Privacy Policy

Section 01

Who We Are

Avintra is a strategic AI advisory firm based in the United Arab Emirates. We work with financial services organisations, insurance companies, and regulated enterprises across the GCC, MENA region, and internationally.

For the purposes of this Privacy Policy, Avintra acts as the data controller for personal data submitted through our website (avintra.net), contact forms, LinkedIn lead forms, and direct communications.

This policy applies to all individuals who interact with Avintra, including website visitors, enquirers, prospective clients, and partners.

Section 02

Data We Collect

We collect only the data necessary to respond to your enquiry or deliver our services. This may include:

Contact information: full name, business email address, phone number, and LinkedIn profile where provided.
Organisation details: company name, job title, industry sector, and country of operation.
Enquiry content: the message, questions, or context you choose to share with us.
Technical data: IP address, browser type, pages visited, and approximate location — collected automatically via standard web analytics.
Communication records: emails, meeting notes, and follow-up correspondence relevant to an active enquiry or engagement.

We do not collect sensitive personal data (such as health, financial account details, biometric data, or national identification numbers) unless explicitly required for a specific engagement and with your written consent.

Section 03

How We Use Your Data

Your data is used exclusively for the following purposes:

To respond to your enquiry and initiate an advisory conversation.
To assess your organisation's needs and determine whether our services are a relevant fit.
To send relevant information about our services, thought leadership, or industry updates — only where you have consented or have an existing relationship with us.
To improve our website, content, and service delivery based on aggregated, anonymised usage data.
To comply with applicable UAE, GCC, and international legal and regulatory obligations.

We do not use your data for automated decision-making, profiling, or the training of AI models.

Section 04

Legal Basis for Processing

Avintra processes personal data under the following legal bases, in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and relevant GCC data protection frameworks:

Consent: where you have voluntarily submitted your information through a contact or lead form.
Legitimate interest: to communicate with prospective clients and partners in a professional B2B context.
Contractual necessity: where processing is required to fulfil obligations under an advisory agreement.
Legal obligation: where processing is required by UAE law, regulatory authority, or a court order.

Section 05

Sharing Your Data

Avintra does not sell, rent, or trade your personal data. We may share it in limited circumstances only:

With trusted service providers who support our operations (e.g., email platforms, CRM tools, cloud hosting), under strict data processing agreements.
With professional advisors (legal, compliance, or financial) where required for a specific engagement.
With regulatory or government authorities when legally required under UAE or applicable GCC law.

All third parties with whom we share data are required to process it securely and only for the stated purpose.

Section 06

Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.

Enquiry data: retained for up to 24 months from the date of last contact, unless an engagement begins.
Client engagement data: retained for 7 years following the conclusion of an engagement, in line with UAE commercial record-keeping requirements.
Marketing consent records: retained until consent is withdrawn.

When data is no longer required, it is securely deleted or anonymised.

Section 07

Your Rights

Under the UAE PDPL and applicable GCC data protection regulations, you have the following rights:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data where it is no longer necessary, or where consent has been withdrawn.
Right to object: object to processing based on legitimate interest, including direct communications.
Right to withdraw consent: withdraw consent at any time for consent-based processing, without affecting prior lawful processing.
Right to data portability: receive your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact us at hello@avintra.net. We will respond within 30 days in accordance with the UAE PDPL.

Section 08

Cross-Border Data Transfers

Where personal data is transferred outside the UAE or the GCC, Avintra ensures that adequate protections are in place, consistent with Article 26 of the UAE PDPL. This may include:

Transfers to jurisdictions recognised as providing adequate data protection under UAE law.
Standard contractual clauses or equivalent safeguards with third-party processors.

Avintra does not transfer personal data to jurisdictions without adequate data protection unless required by law or with your explicit consent.

Section 09

Security

Avintra applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or misuse. These include:

Encrypted data storage and transmission (TLS/HTTPS).
Access controls limiting data access to authorised personnel only.
Regular security reviews of systems and third-party services used in our operations.

In the event of a data breach that poses a risk to individuals, Avintra will notify the relevant UAE data protection authority and affected individuals as required by law.

Section 10

Cookies

Our website uses minimal cookies to support basic functionality and analytics. We do not use cookies for advertising, tracking across third-party sites, or building behavioural profiles.

Essential cookies: required for the website to function correctly (e.g., language preference).
Analytics cookies: used to understand visitor behaviour in aggregate form, with no individual identification.

You may adjust your cookie preferences through your browser settings at any time.

Section 11

Changes to This Policy

Avintra may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The most current version will always be available at avintra.net/privacy.html.

Where changes are material, we will provide notice through our website or via direct communication where appropriate.