Privacy Policy
1. Who we are
Nasaq Partners FZCO is a company established in the United Arab Emirates through IFZA Dubai. We provide governance, strategy and execution advisory services.
We are responsible for deciding how personal information collected through our website, resource downloads, newsletter subscriptions and business enquiries is used.
Address: Building A2, Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.
Licence number: 69822
Email: info@nasaqpartners.com
Website: www.nasaqpartners.com
2. What this policy covers
This policy explains how we handle personal information when you visit our website, contact us, download a resource, subscribe to our newsletter or discuss a potential advisory engagement.
Client engagements are governed by a separate written agreement. Where an engagement involves additional processing of personal information, the applicable agreement and privacy information will explain those arrangements.
3. Information we collect
When you contact us, we receive the information you choose to provide, such as your name, email address, organisation, role and enquiry.
When you download a resource from our website, such as a checklist, scorecard or question set, we collect your name, work email address, organisation and, if you provide it, your role, together with the resource requested, the date and your choices on the form.
If you subscribe to our newsletter, or tick the box on a download form to receive our insights, we collect your email address and any other information requested, together with the records needed to manage your subscription and consent.
Newsletters sent through Squarespace Email Campaigns include delivery, open and link-click measurement. Squarespace measures opens through an image loaded in the email and tracks clicks on eligible links. We use this information to assess newsletter engagement. Open measurements may be affected by the privacy features in your email application. You can unsubscribe at any time.
Our website platform may collect technical information such as your IP address, browser and device information, pages visited and information needed for security and website operation. Optional Squarespace analytics are subject to your cookie choices.
We use ConveyThis to provide automated translations of public website content, including Arabic. Its translation widget may process website content, technical information such as your IP address and browser information, and language preferences in connection with providing the service.
An initial enquiry needs only your name, organisation and the question you want to discuss. We will agree a secure channel before any sensitive personal information or confidential documents are exchanged.
4. Why we use personal information
We use personal information to respond to enquiries, deliver the resources you request, arrange conversations, assess whether we can assist, manage business relationships, operate and protect our website, administer newsletter subscriptions and meet applicable legal obligations.
When you download a resource, we use your details to send it to you and to keep a record of the request. We may send you one follow-up email about that resource. We send newsletters and other insights only if you have agreed to receive them. Downloading a resource does not subscribe you to our newsletter. You can withdraw your consent at any time through the unsubscribe link or by contacting us.
We process other personal information with your consent or where an applicable legal exception permits processing, including where necessary to take steps at your request towards an agreement, perform an agreement or meet legal obligations.
We apply applicable UAE personal data protection requirements, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data where it applies. Other mandatory laws may apply to particular activities or individuals.
5. Confidential business discussions
We treat business enquiries, proposed projects and advisory discussions as confidential. We do not sell personal information or confidential business information.
We do not publish, use as a client example or disclose the substance of a confidential discussion for an unrelated commercial purpose without your permission.
Confidentiality does not mean that information is never recorded or processed electronically. Information submitted through our website is processed by Squarespace. Notes or correspondence needed to respond to an enquiry or manage an engagement may also be retained.
Necessary access by service providers is distinct from selling or commercially sharing your discussion. Our handling of confidential information is also subject to legal disclosure obligations and any confidentiality terms agreed with you.
6. Website providers and other recipients
We use Squarespace to host and operate our website, including its forms. Where we offer newsletter subscriptions, we use Squarespace Email Campaigns to manage and send the newsletter. Notifications of enquiries and resource requests are delivered to our business email, hosted by Microsoft 365. These services process information needed to deliver their functions and may use their own subprocessors under their applicable terms.
We also use ConveyThis for automated website translation. ConveyThis may process website content and technical visitor information to deliver the translation service. Its handling of information is described in its Privacy Policy.
ConveyThis is used to translate the public website. We do not intentionally submit confidential advisory discussions or client documents to it for translation. This statement is not a guarantee that a third-party widget cannot access information displayed or entered in a browser; please arrange a suitable channel with us before sharing sensitive documents or detailed confidential information.
We may disclose information where legally required or where necessary to establish, exercise or defend legal rights.
If an advisory mandate requires a specialist from our network, their involvement and any necessary access to confidential information will be addressed with you under the engagement arrangements.
Our website includes links to WhatsApp and LinkedIn. If you choose to use those services, their own privacy terms apply to their processing.
7. International processing
Squarespace, Microsoft, ConveyThis and their respective subprocessors may process personal information outside the UAE. Information is therefore not necessarily stored or processed only in the UAE.
Where personal information is transferred outside the UAE, we rely on one of the grounds permitted by Articles 22 and 23 of Federal Decree-Law No. 45 of 2021. These include transfers to countries recognised as providing adequate protection and transfers under contractual terms that require the recipient to protect personal information to the standard the law requires. For Squarespace and Microsoft, these are the data processing terms that apply to their services.
You may contact us for information about the safeguards applicable to your data.
8. Retention
We retain enquiry and business contact information for up to 24 months after our last contact with you, unless a longer period is needed to maintain an ongoing relationship, meet a legal requirement or address a claim.
Resource download records are kept for up to 24 months after your last download or contact with us, unless you have subscribed to our newsletter or become a client, in which case the relevant rules below apply.
Newsletter subscription information is retained while you remain subscribed. After you unsubscribe, a limited suppression record may be retained to respect your preference and prevent further marketing.
Records relating to a client engagement are retained in accordance with applicable legal requirements and the engagement arrangements. Cookie lifetimes are described in our Cookie Policy.
We review the need to retain information and delete or anonymise it when it is no longer required, subject to applicable obligations and legitimate legal preservation needs.
9. Security
We take reasonable organisational and technical measures appropriate to the information we handle, including limiting access to those who need it. No website, email service or electronic transmission can be guaranteed completely secure.
If a personal data breach occurs that could affect the privacy, confidentiality or security of your information, we will notify the UAE Data Office as required by law and inform you directly where the breach is likely to put your information at high risk.
10. Your rights
Subject to applicable law and its conditions, you may request:
information about our processing and access to your personal information
correction of inaccurate or incomplete information
deletion of your information
restriction or cessation of processing
transfer of your information, where available
to object to processing, including for direct marketing
We do not make decisions about you based solely on automated processing, including profiling.
You may withdraw consent without affecting the lawfulness of processing already carried out. Some information may need to be retained where required by law or for permitted legal purposes.
Send requests to info@nasaqpartners.com. We may ask for information reasonably needed to verify your identity and will respond within the period required by applicable law.
If you are not satisfied with our response, you may raise a complaint with the UAE Data Office or, where another law applies to you, with the competent data protection authority.
11. Updates and contact
We may update this policy when our services or processing arrangements change. The current version and its review date appear at the end of this page.
For questions about privacy or confidentiality, contact info@nasaqpartners.com.
Last reviewed and updated: 15 October 2026