Privacy Policy
1. Who we are
Brightway Consultancy ("Brightway Consultancy", "we", "us" or "our") is a cybersecurity advisory and training practice based in Dubai, United Arab Emirates, serving regulated industries across the GCC. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit this website or contact us through it.
We process personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable local data protection laws in the jurisdictions in which we operate.
2. Personal data we collect
We only collect the personal data you choose to share with us, together with limited technical data generated automatically when you use the website.
Information you provide through our contact form
- Full name
- Work email address
- Company and role or title
- Country and practice of interest
- The content of your message, and any information you choose to include in it
- A record of your consent to be contacted
Information collected automatically
- Technical data associated with a submission, such as your IP address, the referring page, and the date and time of the enquiry
- Standard server log information generated by our hosting provider for security and operational purposes
We do not knowingly collect special categories of personal data through this website, and we ask that you do not include sensitive information in your message.
3. How we use personal data
We use the personal data described above to:
- Respond to your enquiry and correspond with you about it
- Assess and, where relevant, propose advisory or training engagements
- Maintain a record of our communications and business relationship
- Protect the security and integrity of the website and prevent misuse of the contact form
- Comply with our legal and regulatory obligations
We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
4. Legal basis for processing
We rely on your consent, given when you submit the contact form, to contact you in response to your enquiry. We also process personal data where it is necessary for our legitimate business interests in responding to enquiries, managing our client relationships, and securing the website, provided those interests are not overridden by your rights, and where required for compliance with applicable law. You may withdraw your consent at any time, as described below.
5. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to respond to your enquiry, to maintain our business relationship, and to meet legal, accounting, or reporting requirements. Retention periods are determined in accordance with applicable law and our internal retention policy. When personal data is no longer required, we securely delete or anonymise it.
6. Your rights under the UAE PDPL
Subject to the conditions and exceptions set out in applicable law, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal data
- Object to, or request that we restrict, certain processing
- Request the transfer of your personal data in a portable format
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal
7. How to exercise your rights
To exercise any of these rights, please contact us at hello@brightway-consultancy.com. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by applicable law.
8. Data sharing and third parties
We do not sell or rent your personal data. We may share it with trusted service providers who process it on our behalf — such as our hosting and email providers and the content delivery network used to serve parts of this website — and only to the extent necessary to provide their services to us. These providers are required to safeguard your personal data and may only use it for the purposes we specify. We may also disclose personal data where required by law, regulation, or a valid request from a competent authority.
9. International data transfers
Some of our service providers may process personal data outside the United Arab Emirates. Where personal data is transferred across borders, we take reasonable steps to ensure it is protected by appropriate safeguards and that any transfer complies with the requirements of the UAE PDPL and applicable local data protection laws.
10. Security measures
We maintain appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. While no method of transmission or storage is completely secure, we work to safeguard your information consistent with good industry practice and our own security discipline.
11. Cookies
This website does not use third-party advertising or analytics cookies. A limited number of strictly necessary cookies may be set to support core functionality and security, including the operation of the contact form. You can control or delete cookies through your browser settings; doing so may affect how parts of the website function.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The latest version will always be published on this page, with its effective date indicated above.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at hello@brightway-consultancy.com, or write to us at our office in Dubai, United Arab Emirates.