Privacy Policy

Last updated: 18 October 2026

1. Introduction

Zelgano Studies respects privacy and aims to handle personal information responsibly.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our Website, contact us, submit an enquiry or communicate with us about our services.

Data controller / responsible entity: [Insert full licensed legal entity name]

Trade name: Zelgano Studies

Location: Abu Dhabi, United Arab Emirates

Privacy contact: [Insert official business email]

This Policy should be read together with our Terms of Use and any separate privacy or data-processing terms agreed for a client engagement.

2. Applicable Privacy Framework

We aim to handle personal data in accordance with applicable UAE data-protection requirements, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, to the extent it applies to the relevant processing.

Certain organizations, locations, free zones or types of information may be subject to additional or different rules. Applicable requirements will depend on the responsible legal entity, its activities and the circumstances of processing.

3. Personal Information We May Collect

Depending on how you interact with us, we may collect the following categories of information:

Information you provide

• Name and business contact details.
• Company name, job title or professional role, where provided.
• Enquiry subject, selected service and description of your requirements.
• Information you include in correspondence or provide during a consultation.
• Documents or other information you choose to share with us.

Please do not include sensitive personal data, confidential business records or unnecessary information about other individuals in a general website enquiry.

Technical and usage information

Depending on the Website's actual configuration, we may process technical information such as IP address, browser and device information, access timestamps, requested pages, referring pages and security logs.

Cookies, analytics identifiers or similar technologies may be used only where implemented. The live Website should accurately identify the technologies in use and any relevant consent choices.

Client engagement information

If you engage our services, we may process contact details, project correspondence, documents, records, deliverable requirements, approvals, invoices and other information necessary to manage the engagement.

The categories of information depend on the services agreed and should be limited to what is reasonably necessary.

4. How We Use Personal Information

Subject to applicable law, we may use personal information to:

• Respond to enquiries and requests for information.
• Assess whether a requested service falls within our authorized scope.
• Prepare proposals and discuss possible engagements.
• Deliver and manage agreed services.
• Communicate about scope, deliverables, approvals and project administration.
• Maintain business records and handle invoicing or payment administration where applicable.
• Protect the Website, prevent misuse and investigate security incidents.
• Meet applicable legal or regulatory obligations.
• Establish, exercise or defend legal claims where necessary.

We do not state that all processing relies on consent. Depending on the circumstances and applicable law, a relevant lawful basis may include consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation or another basis recognized by applicable law.

5. Marketing Communications

We may use your enquiry details to respond to your request and discuss the services you asked about.

We will not treat submitting a service enquiry as blanket permission to send unrelated promotional messages.

Any marketing activity must comply with applicable UAE requirements. Where consent or another specific legal condition is required, we will obtain or satisfy it before proceeding. You may request that direct marketing communications stop.

We do not sell personal information to third parties.

6. Cookies and Analytics

The Website may use essential technical storage or cookies needed for basic operation, security or user preferences.

Analytics, advertising or other non-essential tracking technologies should be described here only if they are actually installed. Where required by applicable law, appropriate consent must be obtained before such technologies are used.

Before publication, the Website operator should verify its analytics tools, tag manager, embedded content, hosting configuration and cookie behavior, then provide any required controls and details.

7. Sharing Personal Information

We may share personal information where necessary and appropriate with:

• Website hosting, maintenance and technical service providers.
• Business email and communications providers.
• Secure file-storage or productivity service providers used for an engagement.
• Professional advisers or service providers where necessary.
• Public authorities, regulators or other parties where disclosure is required or permitted by applicable law.
• A successor or relevant party in a legitimate business restructuring, where lawful safeguards apply.

Service providers should receive only the information reasonably required for their role and should be subject to appropriate contractual, confidentiality and security arrangements where required.

We do not authorize third parties to use personal information obtained through us for their own unrelated marketing purposes.

The final published Policy should identify specific providers or meaningful categories of providers in a way that accurately reflects the actual systems in use.

8. International Transfers

Some of our hosting, email, storage, analytics or other service providers may process information outside the UAE.

Where personal data is transferred internationally, we will assess and follow the requirements applicable to that transfer, including any required safeguards, conditions or permissions.

Before publishing this section, we should confirm the countries and providers involved in the actual Website and client-delivery systems. We should not promise that all data remains in the UAE unless this has been verified.

9. Data Security

We aim to implement reasonable technical and organizational safeguards appropriate to the information we process and the risks involved.

Safeguards may include access restrictions, account security, secure transmission, appropriate service-provider controls, backups and measures to prevent unauthorized access, alteration, loss or disclosure.

No online system or method of transmission can be guaranteed to be completely secure. We will handle suspected personal-data incidents in accordance with applicable requirements.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal, regulatory, contractual and dispute-related requirements.

Retention periods may differ between enquiries, client engagement records, financial records, technical logs and other categories.

Before publication, the Website operator should establish actual retention periods or criteria, including how unsuccessful enquiries, old contact records, backups and deleted accounts are handled. We should not claim that information is deleted immediately or after a fixed period unless that practice is implemented.

11. Your Rights

Subject to applicable law and any relevant exceptions, you may be entitled to request information about the processing of your personal data and exercise rights such as:

• Access to personal data.
• Correction of inaccurate or incomplete data.
• Erasure or restriction of processing where applicable.
• Objection to certain processing, where the law provides that right.
• Withdrawal of consent where processing relies on consent.
• Other rights available under applicable law.

To submit a request, contact [Insert privacy contact email]. We may need to verify your identity and clarify the scope of the request before responding.

Some requests may be restricted where applicable law permits or requires us to retain or process particular information.

You may also have the right to raise a complaint with the competent authority, as provided by applicable law.

12. Confidential Business Information

Personal data and confidential business information are not the same thing.

If you engage Zelgano Studies, confidentiality obligations concerning business documents, commercial information, research data, deliverables and project communications should be addressed in the relevant proposal or service agreement.

Please avoid sending confidential documents through a general contact form. Where a project requires sensitive business information, an appropriate transfer method and any necessary confidentiality or data-processing arrangements should be agreed.

13. Children

The Website and services are intended for business and professional use and are not directed at children.

Please do not submit children's personal data through the Website unless this is specifically necessary, lawful and appropriately authorized.

14. Third-Party Links

The Website may link to third-party websites or services. Their privacy practices are governed by their own policies.

We are not responsible for the privacy practices of third-party websites that we do not control.

15. Changes to This Policy

We may update this Policy to reflect changes in our services, Website technology or applicable requirements. The updated Policy will be published on this page with a revised date.

Where required by applicable law, we will provide additional notice or obtain consent for material changes to processing.

16. Contact Us

For privacy questions or requests concerning personal information, contact:

Zelgano Studies

Abu Dhabi, United Arab Emirates

Email: privacy@zelganostudies.com