Privacy Policy
1. Who we are
This policy explains how [Company name] LLC, registered in [free zone], United Arab Emirates, licence number [number] ("we", "us"), handles personal data when you visit ksadvisory.tech, contact us, or work with us. Katerina (Ekaterina) Savadia provides the services on behalf of [Company name] LLC.
Address: [registered address]
Contact for privacy questions: katerina@ksadvisory.tech
2. What we collect and why
- When you send a request through the website form: your name, email, the stage of your product, what is in the way, and optionally your company or website. We use it to reply, to decide whether we are the right fit, and to prepare for a first call. Legal basis (EU/UK): steps at your request before entering into a contract, and our legitimate interest in answering enquiries.
- When you book a call: your name, email, the time you chose and anything you write in the booking form. We use it to hold the call. The booking is handled by Calendly.
- When you email us: the content of your messages and your contact details. We use them to reply and keep a record of our conversation.
- When you become a client: contact details of the people we work with, contract and billing details, and information you share for the project. We use it to deliver the services, invoice and meet legal obligations. Legal basis (EU/UK): performance of a contract and legal obligation.
- When you browse the site: we use Plausible Analytics, which counts visits without cookies and without collecting personal data. The site sets no tracking or advertising cookies.
We do not sell personal data, use it for advertising, or make decisions about you by automated means.
3. Client project information
- What we receive: the documents, product materials and business information you choose to share for the project. Product work does not require access to your production systems or your customers' personal data, and we ask you not to send it. If a project ever needs it, we agree the scope, purpose and safeguards with you in writing first.
- Where it is kept: in Google Workspace accounts protected by two-factor authentication, or in your own systems if you prefer. Not on removable media or personal email.
- Who can see it: Katerina (Ekaterina) Savadia. No one else, including our development partner, sees your information without your written approval.
- When it is deleted: within 30 days after the project ends, unless you ask us to return it, or a law or our agreement requires us to keep it. We confirm deletion in writing on request.
- Confidentiality terms: your NDA, if you have one, or our mutual NDA template.
4. Who we share data with
We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
- Google Workspace — email and documents
- GoDaddy — website hosting and the website form
- Calendly — call scheduling
- Plausible Analytics — cookie-free website analytics, no personal data
- [Consultzone accounting team] — accounting and invoicing
If you become a client and need a development team, we may introduce our development partner. You contract with them directly, and we share your information with them only with your written approval. We may also disclose data if the law requires it.
5. International transfers
We work with clients worldwide and our service providers may store data outside your country, including in the United States and the European Union. Where EU or UK law applies, we rely on adequacy decisions or standard contractual clauses (and the UK addendum) offered by our providers. Where the UAE Personal Data Protection Law applies, we transfer data only as the law permits.
6. How long we keep data
- Requests that do not lead to work: 12 months after our last contact.
- Client contract and billing records: for the duration of the engagement and then [number] years for accounting and legal records, as UAE rules require.
- Client project information: see section 3.
7. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To use any of these rights, email katerina@ksadvisory.tech. We reply within one month.
- EU and UK residents: you can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).
- UAE residents: you can contact the UAE Data Office.
- Elsewhere: you have the rights your local law provides. We will honour them.
8. Security
We use accounts with two-factor authentication, keep client information separate by project, give no one else access without written approval, and delete information when it is no longer needed.
9. Changes
We will update this page if our practices change.