Privacy notice · UAE Personal Data Protection Law
What we collect, why, and what you can tell us to do with it.
AccuSights is a Dubai mainland company, so the federal Personal Data Protection Law, Federal Decree-Law 45 of 2021, is the law that governs how we handle personal data on this site. This page says what we collect and why, who sees it, where it goes, how long we keep it, and how you exercise your rights. Plain language, no hedging.
Last updated: 4 September 2026
Who is responsible
ACCUSIGHTS TECHNOLOGY CONSULTANTS L.L.C, trade licence 1594441, issued by Dubai Economy and Tourism, at Ontario Tower, Business Bay, Dubai, United Arab Emirates, is the controller of the personal data described here. Privacy questions go to support (at) accusights.com. We are a mainland company, not a DIFC or ADGM entity, so the federal law applies to us rather than the DIFC or ADGM regimes.
What we collect
Three things, and only three. First, what you type into a form on this site: your name, work email, company, an optional phone number, and whatever you write in a message. Second, the answers you give the free Cyber Hygiene Test, which describe your organisation rather than you. Third, ordinary server and analytics records: the pages requested, the referring page, an approximate location derived from the network address, and the browser type.
Why we process it, and on what basis
Form data is processed to answer you, to schedule the thirty minutes you asked for, and to run the engagement if you become a client. That is processing necessary for steps taken at your request and for a contract. Tool answers are processed to produce your result and to improve the tools. Marketing email is sent only where you asked for it, on your consent. Server records are kept to run and secure the site. We do not sell personal data, we do not share it with data brokers, and we do not build advertising profiles.
Consent, and taking it back
Where we rely on your consent, it is asked for on its own, with an unticked box, in wording that says who is writing and what will arrive. You can withdraw it at any time, through the unsubscribe link in any email we send or by writing to support (at) accusights.com. Withdrawal stops future sending. It does not undo what was lawful before you withdrew.
Marketing, and what a lawful message from us looks like
We send marketing email and newsletters only to people who asked for them. Under the TDRA Regulatory Policy on Unsolicited Electronic Communications, a marketing message sent without the recipient's consent is spam, and we treat that as a hard rule rather than a preference. So: no purchased lists, no scraped addresses, no cold email in the UAE. Every message we send names us, says why you are receiving it, and carries an unsubscribe route that works and costs nothing. We record the wording you agreed to and the date you agreed to it.
Who else sees it
A short list of service providers, each contracted and each with access limited to what its job needs: website hosting and content delivery, our customer relationship platform, email delivery, calendar scheduling, and website analytics. They process on our instructions and for no purpose of their own. We disclose personal data to a public authority only where a UAE law or a valid legal process requires it.
Where it goes
AccuSights runs a UAE practice and a United States practice, and several of the providers above operate outside the UAE. Some personal data is therefore processed outside the country. Article 22 of the Personal Data Protection Law allows transfer where the destination provides an adequate level of protection as determined by the UAE Data Office, or under a bilateral or multilateral agreement, and it allows other routes including contract terms that carry the same level of protection through to the recipient. No adequacy list from the UAE Data Office was published that we could find as of September 2026, so we do not claim any country is adequate. Our transfers run on contract terms with each provider. Ask us at support (at) accusights.com and we will tell you which providers hold which categories of data.
How long we keep it
Enquiry and form data: two years from your last contact with us, then deleted. Newsletter subscriptions: until you unsubscribe, plus a suppression record so we do not write to you again by accident. Client engagement records: for the life of the engagement and for the period our professional and tax obligations require afterwards. Server logs: twelve months.
Your rights
The law gives you the right to be told how your data is processed, to get a copy of it, to have it corrected when it is wrong, to have it erased, to restrict or object to processing, to receive it in a portable form, and to withdraw consent. Write to support (at) accusights.com and we will answer. We may ask you to confirm who you are first, because handing your data to somebody else would be the worse outcome.
Security, and a breach
We hold personal data under access control, encryption in transit and at rest, and the same control discipline we ask of clients. If a breach happens that affects personal data, we notify the UAE Data Office, and we notify the people affected where the breach is likely to put their rights at risk. Article 9 of the law sets what such a notification carries.
Children
This site is for business decision makers. We do not knowingly collect personal data from children. If you believe a child has given us data, write to support (at) accusights.com and we will remove it.
Complaints
Start with us at support (at) accusights.com. You also have the right to complain to the UAE Data Office, the federal data regulator established under Federal Decree-Law 44 of 2021.
Changes to this notice
When this notice changes we update the date at the top of it. Material changes to how we use your data are notified to subscribers before they take effect.