1. Who we are
STRAFZA Consultancy FZCO is a free-zone company incorporated in Dubai, United Arab Emirates, under licence number 85729. References to "STRAFZA," "we," "us," and "our" mean STRAFZA Consultancy FZCO. STRAFZA is the data controller for personal data collected through this website.
2. What personal data we collect
Through our contact form, we collect the personal information you choose to provide: typically your name, email address, telephone number (optional), country of operation, the nature of your enquiry, and any context you include in the message body. We may also collect basic technical information about your visit (IP address, browser type, pages viewed, approximate timestamp) for security and analytics purposes.
3. How we use your personal data
We use personal data submitted through the contact form solely to respond to your enquiry, to assess fit for a possible engagement, and to maintain a record of our correspondence. We do not use contact-form data for marketing, do not add you to mailing lists without explicit opt-in, and do not sell or share data with third parties except as described in section 5.
4. Legal basis for processing
We process your personal data on the basis of your consent (when you submit a contact form) and our legitimate interest in responding to professional enquiries. Where applicable laws require it, including the EU GDPR for visitors from the European Economic Area and the UAE PDPL for visitors in the United Arab Emirates, we honour the rights and obligations those laws impose.
5. Sharing with third parties
We share personal data only with service providers who help us operate the site and respond to enquiries: namely our email delivery provider (Resend), our hosting infrastructure provider, and our anti-abuse provider (Cloudflare). Each is engaged under contractual confidentiality and data-processing terms. We do not share personal data with any third party for marketing purposes.
6. How long we keep personal data
Contact-form submissions are retained for up to twenty-four months after the most recent correspondence, after which the record is deleted unless an engagement is active or your consent has been refreshed. Technical logs are retained for a maximum of ninety days. Where you have specifically requested ongoing communication (for example, the monthly insights digest, when offered), data is retained for the duration of that subscription.
7. Cookies and similar technologies
We use a minimal set of cookies: a strictly-necessary session cookie required for the site to function, an authentication cookie when you sign in to administrative areas, and (where activated) Cloudflare Turnstile cookies for spam protection on the contact form. We do not use marketing or third-party advertising cookies. We do not track you across other websites.
8. Your rights
Depending on the jurisdiction in which you reside, you may have the right to access the personal data we hold about you, to correct inaccurate data, to request its deletion, to restrict or object to its processing, and to receive a copy in portable form. To exercise any of these rights, contact us at the address below. We will respond within thirty days of a verified request.
9. International transfers
Our service providers operate infrastructure in jurisdictions including the United States, the European Union, and the United Kingdom. Where personal data is transferred outside its country of origin, we rely on the contractual safeguards of those providers (including standard contractual clauses, where applicable) to ensure continued protection.
10. Contact
Questions, concerns, or requests relating to this policy should be sent to [email protected]. We will respond personally; correspondence is read by a partner. If you believe we have failed to address a privacy concern adequately, you may also contact your local data protection authority.