Privacy Policy.

1Who We Are

This Privacy Policy is issued by Synergis Dynamics FZE LLC ("Synergis Dynamics", "we", "us", or "our"), a management consulting firm registered with the Ajman NuVentures Centre Free Zone, United Arab Emirates. Our registered address is Office CWS-1V-226900, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, UAE. P.O. Box 4848.

Synergis Dynamics acts as the Data Controller in respect of all personal data collected through this website and in connection with client enquiries, pre-engagement communications, and contracted engagements.

This Policy explains how we collect, use, store, protect, and share your personal data, and sets out the rights available to you under applicable UAE law, in particular Federal Decree-Law No. 45 of 2021 on Personal Data Protection (the "UAE PDPL") and its implementing regulations under Cabinet Decision No. 33 of 2023.

2Information We Collect

We collect only the personal data that is necessary for the purposes described in this Policy. The categories of data we may collect include:

Information you provide directly:

• Identity data: full name, job title, company name, and professional role.
• Contact data: email address and telephone number.
• Enquiry data: the service area of interest, a description of your business challenge or objective, and any other information you choose to include in your submission.
• Engagement data: information shared during discovery calls, scoping discussions, signed proposals, contractual correspondence, and the delivery of contracted services.
• Communication records: emails, meeting notes, and written correspondence exchanged in connection with any enquiry or engagement.

Information collected automatically:

• Technical data: IP address, browser type and version, operating system, and the pages of our website you visit. This data is collected for security and functional purposes only and is not used for advertising or behavioural profiling.
• Cookie data: strictly essential cookies required for the website to function correctly. We do not deploy third-party advertising or analytics cookies. See Section 9 for further detail.

We do not collect sensitive personal data (as defined under Article 2 of the UAE PDPL) such as health information, biometric data, financial account credentials, or political or religious opinions, and we request that you do not submit such information through our contact form or in general correspondence.

3How We Use Your Information

We use your personal data for the following purposes:

• Responding to enquiries: to review, assess, and respond to contact form submissions and direct communications.
• Engagement assessment: to evaluate whether and how we can assist your organisation, and to prepare scoped proposals or Statements of Work.
• Service delivery: to perform contracted consulting services, manage project communications, and fulfil our contractual obligations.
• Relationship management: to manage the business relationship with existing and prospective clients, including follow-up correspondence following an engagement.
• Legal and compliance purposes: to comply with applicable UAE laws and regulations, including commercial record-keeping obligations under Federal Law No. 2 of 2015 on Commercial Companies and relevant Free Zone regulations.
• Business improvement: to analyse anonymised and aggregated enquiry and engagement patterns for the purpose of improving our services and operational processes. No individual is identifiable from such analysis.
• Security and fraud prevention: to protect the integrity of our website and communications infrastructure.

We will not use your personal data for unsolicited direct marketing, profiling for advertising purposes, or any automated decision-making that produces legal or similarly significant effects, without your prior explicit consent.

4Legal Basis for Processing

Under the UAE PDPL, we are required to identify a lawful basis for each processing activity. We rely on the following bases:

• Consent (Article 6(1), UAE PDPL): where you have submitted a contact form and ticked the consent checkbox, or where you have otherwise expressly agreed to the processing of your data for a specified purpose.
• Contractual necessity (Article 6(2), UAE PDPL): where processing is necessary to enter into or perform a contract with you or your organisation, including the preparation of proposals, Statements of Work, and the delivery of contracted services.
• Legitimate interests (Article 6(3), UAE PDPL): where processing is necessary for the purposes of our legitimate business interests, including responding to unsolicited enquiries, managing pre-contractual discussions, and maintaining business records, provided these interests are not overridden by your rights and interests.
• Legal obligation (Article 6(4), UAE PDPL): where processing is required to comply with applicable UAE law, including tax, commercial, and Free Zone regulatory requirements.

5Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties for commercial purposes under any circumstances.

We may share your personal data only in the following limited circumstances:

• Service providers and data processors: we may engage third-party companies to provide operational support services on our behalf, including cloud storage, email hosting, and business productivity tools. Any such providers are engaged only under contractual terms that require them to process your data solely on our instructions and in compliance with applicable data protection law. We conduct appropriate due diligence before engaging any third-party data processor.
• Legal and regulatory authorities: we may disclose your personal data where required to do so by law, court order, or the lawful request of a UAE regulatory or governmental authority, including the Ajman NuVentures Centre Free Zone Authority.
• Business transfers: in the event that Synergis Dynamics undergoes a reorganisation, merger, or transfer of business projects, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.
• Professional advisors: we may share relevant data with our legal, financial, or insurance advisors where necessary for the protection of our legal rights and interests.

In each case, we take reasonable steps to ensure that your data is handled securely and in accordance with this Policy and applicable UAE law.

6Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law. Our standard retention periods are as follows:

• Enquiry data (no engagement entered into): personal data submitted through our contact form and related pre-engagement correspondence is retained for a period of two (2) years from the date of last communication, after which it is securely deleted or anonymised.
• Engagement data (contracted services): personal data associated with a contracted engagement, including proposals, Statements of Work, correspondence, and deliverables, is retained for a period of five (5) years from the date of completion of the relevant engagement. This period is consistent with the commercial record-keeping obligations under Federal Law No. 2 of 2015 on Commercial Companies and applicable Free Zone regulations.
• Legal compliance records: data retained for the purpose of complying with specific legal obligations (including tax and regulatory filings) is held for the period prescribed by the relevant law, which is generally five (5) to seven (7) years under UAE commercial and tax legislation.
• Anonymised data: anonymised or aggregated data from which no individual can be identified may be retained indefinitely for the purposes of business analysis and service improvement.

At the end of the applicable retention period, personal data is either securely deleted, permanently anonymised, or returned to you as agreed, whichever is most appropriate in the circumstances.

7Your Rights Under UAE Law

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the following rights in relation to your personal data:

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to all verified requests within 30 days of receipt, in accordance with the timelines prescribed under the UAE PDPL. In cases of complexity or volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reasons for it.

We reserve the right to verify your identity before acting on any data subject request, to ensure that data is not disclosed to or altered at the request of an unauthorised party.

8Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Transmission of data via encrypted channels (SSL/TLS) where technically supported.
• Access controls limiting personal data access to authorised personnel only.
• Use of reputable, security-certified cloud and hosting providers operating under applicable data protection obligations.
• Regular review of our data handling practices and security posture.

While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage system is entirely secure. We cannot guarantee absolute security, and any transmission of personal data to us is made at your own risk.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with the notification obligations under the UAE PDPL and its implementing regulations.

9Cookies and Tracking Technology

Our website uses only strictly essential cookies and functional technologies required for the website to operate correctly. We do not use third-party advertising cookies, cross-site tracking technologies, or behavioural analytics platforms.

Strictly essential technologies may include:

• Session management functions that enable you to navigate the website and use its features.
• Security functions that help protect the integrity of the website and prevent fraudulent activity.

These technologies do not collect personal data beyond what is technically necessary for the above functions and do not require your consent under the UAE PDPL or applicable electronic communications regulations. You may configure your browser to block or delete cookies; however, doing so may impair the functionality of certain website features.

Should we introduce additional tracking technologies in the future, this Policy will be updated accordingly, and where required, your consent will be obtained in advance.

10International Data Transfers

Synergis Dynamics is based in the United Arab Emirates and processes personal data primarily within the UAE. Where we engage third-party service providers whose infrastructure is located outside the UAE, we take steps to ensure that any transfer of personal data is carried out in compliance with Articles 22 and 23 of the UAE PDPL.

Such steps may include ensuring that the recipient jurisdiction provides an adequate level of data protection as recognised by the UAE Data Office, or implementing appropriate contractual safeguards (such as standard contractual clauses) before any transfer takes place.

We will not transfer your personal data outside the UAE in a manner inconsistent with the requirements of the UAE PDPL, or in a way that would materially reduce the protections available to you under this Policy.

11No Advisory Relationship or Obligation to Engage

The submission of an enquiry through our website, or any pre-contractual communication with Synergis Dynamics, does not create a consulting, advisory, fiduciary, or any other professional relationship between you and Synergis Dynamics.

No engagement or obligation on the part of Synergis Dynamics is created until a formal written agreement, such as a signed Statement of Work or Engagement Letter, has been executed by both parties. Synergis Dynamics reserves the right, at its sole discretion and without obligation to provide reasons, to decline any enquiry, proposal, or request for engagement.

Any information, assessments, or indicative recommendations provided during pre-engagement discussions are provided for informational purposes only and do not constitute professional advice. Clients should not act on any such information without first obtaining a formal engagement under a written agreement.

All methodologies, frameworks, templates, tools, and intellectual property developed or used by Synergis Dynamics in the course of its services remain the exclusive property of Synergis Dynamics, unless expressly transferred in writing under a signed engagement agreement.

12Limitation of Liability

You are responsible for the accuracy and completeness of the personal data you provide to us. Synergis Dynamics accepts no liability for errors, inaccuracies, or omissions in personal data submitted by you, or for any consequences arising from the provision of incorrect or misleading information.

Synergis Dynamics shall not be liable for any loss or damage arising from:

• Unauthorised access to or alteration of your personal data resulting from your own failure to maintain the security of your communications (including email accounts).
• Interruptions to or failures of internet connectivity or third-party infrastructure outside our reasonable control.
• The actions of third-party service providers, to the extent such actions are outside our reasonable control and not attributable to our failure to comply with our obligations under this Policy.
• Your reliance on any pre-engagement information provided in the absence of a formal written engagement agreement.

Nothing in this section limits our liability in respect of death, personal injury, or fraud, or any other liability that cannot be excluded under applicable UAE law.

13Children's Data

Our services are directed exclusively at businesses and business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has submitted personal data to us, please contact us immediately using the details in Section 15, and we will take prompt steps to delete the relevant data.

14Changes to This Policy

We reserve the right to update or amend this Privacy Policy at any time, in response to changes in applicable UAE law, regulatory guidance, our business operations, or the data processing activities we undertake. Any updated version will be published on this page with a revised "Last Updated" date.

We encourage you to review this Policy periodically. Where changes are material, we will take reasonable steps to bring them to your attention, which may include displaying a prominent notice on our website or, where we hold your contact details, notifying you directly.

Your continued use of our website or services following the publication of any updated Policy constitutes your acknowledgement of the changes and, where applicable, your consent to the updated terms.

15How to Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights under the UAE PDPL, or wish to raise a concern about how we handle your personal data, please contact us using the details below. We are committed to resolving all data protection enquiries promptly and in good faith.