Privacy policy

1. Who is responsible for your data

Al Wadyat Capital decides why and how personal data collected through alwadyatcapital.com is processed, and is therefore responsible for it. Our office is at The Prism Tower, Unit 1503, Al Mostaqbal Street, Business Bay, Dubai, United Arab Emirates.

Any question about this policy, and any request concerning your own data, should be sent to info@alwadyatcapital.com. We ask that such requests are made in writing so that we can identify the correspondence they relate to and keep a record of what was asked and what was done.

This policy covers the website only. Where you become a client, a separate engagement letter governs the information you share with us in the course of that work, and it takes precedence over this document for that information.

2. What we collect, and when

We collect personal data in two circumstances: when you send us an enquiry, and — in a limited technical sense — when your browser requests a page.

The enquiry form asks for your name and email address, which are required in order to reply, and optionally for a company or project name and the stage the venture has reached. The free-text field is yours: whatever you choose to write there is collected along with the rest of the message. We ask that you do not include information you would not want held in an email record, and in particular that you do not send sensitive personal data, identity documents or credentials through this form.

If you write to info@alwadyatcapital.com directly, we collect your email address and the content of your message in the same way and for the same purposes.

When a page is requested, the infrastructure that delivers this website processes the technical data any web server needs in order to respond, which includes the IP address of the requesting connection, the requested path, the response status and general information about the browser. This is server-side operational data. It is not combined with enquiry data and is not used to build a profile of you.

3. Why we hold it

Enquiry data is held for one primary purpose: to read your message, decide whether we are the right firm for it, and reply. Where a conversation continues, the same data supports that correspondence.

A secondary purpose is our own record-keeping. An advisory firm needs to be able to establish what was asked and what was said, both to serve a client properly and to identify a conflict of interest before accepting new work. Keeping a record of correspondence is part of running the firm responsibly.

Technical request data exists so that the website can be delivered, so that abuse and attacks can be detected and mitigated, and so that faults can be diagnosed.

We do not use any data collected through this website for advertising, we do not sell it, and we do not add enquirers to a marketing list. If we ever wish to send you something that is not a reply to your own message, we will ask you first.

4. On what basis we process it

The legal basis for processing depends on the law that applies to you, which in turn depends on where you are. Rather than assert a single regime, we describe the position substantively.

Where you send an enquiry, the processing is necessary to respond to a request you made and, where relevant, to take steps at your request before entering into an engagement. Where we retain correspondence for record-keeping and conflict checking, we do so because we have a legitimate interest in operating the firm responsibly, and we have considered that interest against your privacy expectations before relying on it.

Where the applicable law requires consent for a particular activity — for example, non-essential analytics — we ask for it separately and do not treat silence as agreement. The cookie policy explains how that choice is recorded and how to change it.

Where local law grants you rights beyond those described in this policy, those rights apply and are not limited by anything written here.

5. Who else can see it

We do not share enquiry data with other clients, and we do not pass it to partner networks, brokers or introducers. If we believe another firm is better suited to your question, we will tell you its name so that you can approach it yourself, rather than forwarding your details.

A small number of service providers necessarily process data on our behalf in order for the website and our email to function. This website is published as a static site and delivered through a content delivery and hosting platform; the enquiry form is handled by a serverless function running on that same platform, which passes the message to an email delivery service so that it reaches our inbox; and our correspondence is held in our business email system.

These providers act on our instructions for the purpose of delivering the service and are not permitted to use the data for their own purposes. Because the infrastructure that serves this website is distributed internationally, data may be processed outside the United Arab Emirates. Where that happens we rely on the provider's contractual commitments and the safeguards it applies.

We may disclose data where we are legally required to do so, or where it is necessary to establish, exercise or defend a legal claim. Should that arise, we disclose no more than is required.

6. How long we keep it

Enquiry correspondence is kept for as long as it is needed to answer the enquiry and to maintain the record described in section 3. In practice, a message that leads to an engagement is kept for the life of that engagement and for the period afterwards during which we may need to demonstrate what was agreed; a message that leads nowhere is kept for a shorter period, sufficient to recognise a repeat approach and to run a conflict check.

We review held correspondence periodically and delete what is no longer needed for a purpose described in this policy. We do not state a single fixed retention period here because doing so accurately would require it to apply to every category, and it does not.

You may ask us at any time to delete correspondence relating to you. Where we can do so consistently with any legal obligation or an ongoing engagement, we will, and we will tell you what has been deleted and what, if anything, has been retained and why.

7. Your rights

Subject to the law that applies to you, you may ask us for a copy of the personal data we hold about you; ask us to correct it if it is inaccurate or incomplete; ask us to delete it; ask us to restrict how we use it; object to processing we carry out on the basis of a legitimate interest; and, where applicable, receive the data you provided in a portable form.

To exercise any of these, write to info@alwadyatcapital.com describing what you want. We may need to ask a question to be confident that we are dealing with the right person and with the right correspondence, and we will keep that verification proportionate.

We aim to respond substantively within thirty days. Where a request is complex we will say so, explain why, and give a realistic date. If you are dissatisfied with how we have handled a request, tell us first — most problems are a misunderstanding that a direct exchange resolves — and you retain the right to complain to the supervisory authority competent for you.

8. Security, children and changes to this policy

This website is served over an encrypted connection, and enquiry submissions are transmitted over the same. Access to our correspondence is limited to the people at Al Wadyat who need it in order to do the work. No system is perfectly secure, and we ask again that credentials, identity documents and other sensitive material are not sent through the enquiry form.

This website is aimed at businesses and their founders. It is not directed at children, and we do not knowingly collect data relating to them. If you believe a child has sent us personal data, write to us and we will delete it.

We may update this policy when our practices, our providers or the configuration of this website change. The date at the head of the document records the current version. Where a change is significant and we hold your contact details in an active correspondence, we will mention it in that correspondence rather than relying on you to revisit this page.