Privacy Policy
Last updated: 16 June 2026
Introduction
Elva Consulting - FZCO ("Elva", "we", "us" or "our") is committed to protecting the privacy and personal data of those who interact with us. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit our website or submit an inquiry to us through it.
This Policy is issued in accordance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and applicable UAE data protection requirements. By using our website or submitting an inquiry, you acknowledge that you have read and understood this Policy.
Who we are
For the purposes of applicable data protection law, the data controller is Elva Consulting - FZCO, a Free Zone Company licensed by the Dubai Integrated Economic Zones Authority (DIEZA) under Trade Licence No. 37382, with its registered office at IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates.
If you have any questions about this Policy or about how we handle your personal data, you can contact us using the details in the "How to contact us" section below.
The personal data we collect
We collect personal data primarily when you choose to submit an inquiry to us through the form on our website. The information we collect includes:
- the type of inquiry you are making and the area of our activities you are interested in;
- your company or organisation name;
- your country;
- your name;
- your business email address;
- the content of the message you send us; and
- if you ask us to respond by telephone, the telephone number you provide for that purpose.
When you use our website, we may also collect limited technical information automatically, including your internet protocol (IP) address and standard connection data. We use this information for limited periods to operate the site securely, to prevent spam and automated abuse of our inquiry form, and to maintain the integrity of our services. Our infrastructure providers may also log this data in line with their own retention practices.
We do not require you to create an account, and we do not collect payment information through our website. We do not ask you to provide, and we request that you do not submit, any sensitive or special-category personal data (such as data revealing health, religious or political beliefs, or similar) through our inquiry form.
How and why we use your data
We use the personal data you provide for the following purposes:
- to receive, review and respond to your inquiry, and to communicate with you about it;
- to assess, establish and manage potential or existing business relationships with you or your organisation;
- to operate, maintain and secure our website, including preventing fraud, spam and automated abuse;
- to keep appropriate business records; and
- to comply with applicable laws and regulations and to respond to legitimate requests from competent authorities.
We process your personal data on more than one legal basis, depending on the purpose. We rely on your consent — which you provide when you submit the inquiry form — for the submission of your inquiry to us. We also rely, where applicable, on the need to take steps at your request prior to entering into a business relationship, on our legitimate business interests (pursued in a balanced and proportionate manner) in reviewing and responding to inquiries and managing relationships, and on compliance with our legal obligations. Where we rely on your consent, you may withdraw it at any time; this will not affect any processing already carried out, or any processing that we are entitled to continue on another legal basis.
Service providers and disclosure of your data
We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.
In order to operate our website and respond to your inquiries, we rely on a limited number of trusted service providers who process personal data on our behalf and under our instructions:
- Resend — our email delivery provider, used to transmit your inquiry to us and to deliver our acknowledgement and replies to you;
- Cloudflare — our website security and infrastructure provider, used for protection against automated abuse (through its Turnstile service) and for the secure, reliable delivery of our website; and
- Vercel — our hosting provider, used to host and serve our website.
Each of these providers is permitted to process personal data only to the extent necessary to provide its services to us, and is engaged under its applicable terms, which include data-protection commitments.
We may add, replace or remove service providers from time to time as our website and operational requirements evolve, while continuing to require any such provider to protect personal data to an appropriate standard.
We may also disclose personal data to our professional advisers, or to competent courts, regulators or government authorities, where we are required or permitted to do so by law, or where necessary to establish, exercise or defend our legal rights.
International data transfers
Some of our service providers may store or process personal data on servers located outside the United Arab Emirates. Where personal data is transferred outside the UAE, we take steps to ensure that it continues to be protected to a standard consistent with the requirements of the PDPL, including by relying on providers that maintain appropriate technical, organisational and contractual safeguards.
Data retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected. In determining the appropriate retention period, we take into account the nature of your inquiry, whether an ongoing or prospective relationship exists between us, and our legal, regulatory and record-keeping requirements. When personal data is no longer required for these purposes, we will delete or anonymise it in a secure manner.
Data security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. These measures include security controls on our inquiry form (such as automated-abuse protection and rate limiting) and the use of reputable infrastructure providers.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data using appropriate measures, we cannot guarantee its absolute security.
Your rights
Subject to applicable law, you have the following rights in relation to your personal data:
- the right to be informed about how your personal data is processed;
- the right to access the personal data we hold about you;
- the right to request the correction of inaccurate or incomplete personal data;
- the right to request the deletion of your personal data in certain circumstances;
- the right to request that we restrict or stop processing your personal data in certain circumstances;
- the right to object to certain processing of your personal data;
- the right to request the transfer of your personal data where applicable; and
- the right to withdraw your consent at any time, without affecting the lawfulness of any processing carried out before the withdrawal.
To exercise any of these rights, please contact us using the details set out below. We may need to verify your identity before responding to your request. You also have the right to lodge a complaint with the competent UAE data protection authority if you believe that your personal data has not been handled in accordance with applicable law.
Children's privacy
Our website and services are intended for businesses and professional users. They are not directed at children, and we do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.
Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable legal requirements. Any changes will take effect when the updated Policy is published on this page, and the "Last updated" date at the top of this Policy will indicate when it was most recently revised. We encourage you to review this Policy periodically.
How to contact us
If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, you can contact us through the inquiry form on our Contact page, or by writing to us at our registered office at IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates.