Privacy notice

This notice explains what personal data Coordinates collects through this website, why, and what you can do about it. We collect as little as we can. The public website uses no analytics, advertising or tracking technologies.

Last updated: October 30, 2026 · Version 1.0

1Who we are

The controller of your personal data is Coordinates Consulting FZ-LLC ("Coordinates", "we", "us"), Dubai Internet City, Building 9, PO Box 501758, Dubai, United Arab Emirates.

For any privacy question or request, contact us at [email protected] or on +971 4 451 9706.

2What this notice covers

This notice covers this website (coordinatesme.com) and the briefing request form on it. It does not cover the cor.xyz platform or the services we provide to clients. Personal data processed in those is governed by our agreements with each client.

3What we collect

When you request a briefing, we collect what you enter in the form:

  • your full name, work email address, organization, role and country;
  • the topic you choose and any message you add; and
  • a record of your consent: the time it was given and the version of the consent text you agreed to.

Please don't include passwords, credentials or details of a live security incident in the form.

When you visit the site, our servers automatically process:

  • your IP address and browser information (user agent), which appear in our web server's access logs; and
  • when you submit the form, a one-way hashed form of your IP address, used only to limit automated and abusive submissions.

Cookies. The public website does not set cookies for visitors, and it loads no third-party scripts, fonts or trackers.

We do not knowingly collect special categories of personal data, and we do not use your data for automated decision-making or profiling.

4Why we use it

Purpose

Data

Basis

To respond to your request and arrange a briefing

The form data

Your consent, given in the form

To keep a record of the consent you gave

Consent time and text version

Needed to demonstrate consent

To keep the website and form secure, and to prevent abuse

Access logs and the hashed IP address

Necessary for the security of our systems

We do not use your details for marketing, and we do not sell or rent them to anyone.

5Who receives it

  • Coordinates staff who handle enquiries, and only those staff.
  • Our service providers, who process data on our behalf and under our instructions:
  • Our hosting provider, which hosts the website and its database;
  • Microsoft 365, which delivers form submissions to our enquiries mailbox; and
  • Our email security gateway, which may process that email on its way to us.
  • Authorities, where the law requires us to disclose information.

6Where it is stored

The website and the submitted requests are stored in the United Arab Emirates. Email delivery through our service providers may involve processing elsewhere. If personal data is transferred outside the UAE, we do so only as permitted by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and with appropriate safeguards.

7How long we keep it

  • Briefing requests: deleted automatically 12 months after we receive them, unless you become a client or ask us to keep in touch. In those cases, our client agreement or your request governs what happens next.
  • Copies in our enquiries mailbox: kept in line with our email retention policy.
  • Web server access logs: kept for 30 days.
  • Backups: deleted data may remain in encrypted backups until it is overwritten.

8Your rights

Subject to the conditions in the PDPL, you have the right to:

  • obtain information about, and a copy of, the personal data we hold about you;
  • have inaccurate data corrected, and incomplete data completed;
  • have your data erased;
  • restrict or stop the processing of your data;
  • object to processing; and
  • receive your data in a structured, commonly used format, and have it transferred where this is technically feasible.

You can withdraw your consent at any time by contacting us. This does not affect processing that took place before you withdrew it.

To exercise any of these rights, contact us using the details in section 1. We may need to confirm your identity first. We will respond within the time the law requires.

9How we protect it

All traffic to this website is encrypted in transit. Submitted requests are stored in a database that is not reachable from the public internet. Access is restricted to authorized staff and protected by multi-factor authentication.

10Changes to this notice

If we change how we handle personal data, we will update this notice and its "last updated" date. Where a change is significant, we will say so clearly on this page.