1. Who we are

This website is operated by Enable Green Partners FZCO ("Enable Green", "we", "us"), a free zone company in the IFZA free zone, licensed by the Dubai Integrated Economic Zones Authority (DIEZ), Government of Dubai, under Trade Licence No. 74695. Our registered address is IFZA Properties, DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates.

We are the controller of the personal data described in this policy. Where our UK company, Enable Green Partners Limited (registered in England & Wales, company number 15051991, registered office 374 Ley Street, Ilford, Essex, IG1 4AE, United Kingdom), delivers services to you, it acts as controller for that work.

For any privacy question, contact us at info@enablegreen.ae or write to us at the address above.

2. The laws this policy follows

We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and its regulations. Where we deal with people in the United Kingdom, we also follow the UK General Data Protection Regulation and the Data Protection Act 2018.

3. What personal data we collect

• Contact details: name, job title, organisation, email and phone. We collect these through contact forms, emails, calls, meetings and business cards.

• Enquiry and project information: what you ask us about, notes from calls, and project documents you share. These come from you or your organisation.

• Newsletter and event data: your email address, preferences and event registrations, collected through sign-up forms and event platforms.

• Website usage data: IP address, browser and device type, pages visited and how you arrived. We collect this through cookies and similar tools (see our Cookie Policy).

• Commercial records: contracts, invoices and payment status from our work with your organisation.

• Research and engagement data: survey or interview answers given for social value or ESG work, from participants in projects we run for clients.

We do not set out to collect sensitive personal data, such as data about health, religion or ethnicity. If a client project needs it, for example in social value reporting, we collect only what is needed. We tell participants in advance and ask for their explicit consent where the law requires it.

4. Why we use your data and our legal basis

• Replying to your enquiry and preparing proposals: steps taken at your request before a contract, and our legitimate interests.

• Delivering consultancy services and managing our contract: performing the contract.

• Invoicing, accounting, tax and licence compliance: legal obligations under UAE law (and UK law where relevant).

• Sending newsletters, insights and event invitations: your consent, which you can withdraw at any time.

• Business-to-business relationship emails to professional contacts: legitimate interests, with an opt-out in every message.

• Analysing and improving the website: your consent, given through the cookie banner.

• Research and engagement for client projects: consent, or our client's legitimate interests, as explained to participants at the time.

• Protecting our legal rights and keeping our systems secure: legitimate interests and legal obligations.

We do not sell personal data. We do not make decisions about you based only on automated processing that have legal or similarly significant effects.

5. Who we share it with

We share personal data only when we need to, and only with:

• Service providers who host or support our operations, for example website hosting (Squarespace), email and file storage ([Google Workspace / Microsoft 365]), newsletters ([Mailchimp]), and accounting software ([Xero / Zoho Books]).

• Our related company, Enable Green Partners Limited, and our associates and subcontractors who help deliver a project. Each is bound by confidentiality.

• Professional advisers, such as accountants, auditors and lawyers.

• Authorities, including IFZA, the Federal Tax Authority and courts, where the law requires us to share it.

Each service provider handles personal data only on our instructions and under a written agreement.

6. International transfers

Some of our providers and our UK company store or access data outside the UAE, including in the United Kingdom, the European Economic Area and the United States. We transfer personal data out of the UAE only where the PDPL allows it, for example:

• to countries with adequate data protection laws;

• under contracts that require the recipient to protect the data properly; or

• with your consent, or where the transfer is needed for a contract with you.

For transfers out of the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

7. How long we keep it

• Enquiries that don't become work: 2 years from our last contact.

• Client contracts, project records and invoices: 5 years after the engagement ends, or longer where UAE tax or commercial law requires it.

• Newsletter subscribers: until you unsubscribe.

• Research and engagement data: as agreed with the client and explained to participants, then deleted or anonymised.

• Website analytics: up to 26 months.

8. How we protect it

We use access controls, multi-factor authentication, encryption in transit, and secure cloud providers. Only people who need personal data for their work can access it. If a breach is likely to harm your rights, we will tell the UAE Data Office and you without delay, as the PDPL requires. Where UK GDPR applies, we will also tell the UK Information Commissioner's Office.

9. Your rights

Under the PDPL, and UK GDPR where it applies, you have the right to:

• be told how your data is used, and get a copy of it;

• have inaccurate data corrected;

• have your data deleted where we no longer have a reason to keep it;

• restrict or object to how we use it, including for direct marketing;

• receive your data in a portable format and have it sent to another organisation;

• object to decisions made only by automated processing; and

• withdraw consent at any time. This does not affect anything we did before you withdrew it.

To use any of these rights, email info@enablegreen.ae. We may ask you to confirm your identity. We will reply within 30 days, or tell you if we need more time.

10. Complaints

Please contact us first so we can try to put things right. You can also complain to the UAE Data Office. If you are in the UK, you can complain to the Information Commissioner's Office (ico.org.uk).

11. Links to other websites

Our site may link to other websites, such as LinkedIn or partners' sites. Their privacy practices are their own responsibility, so please read their policies.

12. Changes to this policy

We may update this policy. The date at the top shows when it last changed. If we make a significant change, we will tell you on the website or by email.