Privacy Policy

Data Controller: Titan Advisory Group
Registered in: United Arab Emirates
Email: [email protected]
Phone: +971 54 705 5554

For any privacy-related queries or to exercise your rights, please contact us at the details above.

We may collect the following categories of personal data:

• Identity data: name, job title, company name.
• Contact data: email address, phone number, postal address.
• Communication data: messages and enquiries you send us via our contact form or email.
• Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers collected automatically when you visit our website.
• Usage data: information about how you use our website (pages visited, time spent, referral source).
• Marketing preferences: your preferences for receiving communications from us.

We do not collect special categories of personal data (e.g. health, biometric, or financial account data) through this website.

• Directly from you — when you complete our contact form, send us an email, or request a consultation.
• Automatically — via cookies and similar technologies when you browse our website (see Section 8).
• From third parties — such as LinkedIn or referral partners, where you have consented to sharing your information.

Under the UAE PDPL and GDPR, we process your personal data on the following legal bases:

• Consent — where you have given clear consent (e.g. subscribing to communications).
• Contract performance — where processing is necessary to fulfil a contract or take pre-contractual steps at your request.
• Legitimate interests — where we have a legitimate business interest that is not overridden by your rights (e.g. improving our services, fraud prevention, direct marketing to existing clients).
• Legal obligation — where we must comply with a legal or regulatory requirement.

• Respond to your enquiries and provide requested services.
• Send you information about our services, insights, and events (where you have opted in or we have a legitimate interest).
• Manage our relationship with you, including billing and contract administration.
• Improve our website and services through analytics.
• Comply with legal and regulatory obligations.
• Detect and prevent fraud or security incidents.

We do not sell your personal data. We may share it with:

• Service providers — trusted third parties who assist us in operating our website and delivering services (e.g. email delivery, hosting, analytics), bound by confidentiality and data-processing agreements.
• Professional advisors — lawyers, auditors, and insurers where necessary.
• Regulatory authorities — where required by law or court order.
• Business transfers — in the event of a merger, acquisition, or sale of assets, subject to appropriate confidentiality obligations.

Our operations are primarily based in the UAE. If we transfer personal data outside the UAE or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authority, or transfers to countries with an adequate level of data protection as recognised by the UAE Data Office or the European Commission.

Our website uses cookies and similar technologies to enhance your experience and gather analytics data. Cookies are small text files stored on your device.

• Strictly necessary cookies: required for the website to function. Cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website. Only placed with your consent.
• Marketing cookies: used to deliver relevant content. Only placed with your consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Withdrawing consent does not affect the lawfulness of prior processing.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Specifically:

• Contact enquiry data: up to 3 years from last contact, unless a business relationship is established.
• Client data: for the duration of the engagement plus 7 years (to meet UAE commercial record-keeping requirements).
• Website analytics data: up to 26 months.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data where there is no compelling reason for continued processing.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format (GDPR).
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (UAE PDPL) or one month (GDPR). We may need to verify your identity before processing your request.

If you are in the EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local supervisory authority.

As a cybersecurity advisory firm, we apply rigorous technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will be revised accordingly. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or our data-processing practices, please contact:

Titan Advisory Group
United Arab Emirates
Email: [email protected]
Phone: +971 54 705 5554