Privacy Policy

Effective date: 22 May 2026  |  Last updated: 22 May 2026

1. Data controller

The data controller responsible for your personal data is:

• Legal name: Nelson Digital FZ LLC
• Jurisdiction: United Arab Emirates (free zone company)
• Website: https://nelsondigital.shop/

For privacy-related enquiries, please use our Contact page and mark your message “Privacy Request”. Registered office and licence details are provided to active clients during formal onboarding.

2. Scope and applicability

This Privacy Policy applies to personal data processed through our Website, contact enquiries, pre-contractual communications, client onboarding, and service delivery where we act as a data controller. Where we process personal data on behalf of clients as part of consulting or marketing services, we act as a data processor and processing is governed by separate data processing agreements.

This Policy is designed to comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the EU General Data Protection Regulation (GDPR) where applicable, the UK GDPR, and other relevant privacy laws.

3. Categories of personal data we collect

Depending on your interaction with us, we may collect:

• Identity and contact data: name, email address, company name, job title, telephone number (if provided);
• Communication data: messages and correspondence submitted via our contact form or email;
• Technical and usage data: IP address, browser type, device type, operating system, referring URLs, pages viewed, and access timestamps;
• Compliance and business data: corporate registration documents, identification documents, beneficial ownership information, and payment-related information collected during onboarding and AML/KYC procedures where applicable;
• Analytics data: aggregated or pseudonymised website usage data.

We do not intentionally collect special categories of personal data through this Website.

4. How we collect personal data

We collect personal data through:

• Information you provide directly (contact form, email, contractual documents);
• Automated technologies when you browse the Website (server logs, cookies as described in Section 11);
• Third parties where permitted by law (publicly available business registries, referral partners, identity verification providers).

5. Purposes and legal bases for processing

5.1 Responding to enquiries

Purpose: To respond to contact form submissions and evaluate potential engagements.
Legal basis: Legitimate interests; steps prior to entering a contract; consent where required.

5.2 Providing services

Purpose: To perform contractual obligations and maintain client relationships.
Legal basis: Performance of a contract; legitimate interests; legal obligations.

5.3 Legal and compliance obligations

Purpose: AML/CTF compliance, sanctions screening, tax and accounting, lawful authority requests, and legal claims.
Legal basis: Legal obligations; legitimate interests in fraud prevention.

5.4 Website security and improvement

Purpose: To maintain security, prevent abuse, and improve the Website.
Legal basis: Legitimate interests; consent for non-essential cookies where required.

5.5 Marketing communications

Purpose: To send relevant business updates where permitted.
Legal basis: Legitimate interests or consent. You may opt out at any time.

6. Data sharing and recipients

We may share personal data with:

• Service providers (hosting, email, analytics, CRM, professional advisers) under contractual safeguards;
• Regulatory and law enforcement authorities where required by law;
• Parties to corporate transactions, with appropriate safeguards.

We do not sell personal data or share it for third-party independent marketing without consent where required.

7. International data transfers

Your personal data may be processed in the UAE and in other countries where our service providers operate. Where transfers are subject to restrictions, we implement appropriate safeguards such as Standard Contractual Clauses or other recognised mechanisms.

8. Data retention

We retain personal data only as long as necessary, including:

• Contact enquiries: up to 24 months from last communication, unless a relationship is established;
• Client records: for the engagement duration and up to 7 years thereafter, or longer where required by law;
• Server logs: typically up to 12 months;
• Compliance documentation: as required by AML/CTF and corporate laws.

9. Security measures

We implement appropriate technical and organisational measures including access controls, secure hosting, encryption in transit where supported, staff confidentiality obligations, and vendor due diligence. No method of transmission is completely secure.

10. Your rights

Depending on applicable law, you may have rights to access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority.

Contact us via the Contact page to exercise your rights. We will respond within applicable legal timeframes.

EEA/UK: Contact your local data protection authority or the ICO at ico.org.uk.

UAE: Enquiries regarding PDPL compliance may be directed to the UAE Data Office in accordance with applicable procedures.

11. Cookies and similar technologies

We may use strictly necessary, analytics, and functional cookies. Where required by law, we obtain consent for non-essential cookies. You can manage cookies through browser settings.

12. Children’s privacy

Our Website is not intended for individuals under 18. We do not knowingly collect data from children.

13. Automated decision-making

We do not use automated decision-making producing legal or similarly significant effects through this Website.

14. Third-party websites

We are not responsible for the privacy practices of linked third-party sites.

15. Changes to this Privacy Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date.

16. Contact

For privacy enquiries, use our Contact form (Privacy Request). See also our Terms & Conditions.