Privacy Policy

1. Introduction

Ember Consulting Group ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (ecg-global.com) or use our services, in compliance with the UAE Data Protection Law and international privacy standards.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Fill out contact forms or request information
• Book a discovery call or consultation
• Subscribe to our newsletter
• Engage with our services
• Communicate with us via email or phone

This information may include: name, email address, phone number, company name, job title, business information, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including:

• IP address and location data
• Browser type and version
• Pages visited and time spent on pages
• Referring website addresses
• Device information and screen resolution

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our consulting services
• To respond to your inquiries and provide customer support
• To schedule and conduct discovery calls and consultations
• To send you newsletters and marketing communications (with your consent)
• To improve our website and services
• To comply with legal obligations under UAE law
• To protect our rights and prevent fraud

4. Legal Basis for Processing (UAE Compliance)

Under the UAE Data Protection Law, we process your personal data based on:

• Consent: When you voluntarily provide information or subscribe to our services
• Legitimate Interest: For business operations, website analytics, and service improvement
• Contractual Necessity: To fulfill our consulting services and agreements
• Legal Compliance: To meet UAE regulatory requirements

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our operations (email services, analytics, etc.)
• Legal Requirements: When required by UAE law or legal process
• Business Transfers: In connection with any merger, sale, or acquisition of our business
• Protection of Rights: To protect our rights, property, or safety, or that of others

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure servers and databases
• Regular security assessments
• Access controls and employee training
• Compliance with UAE cybersecurity regulations

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by UAE law. Typically, we retain:

• Contact information: Until you request deletion or unsubscribe
• Consultation records: For 7 years as required by UAE business regulations
• Website analytics: For 2 years for business analysis purposes

8. Your Rights Under UAE Law

Under the UAE Data Protection Law, you have the following rights regarding your personal data:

• Right of Access: Request information about how your data is processed
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing in certain situations
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing at any time

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. You can control cookie settings through your browser preferences. For more information about our cookie usage, please see our Cookie Policy.

10. International Data Transfers

While our primary operations are based in the UAE, some of our service providers may be located outside the UAE. When we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with UAE data protection requirements.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Effective Date" at the top of this policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights regarding your personal data, please contact us at:

14. Regulatory Compliance

This Privacy Policy is designed to comply with:

• UAE Federal Data Protection Law
• Dubai Data Protection Law
• DIFC Data Protection Law (where applicable)
• International privacy best practices