Controller and contact
CHAAR AR CONSULTANCIES L.L.C, License No. 1638792 and DCCI No. 693758, is responsible for the personal information described in this notice. Its office is Office No. 1912-72, Abbas Joul Khan Faiz Joul Khan Building, Bur Dubai - Business Bay, Dubai, United Arab Emirates. Privacy enquiries and requests may be sent to privacy@chaarar.com.
Applicable framework
We handle personal information in accordance with applicable law, including UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data. Where processing falls within its territorial scope, we also apply the EU General Data Protection Regulation and the Belgian Act of 30 July 2018 concerning the protection of natural persons with regard to the processing of personal data.
Information and sources
We may receive your name, organisation, role, professional contact details, enquiry, correspondence and information you choose to provide. When you visit the website, our hosting, security and embedded-media providers may process IP address, request time, browser and device information, requested page, referral information, approximate location derived from IP address, security events and video-playback information.
The website enquiry form securely transmits the name, email address, organisation and enquiry you provide to Chaar AR through Cloudflare infrastructure and Microsoft 365. We do not store the form content in a website database. Cloudflare may process network and browser signals, including IP address and verification results, to prevent abuse and deliver the message.
Purposes and legal grounds
Enquiries and potential engagements: to respond, assess a request and take steps requested before a possible engagement. The basis is pre-contractual steps, performance of an engagement and our legitimate interest in professional communications.
Professional relationships: to administer engagements, maintain business records and communicate with clients, suppliers and professional contacts. The basis is contract, legal obligation and legitimate interests.
Website delivery, media and security: to provide pages and films, prevent misuse, investigate faults and protect the service. The basis is our legitimate interest in operating a secure and effective professional website.
Publications and updates: to provide material you request. Direct electronic marketing will rely on consent where consent is required, and you may withdraw it at any time.
Legal and regulatory matters: to meet applicable obligations and establish, exercise or defend legal claims. The basis is legal obligation and legitimate interests.
When information is required
You are not required to provide personal information merely to browse the website. Information identified as necessary in an email or engagement process is required so that we can respond or perform the requested service. If it is not provided, we may be unable to proceed.
Recipients and service providers
Information may be available to authorised Chaar AR personnel and to providers supporting website hosting, cybersecurity, embedded video, communications, document administration and professional services. Cloudflare provides website infrastructure, form security, email transmission and Cloudflare Stream video delivery. Microsoft provides business email and receives website enquiries. We may also disclose information to professional advisers, competent authorities or delivery partners where this is necessary, lawful and consistent with the relevant engagement. We do not sell personal information.
International transfers
Chaar AR operates from the UAE and works internationally. Information may therefore be processed outside the country where it was collected. Where UAE or European transfer restrictions apply, we use an available lawful transfer mechanism and appropriate contractual, organisational and technical safeguards. You may request information about the safeguards relevant to your information.
Retention
General enquiries that do not lead to an engagement are normally reviewed for deletion after 24 months. Engagement, finance, compliance and legal records are retained for the period required by applicable law and legitimate professional needs. Technical records are retained according to operational security needs and the documented schedules of the relevant service provider. Information is deleted or anonymised when it is no longer required.
Your rights
Subject to applicable conditions and exceptions, you may request access to and a copy of your information, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent. UAE law may also provide rights concerning transfer, automated processing and information about processing. Exercising a right does not affect processing already lawfully carried out.
We do not use website information to make solely automated decisions that produce legal or similarly significant effects.
Complaints
Please contact us first so that we can review your concern. You may also complain to the competent supervisory authority. In the UAE, data-protection oversight is assigned under the UAE personal-data framework. In Belgium, you may contact the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels. EU residents may also contact the authority in the country of their habitual residence, workplace or the alleged infringement.
Children
The website is intended for a professional audience and is not directed to children. Please do not submit information about a child unless this is necessary, lawful and appropriately authorised.
Security
We apply proportionate technical and organisational safeguards appropriate to the nature of the information and the service. No internet transmission or storage system can be guaranteed to be completely secure.
Changes
We may update this notice when our services, technology or legal obligations change. The current version and update date will remain available on this page.