Skip to policy

Legal

Privacy Policy

How we handle your information.

Last updated:

This Privacy Policy explains how Almanova Consulting - FZCO (“Almanova”, “we”, “us” or “our”) collects, uses and protects personal data when you visit almanova-consulting.com, contact us or interact with us in connection with our services.

01Who We Are & Contact

Almanova Consulting - FZCO is responsible for the processing described in this policy. We are incorporated in the International Free Zone Authority (IFZA), Dubai, United Arab Emirates.

For privacy questions or requests, email privacy@almanova-consulting.com.

We process personal data under applicable data protection laws, including UAE Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (UAE PDPL), and other laws where they apply to the relevant processing, including the GDPR.

02Personal Data We Collect

  • Information you provide: your name, email address, company or organisation, selected area of interest, message and any other information you choose to share with us.
  • Technical and usage information: browser, device and operating system details, IP address, network information, approximate location, pages viewed, interactions, visit dates and duration, referring websites or campaigns, and information needed to operate and secure the website. Collection depends on the technology used, your settings and consent preferences.

Our contact form requires your name, email address and message so we can receive and respond to your enquiry. Company and area of interest are optional. Without the required information, you cannot submit the form.

Please avoid sending sensitive or unnecessary personal data. Only provide information about another person if you are authorised or otherwise legally permitted to do so.

03How We Use Data & How Long We Keep It

We process personal data for specified purposes and on a basis permitted by applicable law. For enquiries and business relationships, this may include taking steps at your request towards a potential relationship or pursuing legitimate business interests where that basis is available. Those interests include responding to business enquiries and managing professional relationships. Analytics is subject to consent where required.

Purposes and retention criteria
PurposeData used and retention
Respond to enquiriesContact details and message content, kept as reasonably necessary to review, respond and follow up. Enquiries that do not lead to an ongoing relationship are periodically reviewed and may be deleted when no longer needed.
Manage business relationshipsRelevant contact and professional information to discuss projects, prepare proposals, communicate and maintain records. Kept during the relationship and afterwards as needed for applicable legal, accounting, regulatory, contractual or limitation requirements and legal claims.
Operate and secure the websiteTechnical information to deliver, maintain and troubleshoot the website, prevent abuse and protect our systems. Kept only as reasonably necessary for those purposes and applicable legal requirements.
Understand website usageAnalytics information to assess performance and improve content and user experience. Retention follows the settings configured in our Google Analytics account and applicable service settings.

When personal data is no longer needed, we delete or anonymise it where reasonably practicable, unless further retention is required or permitted by law.

Submitting our contact form does not subscribe you to newsletters or marketing. Any future marketing communications would require an appropriate lawful basis and, where required, your consent, together with relevant information and choices.

04Service Providers & Sharing

We do not sell personal data. Our principal website providers are:

  • Vercel: hosting, content delivery, security and infrastructure. It may process IP addresses, request details, device or browser information and timestamps to provide these services.
  • Resend: email delivery. It processes the information in contact-form submissions as necessary to transmit and deliver enquiries to us.
  • Google: Google Analytics 4 (GA4), used to measure and understand website usage as described below.

These providers process information according to their roles and applicable contractual and legal requirements. We may also share data with other providers supporting our business and security, professional advisers, competent authorities where required or permitted by law, and parties involved in establishing, exercising or defending legal claims. We limit disclosure to what is reasonably necessary.

05Cookies & Analytics

Our website uses cookies and similar technologies. The necessary almanova_consent cookie remembers your choices on this browser for 182 days. Technologies strictly necessary for operation, security and delivery may operate without consent where permitted by law.

We use GA4 to understand how visitors find and use the website. Depending on your consent preferences and the service configuration, it may process device and browser details, pages visited, session and interaction data, referral sources, approximate location and other measurement information. Cookies and similar technologies may distinguish users and sessions.

Where consent is required, analytics will only be activated after you consent through our cookie consent mechanism. You may reject non-essential analytics or change or withdraw consent using Cookie settings in the footer. Google Analytics cookies are configured to last up to 182 days; this cookie lifetime is separate from the analytics data retention settings described above. Turning analytics off removes accessible first-party analytics cookies and reloads the page to stop further collection; it does not delete data already collected. Withdrawing consent does not affect the lawfulness of earlier processing.

We do not intentionally send your contact-form name, email address, company or message content to Google Analytics.

06International Data Transfers

Almanova is based in the UAE, and our technology providers operate internationally. Personal data may therefore be processed or stored outside your country, including outside the UAE, by providers and their authorised subprocessors.

Where applicable law requires safeguards for international transfers, we take reasonable steps to ensure that an appropriate mechanism is used. Depending on the transfer, this may involve a recognised adequate jurisdiction, contractual safeguards or another mechanism permitted by law.

Contact privacy@almanova-consulting.com for information about transfers affecting your data and, where applicable, how to obtain a copy of the relevant safeguards.

07Data Security

We use appropriate technical and organisational measures designed to protect personal data against loss, destruction, alteration and unauthorised access or disclosure, taking account of the data, processing and associated risks. We seek to use reputable providers and restrict access to people who reasonably need it for legitimate business purposes.

No internet transmission or electronic storage system can guarantee absolute security.

08Your Privacy Rights

Depending on the law applicable to you and the processing, you may have the right to:

  • Receive information about, and access to, your personal data.
  • Correct inaccurate or incomplete data or request deletion.
  • Restrict or stop certain processing, or object to it.
  • Request transfer of your data where portability rights apply.
  • Withdraw consent without affecting the lawfulness of processing before withdrawal.
  • Exercise other rights available under applicable law.

These rights are subject to applicable conditions, limitations and exemptions. To make a request, email privacy@almanova-consulting.com with enough detail for us to understand it. We may request information reasonably needed to verify your identity, locate your data and prevent unauthorised disclosure.

Where the GDPR applies, we will respond without undue delay and normally within one month. If an extension is permitted because of the complexity or number of requests, we will explain the reason within that first month; the extension may be up to two further months.

You may also complain to the competent data protection authority. Under the GDPR, this includes the authority in the country of your habitual residence, place of work or the alleged infringement. You do not need to contact us first. Find the relevant authority in the European Data Protection Board directory.

09Other Information & Updates

Children: our website and services are intended for businesses and professionals, not children. We do not knowingly seek to collect children's data. Contact us if you believe a child has provided personal data so we can review the situation and take appropriate action.

External websites: third-party links lead to services with their own privacy practices. We do not control their content, security or handling of data. Review their privacy information before sharing personal data.

Updates: we may revise this policy when our services, processing, providers, business practices or legal requirements change. We publish the revised version here and update the date above, with additional notice of material changes where appropriate or required. Please review this page periodically.