1. Scope and PurposeThis policy applies to all personal data collected through our website (https://estgconsulting.com/) and services provided within or directed to the UAE.
We process personal data to:

• Deliver our services
• Communicate with you
• Comply with legal obligations
• Improve user experience

2. Legal Basis for ProcessingWe process personal data based on the following legal grounds:

• Your consent
• Performance of a contract
• Compliance with legal obligations
• Our legitimate interests, provided they do not override your fundamental rights

3. Personal Data We CollectWe may collect and process the following types of personal data:

• Full name
• Email address
• Phone number
• Date and place of birth
• Professional title or company name
• Images or identification documents (when necessary)
• IP address and browser/device data

4. How We Use Personal DataWe use your data to:

• Respond to inquiries or contact requests
• Provide and manage our consulting services
• Send administrative or promotional emails (only if you’ve opted in)
• Ensure compliance with UAE data protection law

5. Data Sharing and DisclosureWe may share your data with:

• Third-party service providers (IT, payment, CRM)
• Legal or regulatory authorities (if legally required)

We do not sell, rent, or trade your personal data.
If data is transferred outside the UAE, we ensure the recipient country provides adequate data protection, or we use data transfer agreements.
6. Data Subject RightsUnder UAE law, you have the right to:

• Access your personal data
• Rectify inaccurate or outdated information
• Withdraw consent at any time
• Request erasure (“right to be forgotten”)
• Object to processing or request restriction
• Complain to the UAE Data Office if your rights are violated

To exercise any of these rights, contact us at: eagungor@estgconsulting.com
7. Data RetentionWe retain personal data only for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal or contractual obligations
• Resolve disputes or enforce agreements

Data no longer needed will be securely deleted or anonymized.
8. Security MeasuresWe implement appropriate technical and organizational measures to safeguard your data, including:

• Encryption
• Access control
• Regular system audits and backups

9. Children’s PrivacyOur services are not intended for individuals under 18 years old. We do not knowingly collect data from minors.
10. Updates to This PolicyWe may update this policy from time to time. The updated version will be posted at:
https://estgconsulting.com/policy
Please review it periodically.
11. Contact UsIf you have questions or concerns regarding your personal data or this policy, reach out to:
Email: eagungor@estgconsulting.com