Legal

Privacy Policy

MARAM ADVISORY LLC-FZ ("Maram", "we", "our", "us") is committed to protecting your personal information and processing it responsibly, transparently, and in accordance with applicable data protection laws, including:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
• EU General Data Protection Regulation (GDPR), where applicable
• other relevant national or international data-protection standards

This Privacy Policy explains how we collect, use, store, share, transfer and protect your Personal Data when you use our website, contact us or interact with our services. By using our website or services, you acknowledge the practices described in this Privacy Policy.

1. What Personal Data We Collect

We may collect information that you voluntarily provide to us, as well as information that is collected automatically when you use our website or services.

1.1 Information You Provide Through Forms or Email

When you contact us through our website, email, enquiry forms or other communication channels, we may collect:

• name
• email address
• telephone number
• company or organisation
• country of residence
• job title
• any information you include in your message

We generally use this information to respond to your request, communicate with you and provide information regarding our services.

1.2 Information Related to Business Communication and Contracting

Where communications progress toward a commercial relationship, meetings or contractual arrangements, we may collect:

• job title and department
• business contact details
• company information
• corporate documentation
• identification information, where legally or operationally required
• billing or contractual information
• project-related information (including talent, leadership and search mandate details)

This information is processed for legitimate business purposes, contractual activities and regulatory or compliance requirements.

1.3 Automatically Collected Website Data

When you access our website, certain technical information may be collected automatically, including:

• IP address
• browser type and version
• device information
• operating system
• pages visited
• time spent on the website
• referring website
• date and time of access
• technical logs
• analytics and advertising identifiers via tools such as Google Analytics and the LinkedIn Insight Tag / pixel

This information may be used to maintain website functionality, security, performance, usability and, where permitted, to understand and improve how visitors engage with our website.

2. Legal Basis for Processing Personal Data

Depending on the circumstances and applicable law, we may process Personal Data on one or more of the following legal grounds:

• Consent — where you voluntarily provide information or consent to a particular processing activity.
• Contractual necessity — where processing is necessary to prepare, enter into or perform a contract with you or your organisation.
• Compliance with legal obligations — where processing is necessary to comply with applicable laws, regulators, authorities or governmental requirements.
• Legitimate interests — where processing is necessary for legitimate business purposes, including communication, internal administration, security, fraud prevention and improvement of our services.
• Other lawful grounds — where permitted under applicable data protection legislation.

3. How We Use Your Information

We may use Personal Data for purposes including:

• responding to enquiries
• providing information about our services
• managing business communications
• organising introductory or commercial meetings
• preparing proposals and engagement documentation
• negotiating or executing agreements
• delivering talent advisory, leadership search and related services
• managing client, candidate and partner relationships
• complying with legal and regulatory requirements
• maintaining the security of our systems
• preventing fraud or misuse
• improving website performance and user experience
• measuring website traffic and campaign performance (including via Google Analytics and LinkedIn)
• managing internal administration

We do not sell or commercially trade Personal Data unless expressly disclosed and permitted under applicable law.

4. Sharing Your Information

We may share Personal Data only where necessary, appropriate and legally permitted.

4.1 Government and Regulatory Authorities

We may disclose Personal Data to governmental, regulatory or public authorities, including UAE authorities, free-zone or licensing bodies, courts or law-enforcement authorities, and other competent public agencies, where required for legal, regulatory, compliance or procedural purposes.

4.2 Business and Professional Partners

Where required for engagements, assessments or joint activities, we may share relevant Personal Data with trusted partners such as professional advisers, contractors and other parties reasonably necessary for the relevant purpose. Only information reasonably necessary for that purpose should be shared.

4.3 Service Providers

We may share limited Personal Data with service providers that support our operations, including website hosting providers, cloud-service providers, email providers, IT and cybersecurity providers, CRM providers, analytics providers (including Google Analytics), advertising and measurement partners (including LinkedIn), document-management providers, communications providers and professional advisers. Where appropriate, service providers are required to process Personal Data only for authorised purposes and to implement suitable confidentiality and security measures.

5. International Transfers of Personal Data

Depending on our activities, service providers and business partners, Personal Data may be transferred to or processed in:

• the United Arab Emirates
• the European Union / European Economic Area
• the United States
• countries where our service providers are located
• countries where our business partners operate

Where required by applicable law, international transfers may be protected through mechanisms such as adequacy decisions, contractual safeguards, standard contractual clauses, binding contractual commitments, transfers required for the performance of a contract, transfers required by law, or other legally recognised transfer mechanisms.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to remember user preferences, maintain website functionality, analyse website usage and performance, improve navigation and usability, maintain security, understand how users interact with the website, and support marketing and measurement activities where permitted.

In particular, we may use Google Analytics and the LinkedIn Insight Tag / pixel. Depending on applicable law, certain cookies may require user consent before being stored or accessed. Users may be able to manage or disable cookies through browser settings.

7. Marketing Communications

Where permitted by law and, where required, with your consent, we may send communications relating to our services, company updates, events, meetings, invitations, commercial opportunities and industry information. You may withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication, or by contacting us at info@maram.global. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

8. Data Security

We implement reasonable technical and organisational measures designed to protect Personal Data against unauthorised access, accidental or unlawful loss, alteration, disclosure, destruction and misuse. Depending on the nature of our activities, security measures may include secure servers, encryption, access controls, authentication mechanisms, confidentiality obligations, staff access restrictions, system monitoring, security policies, backups and incident-response procedures. Despite these measures, no system or method of transmission over the Internet can be guaranteed to be completely secure.

9. Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, provide requested services, maintain business relationships, perform contractual obligations, comply with legal or regulatory obligations, establish, exercise or defend legal claims, resolve disputes, enforce agreements and maintain appropriate business records. When Personal Data is no longer required, we will delete, anonymise or otherwise securely dispose of it, as appropriate.

10. Your Data Protection Rights

Depending on applicable law and your jurisdiction, you may have rights including access, correction, deletion, restriction of processing, objection to processing, data portability, withdrawal of consent, objection to direct marketing, and the right to lodge a complaint with a competent data-protection authority. Certain rights may be subject to conditions, restrictions or exemptions under applicable law.

To exercise any applicable right, please contact: info@maram.global. We may need to verify your identity before processing a request.

11. Additional Rights Under the UAE PDPL

Where the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data applies, Data Subjects may have rights including, subject to applicable legal conditions: access, correction, deletion, restriction or cessation of certain processing, objection to processing, data portability, withdrawal of consent, information regarding automated processing, and other rights provided under applicable UAE legislation. Requests may be submitted using the contact details provided in this Privacy Policy.

12. Additional Rights Under the GDPR

Where the General Data Protection Regulation applies, Users may have rights including access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, objection to direct marketing, rights relating to automated decision-making and profiling, and the right to lodge a complaint with a competent supervisory authority.

13. Children's Data

Our website and services are primarily intended for professional and business audiences. We do not knowingly collect Personal Data from individuals under 18 except where permitted by law and, where required, with appropriate consent. If we become aware that Personal Data relating to a child has been collected contrary to applicable law, we will take reasonable steps to delete or otherwise appropriately handle such Data.

14. Automated Decision-Making

We do not currently use solely automated decision-making or profiling that produces legal effects or similarly significant effects in relation to Users.

15. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, security or content of third-party websites or services that are not under our control. Users are encouraged to review the privacy policies of those third parties before submitting Personal Data.

16. Data Breaches and Security Incidents

Where required by applicable law, we will assess Personal Data breaches and take appropriate measures, which may include investigating the incident, mitigating potential harm, notifying competent authorities, notifying affected Data Subjects and implementing corrective measures. Notifications will be made where and within the timeframes required by applicable legislation.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, processing practices, third-party providers, or legal or regulatory requirements. The updated version will be published on our website. Where required by applicable law, we may provide additional notice regarding material changes.

18. Contact Details

For questions regarding this Privacy Policy, Personal Data processing or the exercise of privacy rights, please contact us using the details above.