Privacy Policy

OCG Dubai is committed to protecting your privacy and personal data

Last updated: 25 August 2025

🛡️

UAE PDPL Compliance: This privacy policy is designed to comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and Dubai-specific data protection regulations.

1. Introduction

OCG Dubai ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, process, and safeguard your personal information when you visit our website or use our strategic technology consulting services.

As a Dubai-based consulting firm, we comply with all applicable UAE federal laws, Dubai-specific regulations, and international best practices for data protection.

2. Data Controller Information

Company: OCG Dubai

Location: Dubai, United Arab Emirates

Email: privacy@ocg-dubai.ae

Contact: hello@ocg-dubai.ae

Website: https://ocg-dubai.ae

3. Personal Data We Collect

Contact Information:

Full name and job title
Email address and phone number
Company name and industry
Location and time zone

Technical Information:

IP address and browser information
Device type and operating system
Website usage analytics
Cookies and tracking technologies

Business Information:

Project requirements and technology needs
Budget and timeline information
Previous vendor relationships
Strategic business objectives

4. Legal Basis for Processing

Consent:

When you explicitly provide consent for marketing communications, newsletters, or optional services.

Legitimate Interest:

For providing consulting services, business communications, and website functionality.

Contractual Necessity:

When processing is necessary to fulfill our consulting agreements and service delivery.

5. How We Use Your Personal Data

Service Delivery:

• Providing strategic technology consulting
• Vendor selection and evaluation services
• Project management and implementation oversight
• Custom research and market analysis

Communication:

• Responding to inquiries and support requests
• Sending project updates and deliverables
• Sharing relevant industry insights
• Scheduling meetings and consultations

Business Operations:

• Website analytics and performance monitoring
• Lead qualification and opportunity assessment
• Partnership development and networking
• Compliance and regulatory requirements

Marketing (with consent):

• Industry newsletters and market updates
• Webinar and event invitations
• Relevant technology trend analysis
• Strategic thought leadership content

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. In compliance with UAE PDPL requirements, we obtain your explicit consent before placing non-essential cookies.

Essential Cookies

Required for website functionality and security. These cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website (Google Analytics).

Marketing Cookies

Used to deliver relevant content and track the effectiveness of our campaigns.

7. Data Sharing and Third Parties

As a technology consulting company, we do not sell your personal data. Your information is used solely for our business operations and providing consulting services. We may share your information only in the following limited circumstances:

Service Providers:

• Email service providers (Resend)
• Analytics platforms (Google Analytics)
• Database services (Supabase)
• Cloud hosting providers (Railway)

Legal Requirements:

When required by UAE law, Dubai regulations, or to protect our legitimate business interests.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

Active Clients:

Duration of engagement + 7 years for business records

Marketing Contacts:

Until consent is withdrawn or 3 years of inactivity

Website Analytics:

26 months (Google Analytics default)

Legal Requirements:

As required by UAE commercial law

9. Your Data Protection Rights

Under the UAE Personal Data Protection Law, you have the following rights:

Right to Access

Request a copy of your personal data we hold

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Withdraw Consent

Withdraw consent for processing at any time

Right to Data Portability

Receive your data in machine-readable format

Right to Object

Object to processing for marketing purposes

Exercise Your Rights:

To exercise any of these rights, contact us at privacy@ocg-dubai.ae or use ourdata request form.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

Technical Measures:

• SSL/TLS encryption for data transmission
• Database encryption at rest
• Regular security assessments
• Access controls and authentication

Organizational Measures:

• Staff training on data protection
• Data processing agreements with vendors
• Regular policy reviews and updates
• Incident response procedures

11. International Data Transfers

Some of our service providers may be located outside the UAE. When we transfer your personal data internationally, we ensure appropriate safeguards are in place:

Standard contractual clauses approved by data protection authorities
Adequacy decisions for countries with equivalent data protection standards
Vendor certifications and compliance frameworks
Regular monitoring of international data processing

12. Privacy Policy Updates

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes via email or website notice at least 30 days before they take effect.

13. Contact Us

General Inquiries:

Email: hello@ocg-dubai.ae

Website: https://ocg-dubai.ae

Privacy-Related Inquiries:

Email: privacy@ocg-dubai.ae

Subject: Data Protection Request

For urgent privacy matters or data breach notifications, please mark your email as "URGENT" and we will respond within 24 hours.

This privacy policy complies with UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law), Dubai-specific data protection regulations, and international best practices.