Privacy Policy

1. Who we are

Veridion & Partners is operated by Veridion and Partners FZ-LLC, a Free Zone Limited Liability Company (FZ-LLC) licensed by the Ras Al Khaimah Economic Zone Authority (RAKEZ) under Licence Number 47034601, with its registered address at RAKEZ Business Zone, Al Nakheel Area, P.O. Box No. 10055, Ras Al Khaimah, United Arab Emirates. For the purposes of applicable data protection law, we act as the "controller" of the personal data described in this Policy. Where we process data on behalf of a client, we act as a "processor" and our handling of that data is governed by our services agreement with that client.

For any questions about this Policy or your personal data, contact us at info@veridionandpartners.com or at the address set out in Section 12.

2. Information we collect

We collect the following categories of personal data:

Information you provide to us

• Identity and contact details - name, job title, employer, business email address, and telephone number.
• Enquiry and engagement information - the content of messages you send us, details about your organisation and its growth objectives, and any information you provide when requesting a proposal or consultation.
• Commercial and contractual data - information exchanged in the course of scoping, delivering and billing for advisory engagements.
• Recruitment data - if you apply for a role or partner opportunity, the information in your application, CV, and related correspondence.

Information we collect automatically

• Technical data - IP address, browser type and version, device information, operating system, and referring URLs.
• Usage data - pages viewed, links clicked, time spent on the site, and similar analytics gathered through cookies and comparable technologies (see Section 7).

Information from third parties

We may receive limited business contact information from professional networks, publicly available sources, referral partners, and analytics or marketing providers, which we use to identify and contact organisations that may benefit from our services.

Sensitive personal data. Our services are advisory and directed at businesses, not patients. We do not seek patient records or clinical health data through this website. Please do not submit any patient information or special-category data through our website forms or email.

3. How we use your information

We use personal data for the following purposes:

• To respond to enquiries, provide requested information, and arrange consultations.
• To deliver, manage, and improve our advisory services and client engagements.
• To administer contracts, issue invoices, and process payments.
• To send relevant business communications, insights, and updates where you have requested them or where we are otherwise permitted to do so.
• To operate, secure, and improve our website and understand how it is used.
• To assess and manage recruitment and partner applications.
• To comply with legal, regulatory, and accounting obligations, and to establish, exercise, or defend legal claims.

4. Legal bases for processing

Where required by applicable law, we rely on one or more of the following legal bases to process your personal data:

• Consent - where you have given clear consent, for example to receive marketing communications.
• Contract - where processing is necessary to take steps at your request before entering a contract, or to perform a contract with you or your organisation.
• Legitimate interests - where processing is necessary for our legitimate business interests, such as growing our business and securing our systems, provided these are not overridden by your rights.
• Legal obligation - where processing is necessary to comply with a legal or regulatory requirement.

5. How we share your information

We do not sell your personal data. We may share it with:

• Service providers - trusted vendors who support our operations (for example hosting, IT, analytics, email, CRM, and payment providers), who are bound to process data only on our instructions.
• Professional advisers - lawyers, accountants, and auditors where necessary.
• Authorities - regulators, courts, or government bodies where required by law.
• Business transfers - a successor entity in connection with a merger, acquisition, or reorganisation, subject to this Policy.

6. International transfers

We operate across the United Arab Emirates, the Kingdom of Saudi Arabia, and other jurisdictions, and some of our service providers are located outside your country. Where we transfer personal data internationally, we take steps to ensure an appropriate level of protection through recognised safeguards such as adequacy decisions or contractual protections, consistent with applicable data protection law, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

7. Cookies and analytics

Our website uses cookies and similar technologies to function correctly, remember your preferences, and understand site usage. These include strictly necessary cookies as well as analytics and, where enabled, marketing cookies. You can control cookies through your browser settings and, where presented, through our cookie banner. Disabling certain cookies may affect how the website functions.

8. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements. Retention periods vary by data type and the nature of our relationship with you. When data is no longer needed, we securely delete or anonymise it.

9. Data security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. These include access controls, encryption in transit where appropriate, and confidentiality obligations on our team and partners. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data in certain circumstances.
• Object to or request restriction of certain processing.
• Withdraw consent at any time where processing is based on consent.
• Request a copy of your data in a portable format, where applicable.

To exercise any of these rights, contact us at privacy@veridionandpartners.com. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with the relevant data protection authority.

11. Third-party links

Our website may contain links to external sites we do not operate. We are not responsible for the privacy practices of those sites, and we encourage you to review their policies before providing any information.

12. Contact us

13. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you. Your continued use of our website after changes take effect constitutes acceptance of the revised Policy.