Privacy Policy

D Consultants is a Dubai-based technology, AI, software and digital growth consultancy. For the processing covered by this Policy, the data controller is D Consultants L.L.C-FZ, located at Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Privacy contact: hello@dconsults.com. Telephone: +971 56 353 8654.

This Policy applies to our website, enquiry forms, sales and client relationship management, events, marketing communications, supplier interactions and other services that expressly link to it.

We usually act as controller when we decide why and how to process website visitor, prospect, client-contact, supplier and business relationship data. We may act as processor or service provider when we process personal data solely on a client's documented instructions. In that case, the client's privacy notice and our contract or data processing agreement govern that processing. Contact the relevant client first if your request concerns data that client controls.

A product, portal or campaign may provide a supplemental privacy notice. The supplemental notice controls for that specific processing if it conflicts with this general Policy.

• Identity and contact data, such as name, business email, telephone number, postal address and preferred contact method.
• Professional and organisation data, such as employer, job title, department, industry, company size, business needs and authority to act for an organisation.
• Enquiry and communication data, including messages, meeting notes, call details, support requests, feedback and correspondence.
• Client and project data, including proposals, contracts, instructions, requirements, access permissions, deliverables, support history and records needed to perform services.
• Transaction and compliance data, such as billing contact, invoice, payment status, tax information, due-diligence records and transaction references. Payment card details are normally handled by the relevant payment provider rather than stored by us.
• Technical and usage data, such as IP address, device and browser type, operating system, referral URL, pages viewed, approximate location derived from IP, timestamps, cookie identifiers and security logs.
• Marketing and preference data, such as newsletter choice, event interest, campaign engagement and opt-out status.
• Recruitment data if you apply to work with us, such as CV, qualifications, employment history, portfolio, interview notes, availability and work-authorisation information.
• AI interaction data if an AI-enabled feature is offered, such as prompts, uploaded content, generated responses, transcripts, feedback and related technical metadata.

• Directly from you when you complete a form, contact us, attend a meeting, request a proposal, sign a contract, use a service, subscribe to communications or apply for a role.
• From your employer, organisation, authorised representative, colleague, referral partner or a client that asks us to provide services.
• Automatically from your device and use of the website through server logs, cookies and similar technologies.
• From service providers and business systems, such as hosting, analytics, advertising, email, CRM, payment, security and collaboration tools.
• From lawful public and professional sources, such as company websites, professional networks, public registers and event lists, when relevant to a legitimate business purpose.

We process personal data only when an applicable legal basis permits it. The basis depends on the context and law. Under the GDPR, our typical bases are consent, steps requested before a contract, performance of a contract, compliance with a legal obligation and legitimate interests that are not overridden by your rights. Under the UAE PDPL, we rely on valid consent or another lawful case permitted by the UAE PDPL.

Where we rely on legitimate interests, those interests may include operating and securing our business, responding to business enquiries, improving services, maintaining professional relationships, preventing fraud and asserting legal rights. You may object where the law gives you that right.

Where consent is the basis, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal or processing that another legal basis permits.

We may use cookies, pixels, local storage and similar technologies to operate the website, remember preferences, understand use and measure campaigns. The exact technologies may change as our systems change, so the live cookie banner or cookie settings panel should identify current tools, purposes and durations.

• Strictly necessary technologies support core functions, security, load balancing, form submission and consent preferences.
• Preference technologies remember choices that improve your experience.
• Analytics technologies help us understand traffic and improve performance.
• Advertising technologies measure campaigns or support audience targeting, but only when deployed and lawfully enabled.

Where prior consent is required, we will not activate non-essential analytics or advertising technologies until you consent. You can change your choices through the cookie banner or persistent cookie settings control. Browser controls may also block or delete cookies, although doing so can affect site functionality.

Some services may use artificial intelligence, machine learning or automated workflows. If you use an AI-enabled feature, we may process the information you provide, generated results, feedback and technical metadata to provide, secure and improve that feature as described in the applicable service notice or contract.

Do not enter personal data or confidential information into an AI feature unless the interface and your organisation authorise it. AI providers may process information as subprocessors or independent controllers depending on the service and contract. We will identify material arrangements where required.

We do not intend to use ordinary public website data to make decisions based solely on automated processing that produce legal or similarly significant effects. If a service introduces that processing, we will provide specific notice, explain the main factors and expected consequences, and provide applicable rights such as human review, objection or challenge.

We will not use client-controlled personal data to train a general-purpose public model unless the governing contract and applicable law permit that use and any required notice or consent has been provided.

We disclose personal data only as reasonably necessary for the purposes described in this Policy, subject to appropriate contractual and security measures where required. Recipients may include:

• Hosting, cloud, database, cybersecurity, analytics, communications, CRM, customer support, collaboration, AI, payment and professional service providers.
• Employees, contractors and approved subcontractors who need access to perform their duties and are subject to confidentiality obligations.
• Clients, project partners or referral partners when you request an introduction, join a campaign or when disclosure is necessary to perform an agreed service.
• Professional advisers, auditors, insurers, banks and potential transaction counterparties under appropriate confidentiality restrictions.
• Courts, regulators, law enforcement and public authorities when disclosure is required or lawfully requested, or when necessary to protect rights, safety and security.
• A buyer, investor or successor in connection with a merger, financing, restructuring or transfer of all or part of the business, subject to lawful safeguards.

We do not rent or trade personal contact data. If a future activity falls within a legal definition of sale or sharing that requires an opt-out, we will provide the required notice and control before that activity begins.

D Consultants is established in the United Arab Emirates. Our service providers, clients and project teams may operate in other countries, so personal data may be transferred to or accessed from the UAE and other jurisdictions whose laws may differ from those in your country.

Where transfer restrictions apply, we use an available lawful mechanism and proportionate safeguards. These may include an adequacy decision, the European Commission's Standard Contractual Clauses, contractual and technical safeguards, a transfer assessment, or a specific legal exception. You may contact us for information about safeguards relevant to your data, subject to confidentiality and security restrictions.

We retain personal data only for as long as reasonably necessary for the purpose collected, including contractual, legal, accounting, security and dispute-resolution needs. Our baseline schedule is:

We may retain de-identified or aggregated information that no longer identifies an individual. A contract or supplemental notice may set a different retention period for a specific service.

We use administrative, technical and physical measures designed to protect personal data in a manner proportionate to its sensitivity and risk. Depending on the system, these measures may include access controls, multi-factor authentication, encryption in transit and at rest where appropriate, logging, backups, vulnerability management, staff confidentiality, vendor review and incident-response procedures.

No internet transmission or storage system can be guaranteed completely secure. You are responsible for protecting credentials and notifying us promptly if you suspect unauthorised access involving a D Consultants service.

Depending on the applicable law and circumstances, you may have the right to:

• Receive information about processing and request access to personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion or erasure where legal conditions apply.
• Request restriction or cessation of certain processing.
• Object to processing based on legitimate interests and object at any time to direct marketing.
• Receive or transfer certain personal data in a structured, commonly used and machine-readable format.
• Withdraw consent at any time where processing relies on consent.
• Object to or challenge certain solely automated decisions and request human review where applicable.
• Complain to the UAE Data Office or another competent authority where the complaint mechanism and law apply. If the GDPR applies, you may complain to the supervisory authority in the EEA country where you live, work or believe an infringement occurred.

Rights are not absolute. We may refuse or limit a request when the law permits, including to protect another person's rights, confidential information, legal privilege, security or legal claims. We will explain the applicable reason unless law prevents us from doing so.

You can opt out of marketing emails through the unsubscribe link or by contacting us. We may still send non-marketing messages about an enquiry, contract, security issue or service. Where business-to-business outreach is permitted without prior consent, we will use relevant professional contact data proportionately and honour objections.

Our website and services are intended for business users and are not directed to children. We do not knowingly collect personal data from a child through the general website. If you believe a child has provided personal data without appropriate authorisation, contact us so we can review and delete it where required.

Our website may link to third-party sites, platforms or integrations. Their privacy practices are governed by their own notices. Review those notices before providing personal data. A link does not mean that we control or endorse the third party's privacy practices.

We may update this Policy to reflect changes in law, technology, services or data practices. We will post the updated version with a new effective date. If a change materially affects how we use personal data, we will provide additional notice or obtain consent when required.

Questions, requests or complaints may be sent to:

We will try to resolve privacy concerns directly. This does not limit your right to contact a competent data protection or consumer authority.

Please also see our Terms and Conditions governing use of this website.