Privacy Policy

1. Data controller

The data controller responsible for your personal data is Nelson Digital FZ LLC, a company incorporated in a United Arab Emirates free zone. For privacy related enquiries, please use our Contact page and mark your message Privacy Request. Registered office and licence details are provided to active clients during formal onboarding.

2. Scope and applicability

This Privacy Policy applies to personal data processed through our Website, contact enquiries, pre contractual communications, client onboarding, and service delivery where we act as a data controller. Where we process personal data on behalf of clients as part of consulting or marketing services, we act as a data processor and processing is governed by separate data processing agreements.

This Policy is designed to comply with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the EU General Data Protection Regulation (GDPR) where applicable, the UK GDPR, and other relevant privacy laws.

3. Categories of personal data we collect

Depending on your interaction with us, we may collect the following categories of personal data. We do not intentionally collect special categories of personal data through this Website.

• Identity and contact data: name, email address, company name, job title, telephone number (if provided)
• Communication data: messages and correspondence submitted via our contact form or email
• Technical and usage data: IP address, browser type, device type, operating system, referring URLs, pages viewed, and access timestamps
• Compliance and business data: corporate registration documents, identification documents, beneficial ownership information, and payment related information collected during onboarding and AML/KYC procedures where applicable
• Analytics data: aggregated or pseudonymised website usage data

4. How we collect personal data

We collect personal data through:

• Information you provide directly (contact form, email, contractual documents)
• Automated technologies when you browse the Website (server logs, cookies as described in our Cookie Policy)
• Third parties where permitted by law (publicly available business registries, referral partners, identity verification providers)

5. Purposes and legal bases for processing

We process personal data for the following purposes: responding to enquiries (legitimate interests; steps prior to entering a contract), providing services (performance of a contract; legitimate interests), legal and compliance obligations including AML/CTF (legal obligations), website security and improvement (legitimate interests), and marketing communications where permitted (legitimate interests or consent). You may opt out of marketing communications at any time.

6. Data sharing and recipients

We may share personal data with service providers (hosting, email, analytics, CRM, professional advisers) under contractual safeguards, regulatory and law enforcement authorities where required by law, and parties to corporate transactions with appropriate safeguards.

We do not sell personal data or share it for third party independent marketing without consent where required.

7. International data transfers

Your personal data may be processed in the UAE and in other countries where our service providers operate. Where transfers are subject to restrictions, we implement appropriate safeguards such as Standard Contractual Clauses or other recognised mechanisms.

8. Data retention

We retain personal data only as long as necessary:

• Contact enquiries: up to 24 months from last communication, unless a relationship is established
• Client records: for the engagement duration and up to 7 years thereafter, or longer where required by law
• Server logs: typically up to 12 months
• Compliance documentation: as required by AML/CTF and corporate laws

9. Security measures

We implement appropriate technical and organisational measures including access controls, secure hosting, encryption in transit where supported, staff confidentiality obligations, and vendor due diligence. No method of transmission is completely secure.

10. Your rights

Depending on applicable law, you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority. Contact us via the Contact page to exercise your rights. We will respond within applicable legal timeframes.

EEA/UK users may contact their local data protection authority or the ICO at ico.org.uk. UAE enquiries regarding PDPL compliance may be directed to the UAE Data Office in accordance with applicable procedures.

11. Children's privacy

Our Website is not intended for individuals under 18. We do not knowingly collect data from children.

12. Automated decision making

We do not use automated decision making producing legal or similarly significant effects through this Website.

13. Changes to this Privacy Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated Last updated date.

14. Contact

For privacy enquiries, contact us at privacy@nelsondigital.shop or through our Contact form (Privacy Request). See also our Terms of Service.