Privacy
Policy

Introduction & Scope

ZEYATEK is fundamentally committed to safeguarding the privacy and ensuring the confidentiality of all personal data entrusted to the organization. Headquartered in the Masdar City Freezone, Abu Dhabi, United Arab Emirates, ZEYATEK operates in rigorous compliance with UAE data protection law — specifically Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data — alongside all applicable federal and freezone regulations.

This policy formally outlines the methodologies, technical mechanisms, and governance principles governing the collection, utilization, protection, and retention of personal information acquired through our digital infrastructure and throughout the execution of professional commercial engagements. It takes effect immediately upon publication and governs all current and subsequent data processing activities across our operational portfolio.

Information Collected

We routinely collect professional, administrative, and commercial information through direct business-to-business interactions — including corporate contact details and operational data acquired during the provision of enterprise advisory and technology consulting engagements.

Our website does not deploy browser fingerprinting, tracking pixels, or behavioural profiling technologies intended to build individual demographic profiles or monitor personal browsing activity beyond what is described under Analytics below.

Analytics

Google Analytics uses first-party cookies to collect this information. We have configured our implementation to anonymize IP addresses and we do not use Google Analytics to track, identify, or profile individual visitors. No data collected through analytics is linked to a named person or email address held in our systems.

You may opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings. Opting out has no effect on your ability to access or use any part of this website.

How We Use Information

All personal and corporate data is used strictly for the purposes communicated at the point of collection or established within mutually executed commercial contracts.

Professional information collected during commercial engagements is used to facilitate communication, respond to formal inquiries, manage contractual and financial obligations, and deliver the advisory services provided by the firm. Enterprise data processed during technology deployments — such as cloud migration, hybrid/multi-cloud architecture, identity and access management, threat detection, on-premise AI deployment, or legacy modernization — is used strictly under the documented instructions of the enterprise client.

Legal Basis for Processing

Processing is executed upon distinct, lawful foundations as mandated by UAE data protection law and aligned with international best practices.

Aggregated, anonymized analytics data collected via Google Analytics is processed on the basis of our legitimate interest in understanding the performance of our public-facing content, in a manner that does not override individual privacy interests.

Data Sharing & Disclosure

ZEYATEK operates under a strict mandate prohibiting the monetization, commercial sale, or unauthorized distribution of personal data to external parties.

We reserve the right to disclose personal data when strictly required by law, in response to lawful judicial subpoenas, or in cooperation with federal regulatory authorities in the protection of the public interest.

Security Safeguards

Reflecting our core expertise in Zero Trust Architecture, threat detection and response, and cyber resilience, ZEYATEK implements enterprise-grade technical and organizational safeguards to protect personal data against unauthorized access, accidental loss, alteration, or disclosure.

Security measures encompass advanced cryptographic encryption for data at rest and in transit, stringent identity and access management controls, and continuous system observability to detect, isolate, and neutralize potential threats — ensuring the uncompromised integrity of the data environments we steward.

Data Retention

Personal data is retained strictly for the duration necessary to fulfill the original purpose of collection, or as expressly mandated by federal legislation.

Business, financial, and contractual records from enterprise consulting engagements are retained in secure archives for a minimum statutory period — typically seven years following the conclusion of the applicable tax period — in compliance with UAE Corporate Tax Law, the Federal Value Added Tax Law, and broader federal accounting mandates.

Aggregated, anonymized analytics data does not constitute personal data for retention purposes. It is subject to Google Analytics' own data retention settings, which we have configured in accordance with our operational requirements.

Your Rights

In accordance with UAE Federal Decree-Law No. 45 of 2021, data subjects are afforded comprehensive rights regarding their personal information:

• Right to transparent access to your personal data
• Right to rectification of inaccurate or incomplete information
• Right to erasure, subject to statutory retention requirements
• Right to restrict or object to specific processing activities
• Right to data portability in structured, machine-readable formats
• Right to withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, please contact our privacy compliance unit at privacy@zeyatek.com.

Children's Privacy

Our website, digital infrastructure, and professional services are strictly intended for an enterprise and adult demographic. In accordance with the UAE Child Digital Safety Law and the Personal Data Protection Law, we do not knowingly collect, solicit, or process personal data from individuals under the age of eighteen.

If we become aware that data belonging to a minor has been inadvertently collected without the verified consent of a legal custodian, immediate protocols will be initiated to securely purge that data from all active and archival systems.

Policy Updates

ZEYATEK reserves the right to amend this policy to reflect changes in federal jurisprudence, freezone regulations, or internal data governance protocols. In the event of material modifications, we will issue direct electronic notification to all active newsletter subscribers and enterprise clients, and update the effective date on this page.

Contact & Compliance Inquiries

We welcome inquiries regarding our privacy framework, data governance protocols, or the exercise of your statutory rights. All formal correspondence should be directed to our dedicated privacy compliance unit.