Privacy policy

This notice covers finactuae.com — the website. It describes what the site itself collects. It does not cover the engagement letters, working papers or client files that arise once FINACT Consultancy LLC is engaged to do work; those are governed by the engagement terms agreed with the client.

We have written it against what the site actually does, feature by feature, rather than from a template. If something below does not match your experience of the site, tell us — that is a bug in one of the two.

Who is responsible

FINACT Consultancy LLC, Goldcrest Executive Tower, Cluster C, Jumeirah Lake Towers, Dubai, United Arab Emirates, is the controller of the personal data described here. For anything in this notice — including a request to see or delete your data — write to info@finactuae.com.

If you send us an enquiry

The form on our contact page asks for your name and email address, and optionally your organisation, your phone number and a message. We use them to answer you and to keep a record of the enquiry. That is the only thing we use them for: sending an enquiry does not add you to any mailing list, and we do not sell or rent enquiry data to anyone.

Your enquiry is stored in our database (see who processes data for us) and is readable by our staff. It is not published anywhere.

If you subscribe to our briefings

We ask for your email address, and optionally your name and organisation, so that we can send you our briefings. We use them for nothing else.

To be straightforward about the current state of it: we are not yet sending anything to that list — we hold the addresses until the briefing mailing starts. When it does, every message will carry a one-click unsubscribe. In the meantime, and afterwards, you can be taken off the list at any point by writing to info@finactuae.com.

Analytics and session recording

With your permission we measure how the site is used, through PostHog. Two things are involved and they are worth separating:

• Anonymous analytics. Which pages are read, in what order, and which site or search brought you here. No profile is built for you and nothing links one visit to another — the measurement is deliberately configured so it cannot recognise a returning visitor.
• Session recording. A recording of the page as it appeared, and of scrolling and clicking, so we can see where the site is confusing. Everything typed into a form is hidden from the recording: what you write in an enquiry is never part of it. Our own staff pages are excluded from recording as well.

Neither runs until you accept. Decline and no measurement request is made at all — not a reduced one. You can change your mind at any time, here:

Analytics is not enabled on this deployment, so there is nothing to turn off here.

Analytics requests are served from this site’s own address rather than a third-party one. That is for accuracy — content blockers filter by hostname — and it means no third-party analytics domain is contacted from your browser.

What we store on your device

This site sets no advertising or tracking cookies, and the analytics above is configured to write nothing to your device — no cookie, no local storage, nothing that survives the page.

One thing is stored, and only after you press a button on the consent banner: your answer to it. It is a single entry in your browser’s local storage holding one word, either granted or denied. It contains no identifier of any kind. It exists so we do not ask you the same question on every page, and clearing your browser storage removes it — after which we will ask again.

If you sign in to the staff panel, a session cookie is set so you stay signed in. That applies to our staff, not to visitors.

Careers

Our vacancies are advertised on this site but applications are not taken through it — there is no upload form, and we hold no CVs submitted through the website. Applications arrive by email, and what you send that way is used to consider you for the role you applied for.

Keeping the site available

To stop the forms being flooded, we count recent submissions against a scrambled, one-way fingerprint of the connection they came from. We do not store IP addresses in order to do it. The counters are short-lived: each one stops being used after an hour, and is deleted once it is over a day old. Our hosting provider keeps its own standard server logs, as every web host does.

Who processes data for us

We use a small number of service providers, each for one job:

• Supabase — the database holding enquiries and subscriptions. Our database is hosted in Australia, so data you send us through this site is stored outside the UAE.
• PostHog — the analytics and session recording described above, on its European infrastructure, and only if you accepted.
• Our web host and email provider — serving these pages and carrying our correspondence.

None of them is permitted to use your data for their own purposes. We do not sell personal data, and we do not share it for advertising.

How long we keep it

Enquiries and subscription records are kept for as long as they are needed — to answer you, to send the briefings you asked for, and to keep a record of our dealings with you — and are deleted when you ask us to, or when they are no longer needed for either purpose. The flood-protection counters described above are deleted once they are over a day old.

If you would like a firm retention period stated here, ask us — we would rather publish one we keep to than one that sounds reassuring.

Your rights

You can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or stop using it. You can withdraw consent to analytics at any time, using the switch above, and withdrawing it is as easy as giving it — that is deliberate.

Write to info@finactuae.com and we will respond. Depending on where you live, you may also have the right to complain to a data protection authority — in the UAE, under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data; in the EEA or the UK, to your national supervisory authority.

Changes to this notice

If what the site does changes, this page changes with it, and the date at the top changes too. We will not quietly widen what we collect and leave this page describing the old version.