Privacy Policy

1. Who is responsible for your data

Sage Global Advisory is the controller of your personal data. Privacy questions: info@sageglobaladvisory.com or +971 58 570 4140.

2. Personal data we collect

• Enquiry data: name, email address, phone number, subject and message when you use our contact form or contact us by email, phone or WhatsApp.
• Client data: if you engage us, identity documents, trade licences, financial, tax and banking records and other information needed to deliver the service. This is also governed by our engagement letter.
• Technical data: information needed to run and secure the website (e.g. browser type and short-lived server logs kept by our hosting provider).
• Analytics data: only if you accept analytics cookies (see our Cookie Policy).

We do not intentionally collect sensitive personal data through the website. Please do not send identity documents or sensitive financial information through the contact form.

3. Why we use your data and our legal basis

• To answer your enquiry and provide a quotation or initial consultation — based on the consent you give in the contact form, and to take steps at your request before entering into a contract.
• To deliver contracted services (tax, accounting, audit, company formation and related services) — to perform our contract with you.
• To meet legal obligations, including customer due-diligence and anti-money-laundering duties under Federal Decree-Law No. 10 of 2025 and its Executive Regulations, and record-keeping duties under the Tax Procedures Law (Federal Decree-Law No. 28 of 2022, as amended).
• Website analytics and improvement — only with your consent, which you can withdraw at any time.

We do not sell your personal data, do not use it for targeted advertising, and do not make decisions about you based solely on automated processing.

4. Who we share data with

We share data only where necessary and with parties bound by confidentiality:

• Technology providers that process data on our behalf: website hosting (Vercel Inc.), database and file storage (Supabase Inc.), and the email and messaging platforms you choose to contact us on (e.g. WhatsApp).
• Google, for website analytics and Google Maps — only after you consent.
• Government and regulatory authorities (e.g. the Federal Tax Authority and licensing authorities) where required by law or to carry out a service you requested.

We use an internal AI tool (OpenAI) only to edit public website content; visitor data and contact-form messages are never sent to it.

5. International transfers

Some providers may store or process data outside the UAE (for example in the European Union or the United States). We only transfer data in line with Articles 22 and 23 of the PDPL — to countries with adequate protection, under binding contractual safeguards, or in other cases the law permits.

6. How long we keep data

• Enquiries that do not become engagements: up to 24 months after our last contact, then deleted.
• Client records: for the engagement and then at least five (5) years after the end of the relevant tax period or business relationship (seven (7) years for real-estate-related records), or longer where the Tax Procedures Law or anti-money-laundering legislation requires.
• Cookie consent records: 12 months.

7. Your rights

Under the PDPL, and subject to the conditions and exceptions set out in law, you have the right to:

• obtain information about, and a copy of, your personal data, and request its transfer (portability);
• have inaccurate or incomplete data corrected;
• request erasure when data is no longer needed or you withdraw consent;
• restrict, object to or stop processing, including for marketing;
• withdraw consent at any time, without affecting processing carried out before withdrawal.

To exercise these rights, email info@sageglobaladvisory.com. We may need to verify your identity, and we will respond within the time limits set by law (we aim to respond within 30 days). You may also lodge a complaint with the UAE Data Office.

8. Security

We use appropriate technical and organisational measures, including encryption in transit (HTTPS/HSTS), role-restricted access with strong passwords, change logging and data minimisation. If a breach puts your data at risk, we will notify the UAE Data Office and affected individuals as required by Article 9 of the PDPL.

9. Cookies

We only use strictly necessary cookies unless you agree to others. Full details, and how to change your choice, are in our Cookie Policy and under "Cookie settings" at the bottom of every page.

10. Children

Our website and services are intended for businesses and adults. We do not knowingly collect data from anyone under 18.

11. Third-party links

The website links to government and news websites. We are not responsible for their privacy practices.

12. Changes to this policy

We may update this policy from time to time. Updates are published here with a new "Last updated" date, and where changes are material we will ask for your consent again where required.

13. Contact

Sage Global Advisory — Dubai, United Arab Emirates. Email: info@sageglobaladvisory.com — Phone: +971 58 570 4140.

If the English and Arabic versions differ, the Arabic version prevails before UAE authorities.