We are Ethisis LLC-FZ, a boutique Data Privacy, AI, and ESG consulting firm, headquartered in Dubai.
The information in this Notice serves as part of our privacy promise to you.
We understand that not everyone enjoys reading about privacy and data protection as much as we do, so we’ve tried to make it easy for you to find the information you are looking for, by clicking on the relevant headings below.
The purpose of this Notice is to inform you about how and why we collect and process your personal data, the steps that we take to ensure it remains secure, and how we support the exercise of individual privacy rights.
Data privacy is at the very heart of what we do at Ethisis. We are guided by ethics and the fundamental principles of privacy in everything we do, including, most importantly, how we handle your personal data. It stands to reason that we will always protect and respect your privacy, and that if we ever need to collect, process, store or share your personal data, we will do so safely and securely.
· are a current or prospective client of Ethisis;
· are employed by a current or prospective client of Ethisis; or
· visit our website at www.ethisis.com, this Notice applies to you.
This Notice was last updated on 28 November 2023.
Most of the data we collect is business information, and we try to keep it to that.
However, we do collect personal data when you provide it to us via our website, when you email us, when you contact us by phone, or when you otherwise interact with us directly (for example, at in-person events).
The personal data we collect from you may include:
- your first and last names;
- your email address;
- your phone number;
- your work address;
- your job title; and
- any personal data that you choose to share with us in forms or the content of your messages to us.
We kindly ask that you refrain from including any personal data within the content of your messages to us, unless it is absolutely necessary.
We may also collect personal data that you have made publicly available, including information you have published on social media channels (such as LinkedIn), on professional networking platforms, or provided at industry events.
Our website does not intentionally collect any personal data from you automatically. We have not enabled any cookies on our website that are not strictly necessary to ensure its function.
When you contact us via our website or email, we may use your personal data to respond to your request, and to keep you updated about any resources or services that may be relevant to you, in order to enter into a contract with you or your organization, or with your consent.
When you seek information about our services or engage us, we will process your personal data to provide you with a quote or proposal, to deliver our advice and services to you, to issue and communicate with you about invoices and payments, and to maintain our accounts and records. We do this to perform our obligations under the contract to which you or your organization are a party.
When communicating with you and managing our day-to-day business operations, we share your personal data with our third-party service providers (listed in the section below), so that we are able to perform our obligations under the contract to which you or your organization are a party.
We may also need to share personal data about you or your organization:
• if it is necessary to prevent fraud, or to enable us to comply with a legal obligation or court order;
• in the event of default, to enable us to recover debts owed to us; or
• in connection with any merger, or acquisition of our business.
For us to keep our website and business up and running, and so that we are able to communicate with you and provide you with our services, we need to share your personal data with the following third parties:
We set a high standard for data protection and privacy for ourselves, and we expect nothing less of any third-party that we engage to help us deliver our services to you. We will always ensure that these third parties are contractually bound to provide your data with the same level of protection that it is afforded when it is in our care.
If we share your personal data with a third-party service provider located outside of the UAE, we will ensure it is afforded a level of protection equivalent to that provided under our local data protection laws. We will always ensure adequate protections (such as binding data processing agreements, and robust technical and organizational safeguards) are in place, to protect your persona data and your privacy rights.
If we are required to share your data under any other circumstances (for example, in order to comply with a legal obligation or court order), we will take all necessary steps to ensure it remains adequately protected.
Our data handling practices are built on a foundation of necessity, purpose, and minimization, and we incorporate privacy protection into the design of all our systems and processes. For example, we secure our systems and devices, and ensure access to your personal data is restricted.
We only store your data for as long as is necessary for the purposes outlined in this Notice, according to our retention schedules, after which we will safely dispose of it, according to our secure data deletion processes.
Despite our best efforts to protect your personal data, we cannot guarantee the security of data transmitted via the internet. Please ensure you access our website from a secure environment, and always take care when disclosing your personal data over the internet.
You have certain rights and choices available to you, in relation to your personal data. These rights are listed below. We will always respect your privacy rights, and we will respond to your request to exercise them as promptly as possible.
Right of Access to Information
In addition to the information set out in this Notice, you can ask us to confirm whether we are processing personal data about you, and if so, to provide more specific information about how we process it.
Right to Correct or Delete Personal Data
You can ask us to correct the personal data we hold about you, if you believe it is inaccurate or incomplete. Please note that we may need to verify the accuracy of any new data you provide to us. In certain circumstances, you can ask us to delete your personal data (for example, after you withdraw your consent to processing).
Right to Restrict Processing
You can ask us to temporarily restrict our processing of your personal data if you contest its accuracy, prefer to restrict its use rather than having us delete it, or need us to preserve it for you to establish, exercise, or defend a legal claim. A temporary restriction may apply while verifying whether we have overriding legitimate grounds to process it. You can ask us to inform you before we lift that temporary processing restriction.
Right to Data Portability
In certain circumstances, where you have provided personal data to us, you can ask us to transmit that personal data (in a structured, commonly used, and machine-readable format) directly to another company, if is technically feasible.
We do not conduct any automated decision-making processes using your personal data.
So that you are aware, you do have the right to request a review of any decisions made about you which based on automated processing, including profiling, which produced legal effects concerning you or similarly significantly affected you. You have the right not to be subject to such decisions, and to request an element of human intervention in the review of these decision.
Right to Object to Direct Marketing including Profiling
Unless we expressly obtain your consent, we will not use any personal data you provide us for direct marketing purposes. You can object to our use of your personal data for direct marketing purposes. We may need to retain some information to comply with your request, but this will be limited to the minimum amount necessary. We will action your request immediately, but it may take up to a week for your preferences to be updated across all of our systems.
Right to Withdraw Consent
You can withdraw consent you have previously given, at any time. If you withdraw your consent, we may not be able to provide certain services to you, but we will always inform you if this is the case.
Right to Complain
You have the right to complain to the relevant data protection supervisory authority in your jurisdiction. We will always welcome the chance to deal with any concerns or complaints you may have in the first instance.
We may need to request additional information from you to help us verify your identity, and to ensure your right to access, or to exercise any other rights. This helps us to ensure we don’t disclose your personal data to any person who has no right to receive it. We will respond to your request within the timeframe required by law, and we will not charge you a fee to process your request, unless your request is clearly unfounded or excessive.
In certain circumstances, we may be unable to comply with your request, for example:
• where we are unable to confirm your identity;
• where information requested is of a confidential commercial nature; or
• where granting you access would harm the privacy of other individuals.
We will always notify you in writing of our reasons for not being able to comply with your request.
You can exercise your privacy rights at any time, by making a request using the contact details below.
If you wish to exercise your privacy rights, or if you have any questions or concerns about our handling of your personal data, you can contact us at any time via email at email@example.com.
You can also write to us via post, at our company address below:
Att: Ethisis LLC-FZ
Business Center 1, M Floor, The Meydan Hotel
Nad Al Sheba, Dubai, U.A.E