WE DON'T JUST ADVISEWE EXECUTE AND DELIVER
Legal & Data

Privacy Policy

How we collect, use, protect and retain your information — including our cookie practices and data retention periods. This page brings together our Privacy Policy, Cookie Policy and Data Retention & Destruction Policy.

Last updated: 09 October 2025
Privacy Policy Cookie Policy Data Retention & Destruction
Part 1
Privacy Policy

This policy explains what personal information Stravision Management Consultancies L.L.C-FZ collects, why we collect it, and the safeguards we apply. It applies to visitors of this website and to clients engaging our advisory services.

1 Information We Collect

We may collect and process the following categories of information:

1.1 Personal Information

  • Name, email address and phone number
  • Company name, designation and business details
  • Identification documents shared for KYC/AML verification
  • Address and contact information submitted through forms

1.2 Sensitive & Regulated Information

Collected only when required for our services (for example AML, Risk, Tax and Compliance advisory):

  • Passport copies and Emirates ID
  • Business licences and corporate documents
  • Financial statements

This information is processed lawfully and securely, and only for required regulatory compliance.

1.3 Website & Technical Data

  • IP address, device type and browser details
  • Approximate location data
  • Pages accessed, time spent and traffic source
  • Cookies and analytics tags (Google Analytics, Meta Pixel, LinkedIn Insight, and similar)

1.4 Communication Data

  • Emails, chat messages, inquiries and consultation requests
  • Call-back or meeting requests submitted through forms

2 How We Use Your Information

We process personal data strictly for legitimate business purposes, including:

  • Providing advisory, consulting, compliance and support services
  • Responding to inquiries and booking consultations
  • Performing KYC/AML obligations as required by UAE law
  • Preparing engagement letters, NDAs and service proposals
  • Conducting regulatory compliance checks
  • Managing newsletters, compliance updates and announcements
  • Improving website functionality, performance and analytics
  • Maintaining internal records and audit trails

We never sell, rent or trade your information.

3 Legal Basis for Processing

  • Consent — when you voluntarily submit forms or subscribe
  • Contractual necessity — when entering into advisory or service agreements
  • Legal obligation — especially for AML, KYC, accounting, tax or regulatory requirements
  • Legitimate interest — service optimisation, analytics and fraud detection

4 How We Store & Protect Your Information

  • Encrypted data transfer (HTTPS, TLS)
  • Encrypted storage for documents and emails
  • Verified secure platforms (SharePoint, Zoho, Idenfo Direct, internal servers)
  • Internal access restrictions and staff confidentiality obligations
  • Data minimisation and retention controls
  • Regular cybersecurity reviews

5 Data Sharing & Disclosure

We may share data only in the following situations:

  • With your consent
  • With approved service partners (auditors, AML specialists, Zoho/SharePoint platforms)
  • Where required by legal or regulatory authorities (MOE, FTA and others)
  • In business transfers, with confidentiality safeguards

6 International Transfers

Some processors may operate outside the UAE. Where this happens, transfers are secured through contractual clauses and safe channels.

7 Data Retention

Personal data is retained only as long as needed for legal and regulatory obligations, the AML retention period (five years), and audit and compliance reviews, after which it is securely deleted.

Full retention periods and secure-destruction methods are set out in the Data Retention & Destruction Policy below. AML-specific record-keeping is detailed in our Regulatory Disclosures.

8 Your Rights

You may request access, correction, restriction or deletion of your personal data, and you may opt out of marketing communications. To exercise these rights, contact info@stravision.ae.

9 Third-Party Links

Our website may link to external sites. Those sites are not governed by this policy, and we are not responsible for their content or practices.

10 Policy Updates

We may revise this policy periodically. The latest version will always be published on this page.

Part 2
Cookie Policy

This section explains how we use cookies and similar technologies on this website, and how you can control them.

1 What Are Cookies?

Cookies are small files placed on your device that store preferences and help a website function and remember your choices.

2 Types of Cookies We Use

  • Strictly necessary — required for the website to work
  • Performance & analytics — help us understand how the site is used
  • Functionality — remember your preferences
  • Marketing & advertising — support relevant campaigns and measurement

3 How We Use Cookies

We use cookies to improve navigation, analyse performance, personalise your experience and support our marketing.

4 Third-Party Cookies

Some cookies are set by analytics and advertising tools we use. These are governed by the respective providers' policies.

5 Managing Cookies

You can disable or delete cookies through your browser settings. Blocking some cookies may affect how parts of the site function.

6 Updates

This Cookie Policy may be revised periodically. Please check back for the current version.

Part 3
Data Retention & Destruction Policy

This policy sets out how long we keep records and how we securely destroy them once retention periods expire. It applies to all Stravision verticals — Core, Corp, Risk, Shift and Insights.

1 Purpose & Scope

The purpose of this policy is to meet UAE requirements, protect data, support audits and ensure secure destruction. It applies across all service verticals and to every category of record we hold.

2 Categories of Records

  • Identification documents
  • Corporate records
  • Financial and tax records
  • AML and Enhanced Due Diligence (EDD) files
  • Emails and CRM data
  • Website analytics data

3 Retention Periods

AML / KYC records5 years
Tax / VAT records7 years
Corporate records5–10 years
Audit working papers5–7 years
HR files5–10 years
Marketing / lead data2 years

4 Secure Storage

  • Encrypted systems
  • Multi-factor authentication (MFA)
  • Access control
  • Confidentiality protocols

5 Secure Destruction

Once retention periods expire, records are destroyed by shredding, secure wipe or cryptographic erasure.

6 Exceptions

Records may be retained beyond standard periods where they are subject to legal holds or ongoing investigations.

7 Contact

For any question about this policy, data privacy, cookies or retention, contact us at info@stravision.ae.

Stravision Management Consultancies L.L.C-FZ, Dubai, UAE. Email: info@stravision.ae