Privacy Policy

 QnE Management Consultancy (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your right to privacy. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard your information when you visit our website https://qneuae.com or engage our professional services.

Please read this policy carefully. By accessing our website or engaging our services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree, please refrain from using our website or providing us with your personal data.

1. WHO WE ARE

QnE Management Consultancy is a management and ISO certification consultancy registered and operating in the United Arab Emirates. We act as the data controller for personal data collected through this website and in the course of our business activities.

QnE Management Consultancy

Email: info@qneuae.com

Website: https://qneuae.com

Jurisdiction: United Arab Emirates

Registered: Dubai, United Arab Emirates

2. LEGAL BASIS FOR PROCESSING

We process your personal data in compliance with the following applicable laws and regulations:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulations
• UAE Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in Health Fields (where applicable)
• EU General Data Protection Regulation (GDPR) — for data subjects located in the European Economic Area
• UK GDPR — for data subjects located in the United Kingdom
• Other applicable international data protection frameworks

Our lawful bases for processing your personal data include:

• Consent — where you have given us explicit permission to process your data
• Performance of a Contract — where processing is necessary to deliver services you have requested
• Legal Obligation — where we are required to process data to comply with applicable laws
• Legitimate Interests — where processing is necessary for our legitimate business purposes, provided your rights are not overridden

3. INFORMATION WE COLLECT

We may collect the following categories of personal data:

a)  Information You Provide Directly

• Full name, job title, and company name
• Email address and phone number
• Enquiry details and messages submitted via contact forms
• Information provided during consultancy engagement
• Billing and invoicing details for contracted services

b)  Information Collected Automatically

• IP address and browser type and version
• Pages visited, time spent on our website, and click behaviour
• Referring URLs and device information
• Cookies and similar tracking technologies (see Section 9 below)
• Geolocation data (country/city level only, derived from IP address)

c)  Information from Third Parties

• Publicly available professional information (e.g., LinkedIn or company directories)
• Referrals from partners or event organisers
• Background or verification data provided by clients or regulatory bodies as part of ISO certification processes

Note: We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately at info@qneuae.com and we will take prompt steps to delete it.

4. HOW WE USE YOUR INFORMATION

We use the personal data we collect for the following purposes:

• To respond to your enquiries and provide consultancy and ISO certification services
• To send proposals, quotations, and service agreements
• To manage our client relationship and deliver contracted services
• To send relevant updates, newsletters, or marketing communications (with your consent — you may opt out at any time)
• To comply with legal, regulatory, and audit obligations
• To improve our website functionality and user experience
• To prevent fraud and ensure the security of our systems and communications
• To fulfil obligations under ISO certification processes where you are a named point of contact
• To manage invoicing, payments, and financial records
• To conduct internal training, quality assurance, and business planning activities

5. SHARING YOUR INFORMATION

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:

a)  Service Providers

We engage trusted third-party service providers who assist us in operating our website and delivering services (e.g., IT hosting, email delivery, document management platforms). These parties act as data processors and are bound by confidentiality obligations and data protection agreements.

b)  Professional Advisors

We may share information with our legal advisors, accountants, or auditors where required for compliance or business operations.

c)  Certification Bodies and Regulatory Authorities

In connection with ISO certification services, we may share relevant contact information with accreditation bodies, certification authorities, or regulatory agencies as required for audit or certification purposes.

d)  Legal Obligations

We may disclose your personal data if required to do so by applicable law, court order, or governmental authority, or if we believe such action is necessary to protect our rights, your safety, or the safety of others.

e)  Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. INTERNATIONAL DATA TRANSFERS

As a UAE-based consultancy, your data is primarily processed and stored within the United Arab Emirates. Where we engage service providers or share data with parties outside the UAE, we ensure appropriate safeguards are in place, including:

• Adequacy decisions under applicable law
• Standard contractual clauses or equivalent data transfer mechanisms
• Binding corporate rules where applicable

We will always take steps to ensure that any international transfer of personal data is handled securely and in accordance with applicable data protection laws.

7. DATA RETENTION

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Data Type

Retention Period

Client contract and service records

7 years from end of engagement (or as required by UAE law)

Enquiry and contact form submissions

2 years from date of submission

Marketing communication preferences

Until consent is withdrawn or 3 years of inactivity

Website analytics and log data

Up to 26 months

Financial and invoicing records

10 years in accordance with UAE commercial law

ISO certification process documentation

Duration of certification + 5 years

After the applicable retention period, we will securely delete or anonymise your personal data.

8. YOUR RIGHTS

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request that we correct inaccurate or incomplete personal data.

Right to Erasure: You may request the deletion of your personal data where there is no compelling reason for its continued processing.

Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability: Where applicable, you may request that your data be transferred to another organisation in a structured, commonly used format.

Right to Object: You may object to the processing of your personal data for direct marketing or where we rely on legitimate interests.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

To exercise any of the rights above, please contact us at: info@qneuae.com

We will respond to your request within 30 days in accordance with applicable law. We may need to verify your identity before processing your request.

9. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and deliver relevant content. A cookie is a small data file placed on your device when you visit our website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the website to function properly. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). Data is aggregated and anonymised.
• Functional Cookies: Enable enhanced functionality and personalisation (e.g., remembering your preferences).
• Marketing Cookies: Used to track visitors across websites and deliver relevant advertisements. Only activated with your consent.

You can manage your cookie preferences through your browser settings or via our cookie consent banner when you first visit our website. Please note that disabling certain cookies may affect the functionality of the website.

10. DATA SECURITY

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Secure HTTPS encryption for all data transmitted via our website
• Access controls and role-based permissions for internal systems
• Regular security assessments and staff training
• Data minimisation and pseudonymisation where appropriate
• Incident response procedures to address any data breaches promptly

While we strive to protect your personal data, no transmission over the internet or electronic storage method is 100% secure. We encourage you to use secure connections and to notify us immediately if you become aware of any unauthorised use of your information.

11. THIRD-PARTY LINKS

Our website may contain links to third-party websites, social media platforms (e.g., LinkedIn), or partner organisations. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party websites you visit, as we have no control over their content or data practices.

12. MARKETING COMMUNICATIONS

We may send you marketing communications about our services, events, publications, and industry updates where you have provided your consent or where we have a legitimate interest in doing so.

You may opt out of receiving marketing communications at any time by:

• Clicking the 'Unsubscribe' link in any email we send
• Contacting us directly at info@qneuae.com

Opting out of marketing communications will not affect the delivery of service-related communications necessary for your ongoing engagement with us.

13. AUTOMATED DECISION-MAKING AND PROFILING

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals. Where automated tools are used (e.g., website analytics), this is solely for statistical analysis to improve our services and does not involve decisions that affect your rights or interests.

14. CHILDREN'S PRIVACY

Our website and services are directed at business professionals and are not intended for individuals under the age of 18. We do not knowingly collect or solicit personal data from minors. If we become aware that we have collected data from an individual under 18 without verifiable parental consent, we will take prompt steps to delete that information.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will:

• Update the 'Last Updated' date at the top of this policy
• Post the revised policy on our website with reasonable notice
• Notify existing clients via email where the changes materially affect their rights

We encourage you to review this policy periodically. Your continued use of our website or services following any changes constitutes your acceptance of the revised policy.

16. CONTACT US

If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact us using the details below:

QnE Management Consultancy

Email: info@qneuae.com

Website: https://qneuae.com

Jurisdiction: United Arab Emirates

We aim to respond to all enquiries within 5 business days.

For formal data subject access requests, please allow up to 30 days.