Privacy Policy

Last updated: [DATE]

Template generated from the business facts file. Have it reviewed by a UAE-qualified lawyer before launch.

This policy explains how Rihla Business Setup Services L.L.C ("Rihla Business Setup", "we") handles personal data collected through this website. We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for visitors in the European Economic Area or United Kingdom, the GDPR / UK GDPR where it applies.

What we collect

Enquiry details you enter in our forms: name, email and/or phone number, the service you need, business activity, number of visas, timeline, optional details (nationality, country of residence, shareholders, company name ideas), any message and any file you upload.
Cost calculator choices, if you send an enquiry from the calculator.
How you found us: the first page you visited, the referring website, campaign (UTM) parameters and ad click identifiers (Google gclid/gbraid/wbraid, Microsoft msclkid, Meta fbclid) present in the link you arrived on.
WhatsApp taps: when you tap a WhatsApp button we record the time, the page, the pre-filled message and the "how you found us" data above, and add a short reference code to the message so we can match the chat to your enquiry.
Technical data: your browser's user-agent with each enquiry, and standard server logs (IP address, time, page requested) kept for security.

Why we use it

To reply to your enquiry and prepare an estimate (steps taken at your request before a contract).
To provide our services if you engage us (contract).
To understand which ads and pages bring enquiries and to report paid conversions to Google Ads (legitimate interest, or consent where the law requires it).
To keep the site secure and prevent spam (legitimate interest).
To meet legal and regulatory obligations.

We do not sell personal data.

Cookies and similar technologies

Essential. We always set one first-party session cookie. It keeps forms secure (CSRF protection) and remembers how you first arrived on the site (UTM parameters and click identifiers) so they can be saved with an enquiry. It contains no advertising identifiers set by third parties. The admin area uses the same cookie to keep staff signed in.

Analytics and advertising tags. If enabled by us, the site can load Google Analytics 4, Google Ads conversion tracking and the Meta Pixel. These may set cookies and send data about your visit to Google and Meta. We use them to measure visits, enquiries, phone-number taps and WhatsApp taps from our ads. We use Google Consent Mode v2. Your choice is stored in your browser's local storage under the key consent_v1.

Your privacy choices

How the analytics and advertising tags behave depends on your browser:

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, all third-party analytics and advertising tags are switched off and never load, whatever else you choose.
Visitors with a European time zone. If your device is set to a European time zone (including the UK, EEA countries, Iceland, the Canary Islands, Madeira, the Azores, the Faroe Islands, Svalbard and Cyprus), the tags are off by default. A banner asks whether you accept them, and they load only if you click "Accept".
All other visitors (including the UAE and the rest of the GCC). The tags load by default. You can switch them off at any time with the "Your privacy choices" link in the footer of every page. When switched off, they stop loading on that browser.

We use your device's time zone, not your IP address or location, to decide which of these applies. Clearing your browser's storage resets your choice.

If JavaScript is disabled, no analytics or advertising tags load.

Who we share data with

Government authorities, free zones and banks, only when you engage us and only as needed for your application.
Service providers who host the site and database, send email and deliver WhatsApp messages, under contracts that protect your data.
Google and Meta, through the tags described above when they are allowed to load, and through offline conversion reports (Google click identifier, conversion name, time and value; no name or contact details).
Professional advisers (for example lawyers, accountants or tax advisers) when you ask us to introduce you.

Where data is stored

Our website data is hosted in [HOSTING REGION, e.g. EU (Railway) / UAE]. Where data leaves the UAE, we rely on the safeguards permitted by UAE law.

How long we keep it

Enquiries that do not become clients are deleted after 24 months. Client records are kept for as long as UAE law requires.

Your rights

You can ask to access, correct or delete your personal data, to restrict or object to processing, to withdraw consent and to receive a copy of data you provided. Email [email protected]. You may also complain to the UAE Data Office or, in the EEA/UK, your local data protection authority.

Security

We use HTTPS, restricted admin access with two-factor authentication, an audit log of admin actions and access controls on uploaded files.

Contact

Rihla Business Setup Services L.L.C, Business Bay, Dubai, United Arab Emirates. Email [email protected] · Phone +1 210 415 8586.