Privacy policy

This Privacy Policy explains how IncrementumME FZ-LLC ("we", "us" or "our") processes Personal Data when you visit incrementumme.com (the "Website"), contact us, or deal with us as a prospective client, client, supplier or business contact.

We process Personal Data in accordance with the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), its implementing regulations and decisions, and other applicable laws of the United Arab Emirates ("UAE").

Where you are located outside the UAE and a foreign data protection law applies to our processing of your Personal Data, such as the EU or UK General Data Protection Regulation, we will also respect the rights that law gives you.

This Policy does not apply to websites or services operated by third parties, including those linked from the Website. Please read their privacy notices separately.

IncrementumME FZ-LLC, a free zone limited liability company incorporated on 10 September 2024 and registered with the Ras Al Khaimah Economic Zone Authority (RAKEZ), Government of Ras Al Khaimah, under registration number 0000004056055, is the Controller of the Personal Data described in this Policy.

You can contact us about this Policy or about your Personal Data at enquiry@incrementumme.com, marked for the attention of the Data Protection Contact.

We collect the following categories of Personal Data:

We do not intentionally collect sensitive Personal Data, such as data revealing racial or ethnic origin, political opinions, religious beliefs, health, biometric or genetic data, or criminal records. Please do not include such data in the problem statement or in any correspondence with us.

If you provide Personal Data about another person, such as a colleague, you confirm that you are authorised to do so and that the person has been informed of this Policy.

We collect most Personal Data directly from you. We may also receive business contact details from your colleagues or organisation, from people who refer you to us, at professional events, and from publicly available sources such as company websites, professional networks and public registers.

Where we obtain Personal Data from a third party, we use it only for purposes compatible with those described in this Policy.

In line with the PDPL, we process Personal Data fairly, transparently and lawfully; we collect it only for specified and clear purposes; we limit it to what is adequate and necessary for those purposes; we keep it accurate and up to date; we keep it no longer than necessary; and we protect it with appropriate security measures.

Where we combine or analyse data, we use anonymised or aggregated data wherever possible. Data that has been anonymised so that it no longer identifies you is not Personal Data and is not subject to this Policy.

We process Personal Data only for specified, clear and legitimate purposes, and only to the extent necessary for those purposes. The table below sets out each purpose and the legal basis we rely on.

Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of Processing carried out before you withdrew it.

We do not sell Personal Data.

We send insights, event invitations or other marketing communications only where you have given your prior consent, or where the law otherwise permits. Every such communication includes a simple way to unsubscribe, and you can withdraw your consent at any time by writing to us.

We do not make decisions about you based solely on automated Processing that produce legal effects concerning you or similarly affect you.

We disclose Personal Data only where necessary for the purposes in this Policy, and only to:

We require every recipient to protect Personal Data to a standard at least equivalent to this Policy.

Some of our service providers store or process Personal Data outside the UAE, including in the United States and the European Union.

We transfer Personal Data outside the UAE only in accordance with Articles 22 and 23 of the PDPL. This means transferring to jurisdictions that the competent authority considers to provide an adequate level of protection or, where that is not the case, relying on a lawful alternative recognised by the PDPL, such as binding contractual commitments that require the recipient to protect the data, or your express consent where appropriate.

You may request more information about the safeguards that apply to a particular transfer by writing to enquiry@incrementumme.com.

We keep Personal Data only for as long as necessary for the purpose for which it was collected, and then delete or anonymise it securely.

We may keep Personal Data for longer where required by law or where needed to establish, exercise or defend legal claims.

We apply appropriate technical and organisational measures to protect Personal Data against unauthorised or unlawful Processing, accidental loss, destruction or damage. These include encryption in transit (HTTPS), access controls limited to personnel who need the data, confidentiality obligations, and due diligence on our service providers.

Where a breach of Personal Data is likely to prejudice the privacy, confidentiality or security of your Personal Data, we will notify the Data Office and, where required, you, within the periods and in the manner required by the PDPL.

No method of transmission over the internet or of electronic storage is completely secure. You are responsible for keeping any credentials you use to communicate with us confidential.

Subject to the conditions and exceptions set out in the PDPL, you have the right to:

To exercise any of these rights, contact us at enquiry@incrementumme.com. We may need to verify your identity before acting on your request. We will respond without undue delay and within any period prescribed by applicable law.

We do not charge a fee for responding to a request unless the PDPL permits us to do so, for example where a request is manifestly unfounded or excessive.

Please keep the Personal Data you give us accurate and tell us if it changes. If you provide Personal Data about another person, you are responsible for having a lawful basis to do so and for informing them of this Policy.

If you have a concern about how we handle your Personal Data, please contact us first so that we can try to resolve it.

You also have the right to lodge a complaint with the UAE Data Office or, if you are located outside the UAE, with the data protection authority in your country of residence.

The Website is intended for business users. It is not directed at persons under 18 years of age, and we do not knowingly collect their Personal Data. If you believe a minor has provided us with Personal Data, please contact us and we will delete it.

We may amend this Policy from time to time to reflect changes in our practices or in applicable law. The version number and date at the top of this page indicate when it was last revised.

Where changes are material, we will give notice on the Website before they take effect and, where required by law, seek your consent.

This Policy is written in English. Where it is translated into Arabic or another language and there is any inconsistency, the English version prevails to the extent permitted by applicable law.

This Policy is governed by the laws of the Emirate of Ras Al Khaimah and the applicable federal laws of the UAE.