Privacy Policy
How we collect, use and protect your personal data — and the rights you have over it under UAE law.
Last updated: 23 July 2026 Applies to: rdvault.ae and our services
Who we are
This Privacy Policy explains how RDVAULT CONSULTANCY L.L.C S.O.C (“RDvault”, “we”, “us”) collects and processes personal data. We are the data controller responsible for your personal data.
RDvault is a consultancy licensed by the Department of Economy and Tourism, Dubai (Commercial Licence No. 1639934; Commercial Register No. 2898613; Dubai Chamber No. 694366).
- Address: Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates
- Privacy contact: [email protected]
We process personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its implementing regulations. Where we handle data connected to our United Kingdom operations, we also observe UK data-protection standards.
In short
- We collect what you give us (enquiries, consultation bookings, calculator inputs) and basic technical data when you visit the site.
- We use it to respond to you, provide and improve our services, and meet our legal and regulatory obligations.
- We do not sell your personal data.
- We share it only with the service providers and authorities needed to deliver our work, under appropriate safeguards.
- You have rights over your data, including access, correction and deletion. Contact [email protected].
The data we collect
Depending on how you interact with us, we may collect:
- Information you provide: name, company, email, phone number and message details when you complete our contact form, book a consultation, or otherwise get in touch (including via email or WhatsApp).
- Consultation & onboarding data: details you share when booking or engaging us, and information exchanged through any client portal or account we provide.
- Calculator inputs: figures you enter into our R&D credit estimator (for example, qualifying spend and headcount). These are used to generate an estimate and, if you submit them to us, to follow up on your enquiry.
- Business & claim information: where you engage us, the financial, technical and project information needed to prepare and support an R&D tax credit claim.
- Technical data: IP address, device and browser type, and how you use the site, collected through cookies and similar technologies (see section 05).
How and why we use your data
We process personal data on one or more of the lawful bases recognised under the UAE PDPL — your consent, the performance of a contract with you, compliance with a legal obligation, or our legitimate business interests. We use it to:
- Respond to enquiries and provide estimates, consultations and advice;
- Deliver our services, including preparing and supporting R&D tax credit claims;
- Manage our relationship with you, including account administration and client communications;
- Improve our website, services and content;
- Send you relevant updates where you have asked us to, or where permitted by law (you can opt out at any time);
- Comply with our legal, regulatory and professional obligations, and to establish or defend legal claims.
Cookies & analytics
We use cookies and similar technologies to run the site, remember your preferences, and understand how it is used. Some are essential; others are optional analytics and marketing cookies that we set only where permitted.
We use analytics and advertising tools — such as Google Analytics and social media pixels (for example Meta and LinkedIn) — to measure traffic and the effectiveness of our campaigns. These providers may process technical data on our behalf. You can control cookies through your browser settings and, where offered, through our cookie preferences.
Who we share your data with
We do not sell your personal data. We share it only where necessary, with:
- Service providers who help us operate, including website hosting, email, customer-relationship management (CRM), consultation-booking and analytics providers, acting on our instructions under appropriate agreements;
- Authorities and regulators where required to deliver our services or comply with the law — for example, in connection with an R&D tax credit claim before the relevant UAE bodies;
- Professional advisers such as our own auditors, insurers and lawyers, where reasonably required;
- Authorities where we are legally obliged to disclose information.
International transfers
RDvault operates in both the UAE and the United Kingdom, and some of our service providers are located outside the UAE. Where personal data is transferred outside the UAE, we take steps to ensure it receives an adequate level of protection, in line with the requirements of the UAE PDPL — for example, transferring only to jurisdictions with adequate protection or under appropriate contractual safeguards.
How long we keep it
We keep personal data only for as long as necessary for the purposes described in this policy, and to meet our legal, regulatory and professional obligations. Records connected to tax and R&D claims are typically retained for the periods required by applicable tax and record-keeping law. When data is no longer needed, we securely delete or anonymise it.
How we protect your data
We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access — including access controls, encryption in transit, and vendor due diligence. No system is completely secure, but we hold ourselves to standards consistent with our professional obligations and, where relevant, DIFC-grade best practice.
Your rights
Under the UAE PDPL, and subject to its conditions and exceptions, you have the right to:
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data in certain circumstances;
- Restrict or object to certain processing;
- Request a copy of your data in a portable format;
- Withdraw consent, where processing is based on consent.
To exercise any of these rights, email [email protected]. We will respond within the timeframes required by law. You also have the right to lodge a complaint with the UAE Data Office.
Children’s data
Our website and services are directed at businesses and are not intended for children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the “last updated” date at the top of this page. Material changes will be notified where appropriate.
How to contact us
For any question about this policy or your personal data, contact our privacy team:
- Email: [email protected]
- Post: RDVAULT CONSULTANCY L.L.C S.O.C, Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, UAE
See also our Terms & Conditions.