Privacy policy

Sidekick Consulting FZCO is a company registered with the International Free Zone Authority (IFZA) in Dubai, United Arab Emirates. We are the controller of the personal data described in this policy. You can reach us at inquiries@sidekickconsulting.ae.

We collect personal data in three ways.

• Information you give us. Your name, company, role, email address, and anything you write to us through the contact form or by email.
• Information from working together. Where you become a client, the business and financial information needed to deliver the engagement, under the terms of our engagement letter.
• Technical information. Standard server logs such as IP address, browser type, and pages visited, collected by our hosting provider to run and secure the site.

• To respond to your inquiry and have a conversation about working together.
• To deliver services under an engagement and meet our professional obligations.
• To comply with legal and regulatory requirements, including anti-money-laundering checks where required.
• To run, secure, and improve this website.

We process personal data where it is necessary to respond to a request you have made, to perform a contract with you, to comply with a legal obligation, or for our legitimate interests in running our business and this website. Where we rely on consent, you can withdraw it at any time.

We do not sell personal data. We share it only with service providers who help us run the business, such as hosting, email, and practice management software, under contracts that restrict how they use it, and with regulators or authorities where the law requires. Some providers are located outside the UAE; where that is the case we ensure appropriate safeguards are in place.

This website uses only the cookies and local storage strictly necessary for it to function. We do not use advertising or cross-site tracking cookies. If we introduce analytics in future, this policy will be updated and you will be given a choice.

We keep inquiry data for up to two years from our last contact with you. Client engagement records are kept for the period required by professional and legal obligations, typically six to seven years after the engagement ends. Technical logs are retained by our hosting provider for a short rolling period.

You can ask us to access, correct, delete, or restrict the use of your personal data, object to processing, or request a copy in a portable format. To exercise any of these rights, write to inquiries@sidekickconsulting.ae. We will respond within the period required by applicable law. You may also complain to the UAE Data Office or, where the UK or EU GDPR applies, to your local supervisory authority.

We use appropriate technical and organisational measures to protect personal data, including encrypted connections, access controls, and vetted service providers. No system is perfectly secure, and we will notify you and the relevant authority of any breach where the law requires.

We may update this policy from time to time. The date at the top shows when it was last changed. Material changes will be flagged on this page.