- Comply with applicable legal obligations under UAE law and other jurisdictions
- Contact you about services that may be relevant to your business (you may opt out at any time)
We process your personal data only where we have a lawful basis to do so:
- Contract performance — to deliver services you have engaged us for
- Legitimate interests — to operate and improve our business, where your rights do not override our interests
- Legal obligation — to comply with applicable laws
- Consent — for marketing communications, which you may withdraw at any time
How We Share Your Information
We do not sell your personal information. We may share it only in the following circumstances:
- Service providers who support our operations (e.g., billing software, email platforms, cloud storage), bound by confidentiality and data processing obligations
- Professional advisors such as attorneys or accountants, where necessary
- Legal authorities when required by UAE law or the laws of another applicable jurisdiction, or to protect our rights and the safety of others
- Successor entities in the event of a merger, acquisition, or sale of business assets
Information shared as part of a client engagement is also governed by the confidentiality terms in your service agreement.
We do not sell or share personal information for cross-context behavioral advertising. In the preceding 12 months, we have not sold any personal information. California residents have the right to request disclosure of personal information collected, request deletion, and opt out of any future sale. To submit a request, contact us at the details in Section 10.
Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, maintain accurate business records, and comply with legal requirements under UAE law and other applicable regulations.
Client engagement records are typically retained for 3 years following the conclusion of an engagement, unless a longer retention period is required by law. Website usage data collected via cookies is retained in accordance with the settings described in Section 9.
When personal information is no longer required, we securely delete or anonymize it.
Your Rights
Depending on your location, you may have one or more of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you
- Correction — request that inaccurate or incomplete information be corrected
- Deletion — request that your personal information be erased, subject to legal obligations
- Restriction — request that we limit how we process your data in certain circumstances
- Portability — receive your data in a structured, machine-readable format (EU/UK residents)
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
- Complaint — lodge a complaint with the relevant data protection authority in your country
Your rights are governed by Federal Decree-Law No. 45 of 2021 on Personal Data Protection. You may submit requests directly to us or to the UAE Data Office.
You have rights under the GDPR and may lodge a complaint with your local supervisory authority. Where required, we will identify our EU representative upon request.
You have rights under the UK GDPR and may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of your rights, contact us using the details in Section 10. We will respond within the timeframe required by applicable law.
International Data Transfers
Our business is based in Dubai, UAE. If you are located outside the UAE, your personal information will be transferred to and processed in the UAE. We may also work with service providers located in other countries.
Where we transfer personal data internationally, we ensure an appropriate level of protection is maintained, including by:
- Transferring only to countries or territories recognized as providing adequate data protection
- Using standard contractual clauses or equivalent transfer mechanisms where required under GDPR or UK GDPR
- Applying contractual, technical, and organizational safeguards with all third-party processors
Data Security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or loss. These measures are reviewed and updated on an ongoing basis.
No method of transmission over the internet or electronic storage is completely secure. While we take data security seriously, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to affect your rights or freedoms, we will notify you and the relevant authorities as required by applicable law.
Cookies
Our website uses cookies and similar technologies to support site functionality, analyze usage, and where applicable, deliver relevant content. Cookies are small text files stored on your device when you visit our site.
We use the following types of cookies:
- Essential cookies — necessary for the website to function and cannot be disabled
- Analytics cookies — help us understand how visitors interact with the site (e.g., pages viewed, session duration)
- Preference cookies — remember your settings and choices across visits
You can control or disable non-essential cookies through your browser settings at any time. Where required by law — including for visitors from the EU, UK, and similar jurisdictions — we will request your consent before placing non-essential cookies. Disabling certain cookies may affect some features of our website.
Contact Us
If you have questions about this Privacy Policy, wish to access your data, or want to exercise any of your rights, please contact us at info@aurlumeconsultants.com
We aim to respond to all requests within 30 days, or within any shorter period required by applicable law.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will revise the effective date at the top of this page.
For material changes, we will make reasonable efforts to notify you — for example, by posting a notice on our website or contacting you directly where appropriate.
We encourage you to review this policy periodically to stay informed about how we handle your information.
