Data controller: VSA Consulting FZE, United Arab Emirates.

Licence No.: [to be inserted] · Registered address: [to be inserted]

E-mail: info@vsaconsultingfze.com

1. What this policy covers

This policy explains how VSA Consulting FZE (“VSA”, “we”) handles personal data of visitors to this website and of clients, prospective clients and their representatives in connection with our consulting services. We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where applicable to clients located in the European Economic Area, the General Data Protection Regulation (GDPR).

2. Data we collect

This website does not use advertising or profiling cookies. It loads fonts from Google Fonts, which may record the IP address of your device to deliver the font files.

3. Why we use your data

We do not sell personal data and we do not send marketing communications without your consent.

4. Sharing of data

Personal data may be shared with service providers who help us operate (hosting, e-mail, accounting and IT services), bound by confidentiality and data-processing obligations, and with authorities where required by law. Some providers may be located outside the UAE or the EEA; in such cases we rely on appropriate safeguards, including contractual protections.

5. Retention

Enquiry data is kept for up to 24 months after our last contact. Engagement data is kept for the duration of the engagement and for the period required by applicable legal, accounting and limitation rules, generally up to 10 years. Technical logs are kept for a short period by our hosting provider.

6. Your rights

Subject to applicable law, you may ask to access, correct, delete or restrict the processing of your personal data, object to processing based on legitimate interest, request portability, and withdraw consent where processing is based on consent. You may also lodge a complaint with the competent data protection authority. To exercise your rights, write to info@vsaconsultingfze.com.

7. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls and encrypted connections. No system is completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

8. Changes

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.