Privacy policy

This notice covers finactuae.com — the website. It describes what the site itself collects. It does not cover the engagement letters, working papers or client files that arise once FINACT Consultancy LLC is engaged to do work; those are governed by the engagement terms agreed with the client.

We have written it against what the site actually does, feature by feature, rather than from a template. If something below does not match your experience of the site, tell us — that is a bug in one of the two.

Who is responsible

FINACT Consultancy LLC, Goldcrest Executive Tower, Cluster C, Jumeirah Lake Towers, Dubai, United Arab Emirates, is the controller of the personal data described here. For anything in this notice — including a request to see or delete your data — write to info@finactuae.com.

If you send us an enquiry

The form on our contact page asks for your name and email address, and optionally your organisation, your phone number and a message. We use them to answer you and to keep a record of the enquiry. That is the only thing we use them for: sending an enquiry does not add you to any mailing list, and we do not sell or rent enquiry data to anyone.

Your enquiry is stored in our database (see who processes data for us) and is readable by our staff. It is not published anywhere.

A copy of your enquiry is also created in our customer-relationship system, which is where our team works through enquiries and keeps a record of what was discussed. It holds the same details you sent us, and it is hosted in India — so, like our database, it sits outside the UAE.

If you subscribe to our briefings

We ask for your email address, and optionally your name and organisation, so that we can send you our briefings. We use them for nothing else.

To be straightforward about the current state of it: we are not yet sending anything to that list — we hold the addresses until the briefing mailing starts. When it does, every message will carry a one-click unsubscribe. In the meantime, and afterwards, you can be taken off the list at any point by writing to info@finactuae.com.

Analytics

We do not record your session and we do not build a profile of you. There is no screen recording on this site, and nothing here follows you between visits. The only measurement we run is the page counting described next.

We use Google Analytics 4, and it behaves differently, so it is described separately rather than folded into the list above. It runs before you answer, in a mode Google calls consent mode: it counts the page, and where you came from, but it is prevented from storing anything on your device and cannot recognise you on a later visit. Accepting turns on its cookies; declining, or ignoring the banner, leaves them off. We do not use it for advertising or remarketing, and the advertising permissions it offers are switched off and stay off — accepting analytics does not turn them on. That remains true even if you accept the LinkedIn advertising described next: the two are separate permissions and neither one grants the other.

LinkedIn advertising

We advertise on LinkedIn. If you accept it, we place the LinkedIn Insight Tag on this site, which does two things: it tells us which of our adverts led to an enquiry, and it lets us show our adverts to you on LinkedIn afterwards. This is the one thing on this site that can recognise you personally, because LinkedIn matches what it records against your LinkedIn account. We never see your account — we see counts and audience sizes — but LinkedIn does.

It does not run until you accept it specifically. Accepting analytics does not switch it on, and ignoring the banner leaves it off. Decline and no request is made to LinkedIn at all. You can accept measurement and refuse this, which is what the “analytics only” button on the banner does.

You can change your mind about either of these at any time, here:

Google Analytics is not proxied that way: it is loaded from, and reports to, Google’s own domains, so your browser does contact Google when you use this site. Google acts as our processor for that measurement and may process the data outside the UAE, including in the United States.

The LinkedIn Insight Tag is likewise loaded from, and reports to, LinkedIn’s own domains, so if you accept advertising your browser contacts LinkedIn when you use this site. LinkedIn may process that data outside the UAE, including in the United States. For that tag LinkedIn is not simply acting on our instructions — it uses what it collects for its own advertising platform as well, which is why it is asked about separately and why it is off unless you say otherwise.

What we store on your device

This site sets no advertising cookies unless you accept the LinkedIn advertising described above. If you do accept it, LinkedIn sets advertising cookies; if you do not, there are none. There is no other ad-targeting or remarketing tag on this site.

If you have not accepted anything, nothing is written to your device by our measurement or our advertising: the LinkedIn tag is never loaded, and Google Analytics runs in the restricted mode described above, which is prevented from storing anything.

If you have accepted, Google Analytics sets its own cookies — typically named _ga and _ga_… — which hold a randomly generated number used to recognise the same browser across visits, so that a returning reader is not counted as a new one. They contain no name, email address or anything you have typed. They last up to two years, and turning analytics off with the switch above clears them.

If you have accepted LinkedIn advertising, LinkedIn sets cookies of its own. Most of them are set on linkedin.com rather than on this site, including bcookie, lidc and UserMatchHistory. Depending on how you arrived, it may also set one on this website’s own address — li_gc, li_sugr or li_fat_id — and turning advertising off with the switch above deletes any of those it finds. We cannot delete those, and we would rather say so than imply otherwise: no code on this site is permitted to touch cookies belonging to another website. Turning the switch off stops us collecting anything further; to clear what LinkedIn holds, use your browser’s cookie settings or the advertising controls in your LinkedIn account.

One thing is stored, and only after you press a button on the consent banner: your answers to it. It is a single entry in your browser’s local storage recording, for each of the two questions, either granted or denied. It contains no identifier of any kind. It exists so we do not ask you the same question on every page, and clearing your browser storage removes it — after which we will ask again.

If you sign in to the staff panel, a session cookie is set so you stay signed in. That applies to our staff, not to visitors.

Careers

You can apply for a vacancy through this site. The form asks for your name, email address, mobile number, current location, the role you are applying for, your current designation and organisation, your experience, your professional qualification or education, your earliest joining date, your CV, and short written answers to two questions about the role and your work. Your current and expected pay and your LinkedIn address are optional. We use all of it to consider you for the role you applied for, and for other roles we think might suit you.

Your application, including your CV, is held in our database for twelve months from the day you applied, and is then deleted automatically. Only our own staff can open it, and they have to be signed in to do so.

When you apply, our HR team is sent an email telling them an application has arrived for that role. That email contains no personal details and no copy of your CV — it is a notification, and your information stays on this site rather than being passed into an inbox we cannot later delete from.

You can ask us to delete your application at any time, before the twelve months are up, using the contact details below. If you would rather not use the form, you can still email us your CV instead — the address is on every posting.

Keeping the site available

To stop the forms being flooded, we count recent submissions against a scrambled, one-way fingerprint of the connection they came from. We do not store IP addresses in order to do it. The counters are short-lived: each one stops being used after an hour, and is deleted once it is over a day old. Our hosting provider keeps its own standard server logs, as every web host does.

Who processes data for us

We use a small number of service providers, each for one job:

• Supabase — the database holding enquiries and subscriptions. Our database is hosted in Australia, so data you send us through this site is stored outside the UAE.
• Zoho — the customer-relationship system holding a copy of every enquiry, on infrastructure in India.
• Google Analytics — measures how the site is used. It runs in a restricted, storage-free mode before you answer the banner, and sets cookies only once you accept. Google may process this data outside the UAE, including in the United States. We have not enabled its advertising features, and accepting analytics does not turn them on.
• Google Ads — when we run adverts on Google, the click on an advert carries an identifier on the web address you arrive at. If you then send us an enquiry, we keep that identifier with it and send it back to Google, with the fact that an enquiry was made, so that Google can tell us which advert brought you. We do not send Google your name, your email address or your message. Google uses this to report on our adverts and to train how it places them, so it is using it for its own purposes as well as ours. It may process it outside the UAE, including in the United States.
• LinkedIn — advertising measurement and retargeting, only if you accepted it on the banner. Along with Google Ads above, it is one of the entries on this list that uses what it collects for its own purposes as well as ours — and it is the one that can recognise you personally. LinkedIn may process this data outside the UAE, including in the United States.
• Our web host and email provider — serving these pages and carrying our correspondence.

The two advertising platforms named above — LinkedIn and Google Ads — use what they collect for their own purposes as well as ours. None of the others is permitted to. We do not sell personal data. Nothing you type into a form on this site — your name, email address, company, telephone number or enquiry — is ever passed to an advertising platform. What they receive is that a page was read, and that an enquiry was made: the LinkedIn tag carries no form contents and never has, and the Google Ads upload carries an advert identifier and an outcome, not a person’s details.

How long we keep it

Enquiries and subscription records are kept for as long as they are needed — to answer you, to send the briefings you asked for, and to keep a record of our dealings with you — and are deleted when you ask us to, or when they are no longer needed for either purpose. The flood-protection counters described above are deleted once they are over a day old.

If you would like a firm retention period stated here, ask us — we would rather publish one we keep to than one that sounds reassuring.

Your rights

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or stop using it. You can withdraw consent to analytics or to LinkedIn advertising at any time, and independently of each other, using the switches above. Withdrawing either is as easy as giving it — that is deliberate, and so is the fact that there is a separate switch for each: turning off advertising does not cost you the choice you made about measurement, or the other way round.

Write to info@finactuae.com and we will respond. Depending on where you live, you may also have the right to complain to a data protection authority — in the UAE, under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data; in the EEA or the UK, to your national supervisory authority.

Changes to this notice

If what the site does changes, this page changes with it, and the date at the top changes too. We will not quietly widen what we collect and leave this page describing the old version.