Draft for DIFC counsel review
Privacy Notice
Last updated: 15 August 2026. This draft is not final and must be completed with the registered entity details, data-protection contact, retention period, and transfer terms approved by counsel.
1. Who we are
The controller is [INSERT EXACT DIFC REGISTERED LEGAL NAME], a company registered in the Dubai International Financial Centre (DIFC), licence or registration number [INSERT], with registered address [INSERT] (One World International). Privacy questions and rights requests may be sent to info@oneworldinternational.ae. Counsel should confirm whether a Data Protection Officer or DIFC representative must be identified.
2. Information we collect
The consultation form asks for your email address, company or entity name, transaction scale, strategic intent, and privacy-consent record. We may also receive technical information needed to secure and operate the website, such as IP address, browser and device information, timestamps, referral information, and security logs, subject to the configuration of our hosting and form providers.
3. How we use information
We use inquiry information to review and respond to business requests, assess whether an engagement may be appropriate, maintain inquiry records, protect the website and form from misuse, comply with legal obligations, and establish or defend legal claims. We do not use the form to make solely automated decisions with legal or similarly significant effects. We do not use inquiry information for direct marketing unless we provide the required notice and choice.
4. Legal basis
The legal basis for each purpose must be confirmed by DIFC counsel. The intended bases are consent for the form submission where required, steps taken at the visitor’s request before a possible engagement, legitimate interests in responding to and securing business inquiries, and legal obligations. Where processing relies on consent, it may be withdrawn by contacting us, although withdrawal does not affect processing already carried out lawfully.
5. Service providers and international transfers
Form submissions are sent to Formspree, which acts as a service provider or processor for form delivery and storage. Formspree states that its services are hosted on Amazon Web Services in the United States and that it uses contractual safeguards for applicable international transfers. The website is hosted through Vercel, and inquiry notifications may be delivered through our designated email provider. Counsel must verify the current provider agreements, transfer mechanism, and any required DIFC transfer approval or safeguards before publication.
6. Retention
We will retain inquiry information for [INSERT APPROVED PERIOD] after the inquiry is closed, unless a longer period is required for a live engagement, legal obligation, audit, dispute, or legal hold. Formspree and other providers may retain information under their own contractual retention terms. The final notice must state the approved period or objective retention criteria.
7. Security and incidents
We apply reasonable technical and organisational measures appropriate to the information and the risks of processing, including access limitation, secure transmission, provider controls, and account security. No website or email channel is guaranteed to be completely secure. We maintain an internal process for assessing suspected personal-data incidents and will make notifications required by applicable DIFC or other law.
8. Your rights
Subject to applicable law and exceptions, you may request information about processing, access, correction, deletion, restriction, objection or stopping of processing, withdrawal of consent, and transfer or portability where available. Send requests to info@oneworldinternational.ae. We may ask for reasonable information to verify identity and will respond within the period required by applicable law. You may also complain to the applicable DIFC or UAE data-protection authority.
9. Sensitive and confidential information
Do not submit passports, identity numbers, bank details, payment credentials, health information, classified material, trade secrets, or information you are not authorised to disclose. The initial form is not a secure data room and submitting information does not create an NDA or other confidentiality obligation. Separate written terms are required for any engagement.
10. Cookies and changes
The current site is intended to use only technologies necessary to operate the page and form. If analytics, advertising, or other non-essential technologies are introduced, this notice and any required consent controls will be updated before they are used. We may update this notice and will publish the revised effective date.
Contact
Questions, rights requests, and privacy complaints may be sent to info@oneworldinternational.ae. This document remains subject to DIFC counsel approval.