Legal Information

Last Updated: November 2025

Privacy Policy

1. Introduction

This Privacy Policy explains how Altior FZCO ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website at altiorco.com (the "Website") or use our services.

Altior FZCO is registered in Dubai Silicon Oasis, DDP, Building A1, Dubai, United Arab Emirates. We are the Data Controller for the personal information we process.

For privacy-related inquiries, please contact us at [email protected] or +971 58 521 4812.

2. Information We Collect

Information You Provide:

  • Contact form submissions: Name, email address, company name, and any message you provide
  • Calculator inputs: Business metrics you enter (deleted immediately after session ends, not stored)
  • Information Collected Automatically:

  • Cookies and tracking technologies (see Cookie Policy section)
  • Website usage data via Google Analytics (page views, session duration, device type)
  • B2B visitor identification via RB2B (associates your visit with publicly available business information)
  • Email campaign engagement via Lemlist (if you interact with our email communications)
  • Local storage objects (LSOs) to prevent spam on contact forms (submission timestamps)
  • 3. How We Use Your Information

    We use your personal information for the following purposes:

    Service Delivery:

  • Responding to your inquiries and providing requested information
  • Delivering our consulting services (Revenue Growth Sprint, Advisory)
  • Communicating with you about your account or services
  • Analytics and Improvement:

  • Understanding how visitors use our Website
  • Improving Website functionality and user experience
  • Analyzing business metrics and performance
  • Marketing:

  • Identifying potential business clients (B2B visitor identification)
  • Sending relevant marketing communications (with your consent)
  • Tracking email campaign effectiveness
  • Legal Compliance:

  • Complying with UAE and international laws
  • Protecting against fraud and unauthorized access
  • Resolving disputes and enforcing our agreements
  • 4. Third-Party Services and Data Sharing

    We use the following third-party data processors who may access your personal information:

    Google LLC (Analytics, Google Ads)

  • Purpose: Website analytics and advertising
  • Privacy Policy: https://policies.google.com/privacy
  • Data Processing Agreement: Standard Contractual Clauses per GDPR Article 46
  • Microsoft Corporation (Clarity)

  • Purpose: Session recording and heatmaps (infrastructure ready, currently inactive)
  • Privacy Policy: https://privacy.microsoft.com/
  • RB2B / Retention.com

  • Purpose: B2B visitor identification
  • Privacy Policy: https://www.rb2b.com/privacy
  • Important Notice: When you visit our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses.
  • Opt-Out Options:
  • - General Opt-Out: https://app.retention.com/optout
  • - GDPR Opt-Out (for EU visitors): https://www.rb2b.com/rb2b-gdpr-opt-out
  • Lemlist

  • Purpose: Email marketing and campaign management
  • Privacy Policy: https://www.lemlist.com/privacy
  • We do not sell your personal information to third parties. Data processors act on our behalf and are contractually obligated to protect your information.

    5. Data Controller and Processor Roles

    Data Controller: Altior FZCO determines the purposes and means of processing your personal information.

    Data Processors: The following entities process data on our behalf:

  • Google (Analytics, Ads)
  • Microsoft (Clarity)
  • RB2B (Visitor identification)
  • Lemlist (Email marketing)
  • All data processors are bound by data processing agreements and must comply with applicable data protection laws.

    6. Data Retention

    We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy:

    Contact Form Data: Retained until the purpose is fulfilled, plus 2 years for potential disputes (legitimate business interest under GDPR Article 6(1)(f))

    Analytics Cookies: 14 months (Google's default retention period, configurable)

    Calculator Data: Deleted immediately after your session ends (not stored on our servers)

    RB2B Tracking Data: Per RB2B's retention policy (see their privacy policy for details)

    Email Marketing Data: Until you unsubscribe or request deletion

    7. Your Data Protection Rights

    Under UAE Personal Data Protection Law (PDPL) and GDPR (for EU residents), you have the following rights:

    Access: Request a copy of your personal information we hold Correction: Request correction of inaccurate or incomplete data Deletion: Request deletion of your personal information ("right to be forgotten") Portability: Receive your data in a structured, machine-readable format Restriction: Request restricted processing of your information Objection: Object to processing based on legitimate interests Withdraw Consent: Withdraw consent for cookie tracking at any time

    To exercise these rights, contact us at [email protected]. We will respond within 30 days of receiving your request. If the request is complex or we receive multiple requests, we may extend this period by two further months, in which case we will notify you and explain the reason for the delay.

    EU Residents: You also have the right to lodge a complaint with your local Data Protection Authority.

    RB2B-Specific Opt-Out:

  • General Opt-Out: https://app.retention.com/optout
  • GDPR Opt-Out (EU visitors): https://www.rb2b.com/rb2b-gdpr-opt-out
  • 8. Legal Basis for Processing (GDPR)

    For users in the European Union, we process your personal information based on the following legal grounds:

    Consent (Article 6(1)(a)): All cookies (analytics and marketing) require your explicit consent before loading

    Contractual Necessity (Article 6(1)(b)): Contact form data is necessary to provide services you request

    Compliance with Legal Obligations (Article 6(1)(c)): Processing necessary to comply with UAE and international laws

    Legitimate Interests (Article 6(1)(f)): Retaining contact data for 2 years after purpose fulfilled to handle potential disputes

    9. International Data Transfers

    Your personal information may be transferred to and processed in countries outside the UAE, including the United States and European Union, where our data processors operate.

    These transfers are protected by:

  • Standard Contractual Clauses (SCCs) approved by the European Commission (GDPR Article 46)
  • Data Processing Agreements with all third-party processors
  • Adequate safeguards as required by UAE PDPL and GDPR
  • Countries where data may be processed:

  • United States: Google, RB2B, Lemlist
  • European Union: Google, Microsoft
  • 10. Data Breach Notification

    In the event of a data breach that poses a risk to your rights and freedoms, we will:

    UAE PDPL Compliance:

  • Notify the UAE Data Office immediately upon becoming aware of a breach (when the Data Office becomes operational)
  • GDPR Compliance (for EU residents):

  • Notify the relevant EU supervisory authority within 72 hours of becoming aware of a breach
  • Notify affected individuals without undue delay if the breach poses a high risk to their rights and freedoms
  • We have implemented appropriate technical and organizational measures to prevent data breaches and protect your information.

    11. Security Measures

    We implement industry-standard security measures to protect your personal information:

  • HTTPS encryption for all data transmissions
  • Content Security Policy (CSP) headers to prevent XSS attacks
  • Regular security audits and updates
  • Access controls limiting who can access personal data
  • Data minimization (we only collect what's necessary)
  • However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

    12. Children's Privacy

    Our Website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

    13. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

  • Updating the "Last Updated" date at the top of this page
  • Posting a notice on our Website for 30 days
  • Emailing you if you are a client or have subscribed to our communications
  • Your continued use of the Website after changes take effect constitutes acceptance of the updated Privacy Policy.

    14. Contact Information

    For questions about this Privacy Policy or to exercise your data protection rights, contact us at:

    Altior FZCO Dubai Silicon Oasis, DDP, Building A1 Dubai, United Arab Emirates

    Email: [email protected] Phone: +971 58 521 4812

    Questions about our legal policies? Contact us