Privacy Policy

Last Updated: 09/01/2026

At SKP Consultancy, including its subsidiaries and/or affiliates (hereinafter referred to as “we,” “our,” “us,” or “SKP Consultancy”), we are committed to safeguarding the privacy and security of our clients’ and website visitors’ personal data (“User,” “Customer,” “you,” “your”). We are committed to transparency and to ensuring that you understand how your personal data is collected, used, and protected, as well as the rights available to you under applicable law.

When you interact with us through any of our channels, we may collect certain information about you. Where such information can be used to identify you directly or indirectly, it constitutes “personal data” or “personal information”. We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data of the United Arab Emirates (“PDPL”), its Executive Regulations, and other applicable data protection laws and regulations, including those governing cross-border data transfers.

1. WHO WE ARE

For the purposes of the PDPL and other applicable data protection laws, SKP Consultancy is the Data Controller and is responsible for determining the purposes and means of processing your personal data.

This Privacy Policy, together with our terms of engagement, explains how we collect, use, store, share, and protect your personal data, and outlines your rights in relation to such data when you engage our consultancy services, visit our website (https://skpconsultancy.com/), or otherwise interact with us.

We may also collect personal data from third parties, as further described below. By accessing our website or engaging us for services, you acknowledge that you have read and understood this Privacy Policy.

For avoidance of doubt, use of the Website does not create a contractual relationship between you and SKP Consultancy unless and until such engagement is expressly agreed in writing. This Privacy Policy applies to both Website users and service engagements.

2. WHAT PERSONAL DATA DO WE COLLECT

We collect different categories of personal data depending on the nature of our relationship with you. This may include, but is not limited to:

Identity Data: Name, date of birth, nationality, passport or national ID details, residency or visa information.
Contact Data: Residential or business address, email address, telephone numbers.
Financial Data: Bank account details, payment details, financial records, billing and payment history.
Professional Data: Occupation, employer, job title, professional qualifications, and business contact details.
Engagement-Related Data: Information relevant to consultancy, advisory, project management, feasibility studies, market research, or related services for which you engage us, which may include commercially sensitive information or other data protected under applicable law, where such processing is lawful and necessary.
Technical Data: Internet Protocol (IP) address, browser type and version, time zone settings, approximate location, operating system, device type, and other technology identifiers used to access our website.
Usage Data: Information about how you use our website, platforms, and services.
Marketing and Communications Data: Preferences in receiving communications from us and records of your interactions with us.

We collect personal data directly from you, from publicly available sources, and from third parties (such as counterparties, service providers, financial institutions, or professional advisors) where necessary for the provision of our services or as permitted by applicable law.

Where required for specific consultancy engagements, we may also collect additional personal data necessary for compliance, due diligence, audit trails, anti-fraud controls, or regulatory reporting, subject to applicable legal requirements.

3. HOW WE COLLECT YOUR PERSONAL DATA

a. Information you provide

When you visit our website or utilize the “Contact Us” feature through interactive elements, online forms, email, or other communication methods, you voluntarily provide us with personal information such as your name, email address, phone number, and any other details you choose to share.

We also maintain social media pages on platforms such as LinkedIn and other professional networks. When you interact with these pages—by sending messages, commenting, or sharing content—you provide us with identity and technical data. Additionally, the hosting providers of these platforms may share aggregate data and analytics related to your interactions.

We collect the information you submit when completing surveys, questionnaires, or forms. If you are a current or prospective client seeking our services, we may gather identity, contact, financial, professional, and engagement-related data as required for the specific services. Likewise, if you apply for a position or collaboration with SKP Consultancy, you may be asked to provide your CV, which could include your personal, contact, and professional data.

b. Information we collect from third parties

We may collect personal data about you from third parties, in accordance with the law and where relevant to the services we provide or our legitimate business operations. These sources include publicly available registers, professional databases, counterparties, partners, members of the SKP Business Federation, financial institutions, government authorities, and referral sources.

c. Information we collect automatically

When you visit or interact with our website or digital platforms, we may automatically collect certain technical data, including device identifiers, IP address, browser and operating system information, usage patterns, referring URLs, and cookies. This information helps us understand how our website is used and enables us to improve functionality, performance, and security.

4. HOW AND WHY DO WE USE YOUR PERSONAL DATA

We collect and process personal data only for specific, explicit, and legitimate purposes, and only where we have a lawful basis under applicable data protection laws. These purposes and legal bases include the following:

Where we have your consent
Where required by law, we process personal data based on your consent, including when you submit inquiries, request consultations, subscribe to communications, or otherwise provide explicit permission for specific processing activities. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To perform a contract
We process personal data where necessary to perform our contractual obligations to you or to take steps at your request prior to entering into a contract. This includes client onboarding, service delivery, project execution, billing, payment processing, and communications relating to your engagement.
To comply with legal and regulatory obligations
We process personal data to comply with our legal and regulatory obligations, including record-keeping, taxation, accounting, corporate compliance, and regulatory requirements, as well as to ensure the security of our systems and data.
For legal claims and vital interests
We may process personal data where necessary to establish, exercise, or defend legal claims, or where processing is required to protect the vital interests of you or another individual in exceptional circumstances.
Legitimate interests (where applicable)
Where permitted under applicable law, we may process personal data where such processing is necessary for our legitimate interests, including business operations, service improvement, internal administration, fraud prevention, cybersecurity, dispute management, and quality assurance, provided that such interests do not override the rights and freedoms of data subject

Personal data collected for specific purposes will not be further processed in a manner incompatible with those purposes, except as permitted or required by law.

5. HOW WE SHARE YOUR PERSONAL DATA

We disclose personal data only where necessary and in accordance with applicable law, including to the following categories of recipients:

Our Employees: Authorized personnel on a need-to-know basis.
Service Providers: Third-party providers supporting our operations, including IT services, secure cloud storage providers, analytics providers, and professional advisors.
Business Partners and Federation Members: Where necessary for the delivery of integrated consultancy services, subject to appropriate safeguards.
Government and Regulatory Authorities: Where disclosure is required by law or pursuant to lawful requests.
Business Transfers: Successors or third parties in the event of a merger, restructuring, or transfer of assets, subject to appropriate safeguards.

We ensure that all third parties who process personal data on our behalf are contractually obligated to protect your data in accordance with applicable data protection laws and our own standards.

For clarity, where personal data is shared with SKP Business Federation members or partners, such sharing shall be limited to what is reasonably necessary for service delivery or referral purposes, and shall be subject to confidentiality obligations and appropriate safeguard

6. USE OF COOKIES AND THIRD-PARTY LINKS

We may employ both temporary (session) and persistent cookies, along with tags, scripts, and similar technologies, to enhance your experience on our website and to better understand your interactions. These tools help us identify users, track website navigation, analyze website usage, and improve website performance.

We may utilize third-party tracking services such as Google Analytics and Google Tag Manager to gain insights into visitor behavior.

Our website may provide links to third-party websites for your information. If you access those links, you will leave our website. We do not own or control those sites and are not responsible for their content or privacy practices.

Strictly necessary cookies may be placed by default for secure operation of the Website. Non-essential cookies (including functional cookies, analytical/performance cookies, marketing cookies, and certain third-party cookies) will be placed only where legally permitted and, where required, only after obtaining your explicit consent via a cookie banner / cookie preference tool. Continued browsing alone shall not constitute consent for non-essential cookies where explicit consent is required under applicable law.

Your access to and use of any third-party website is at your sole risk and subject to the applicable third party’s terms, privacy policies, and practices. SKP Consultancy disclaims liability for any loss, cyber incident, malware, fraud, unauthorised access, or data breach arising from or in connection with your use of any third-party links.

7. INTERNATIONAL DATA TRANSFERS

As we may serve clients and partners internationally, it may be necessary to transfer personal data outside the UAE. Our third-party service providers may also process data globally.

Where personal data is transferred outside the UAE, we ensure appropriate safeguards are implemented in accordance with the PDPL and other applicable laws, including contractual protections or obtaining explicit consent where required.

Where applicable, transfers may be carried out based on adequacy mechanisms, contractual safeguards, or other legally permitted transfer tools, as may be required under applicable data protection laws.

8. HOW LONG DO WE KEEP YOUR PERSONAL DATA

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, taking into account legal, regulatory, contractual, and operational requirements.

Once the applicable retention period has expired, personal data will be securely destroyed or anonymized.

Retention periods may differ based on the service type, contract duration, regulatory recordkeeping, and limitation periods for legal claims.

9. YOUR RIGHTS AND CHOICES

You have rights under applicable data protection laws, including the right to access, correct, object to processing, request erasure, restrict processing, request data portability, withdraw consent, and lodge complaints with the relevant supervisory authority.

To exercise your rights, please contact us using the details below.

Your rights are subject to applicable legal limitations, including circumstances where we must retain data for compliance, legitimate business purposes, or the establishment, exercise, or defence of legal claims.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, misuse, or disclosure, including access controls, encryption where appropriate, and regular security reviews.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Continued use of our website or services following updates constitutes acceptance of the revised policy.

Access to personal data is restricted to authorised personnel on a strict need-to-know basis.

12. CONTACT US

If you have questions or concerns regarding this Privacy Policy or our data practices, you may contact:

SKP Consultancy – Data Protection Contact

Email: [email protected]

Address: BC 889665 26^th Floor Amber Gem Tower Ajman, United Arab Emirates

Dubai, UAE