LEGAL

Privacy Policy

Last updated: March 2026

1. Introduction

Barry Advisory ("the Company", "we", "us", or "our") is a UAE-based strategic consulting firm. This Privacy Policy describes how we collect, use, store, and protect your personal data when you visit our website or engage with our services.

This policy is governed by and compliant with UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL) and its implementing regulations.

By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Barry Advisory is the data controller responsible for your personal data. For any inquiries regarding data protection, you may contact us at:

  • Entity: Barry Advisory
  • Location: United Arab Emirates
  • Email: info@barryadvisory.com

3. Personal Data We Collect

We collect the following categories of personal data:

Information you provide directly: When you submit our consultation request form, we may receive your first name, last name, work email address, company name, area of interest, and any additional details you include in your message. Form submissions are securely transmitted via HTTPS to Formspree, a third-party form processing service, which delivers them to us by email. Formspree processes your data in accordance with their privacy policy.

Information collected automatically: When you visit our website, standard web server logs may record your IP address, browser type, device information, pages visited, and time of access.

4. Purpose of Data Processing

In accordance with Article 4 of the UAE PDPL, we process your personal data for the following specified and legitimate purposes:

  • Responding to your consultation requests and inquiries
  • Understanding your business needs to deliver relevant services
  • Communicating with you about our services and engagements
  • Improving website functionality and user experience
  • Complying with applicable legal obligations under UAE law

5. Legal Basis for Processing

Under Article 5 of the UAE PDPL, we rely on the following legal bases for processing your personal data:

  • Consent (Article 5(1)): When you voluntarily submit information through our contact form, you consent to the processing of that data for the stated purposes.
  • Contractual Necessity (Article 5(2)): Where processing is necessary for providing our consulting services or entering into a service agreement.
  • Legal Obligation (Article 5(3)): Where processing is required to comply with applicable UAE laws and regulations.
  • Legitimate Interest (Article 5(4)): For website analytics and improvement, where such interest does not override your fundamental rights and freedoms.

6. Data Retention

In accordance with Article 4(4) of the UAE PDPL, we retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact and consultation data: Retained for up to two (2) years from the date of last contact, or as required for the duration of an ongoing business relationship.
  • Website server logs: Retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

7. Your Rights as a Data Subject

Under Articles 13 to 18 of the UAE PDPL, you have the following rights regarding your personal data:

  • Right to Access (Article 13): You may request access to the personal data we hold about you.
  • Right to Rectification (Article 14): You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 15): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected.
  • Right to Restrict Processing (Article 16): You may request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability (Article 17): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Article 18): You may object to the processing of your personal data where processing is based on legitimate interest.
  • Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at info@barryadvisory.com with the subject line "Data Protection Request". We will respond to your request within fourteen (14) business days.

8. Cross-Border Data Transfers

In accordance with Articles 22 and 23 of the UAE PDPL, personal data may only be transferred outside the UAE to jurisdictions that provide an adequate level of data protection, or where appropriate safeguards are in place.

Where any cross-border transfer of personal data occurs, we ensure that appropriate contractual safeguards are implemented and that such transfers comply with the UAE Data Office's approved list of adequate jurisdictions.

Our contact form transmits data to Formspree (formspree.io), a US-based form processing service. By submitting the contact form, your data may be transferred to and processed in the United States. Formspree maintains appropriate security measures and processes data in accordance with their privacy policy.

9. Data Security

In accordance with Article 4(6) of the UAE PDPL, we implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit via HTTPS/TLS protocols
  • Access controls limiting data access to authorised personnel only
  • Regular review and assessment of security practices

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your personal data.

10. Cookies and Local Storage

Our website uses browser local storage (localStorage) solely to save your language preference (English or Arabic). This is a functional necessity and does not track your browsing behaviour or collect personal data.

We do not use advertising cookies, analytics cookies, or any third-party tracking technologies on this website.

11. Third-Party Services

Our website integrates with the following third-party services:

  • Google Fonts: We load typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When you visit our website, your browser makes requests to Google's servers to retrieve font files. Google's Privacy Policy governs this data processing.
  • LinkedIn: Our website contains a link to our LinkedIn company page. Clicking this link will navigate you to linkedin.com, which is governed by LinkedIn's own Privacy Policy.
  • Formspree: We use Formspree (formspree.io) to process contact form submissions. When you submit the consultation request form, your data is transmitted to Formspree's servers via HTTPS, which then delivers it to us by email. Formspree may log your IP address and submission metadata. Formspree's Privacy Policy governs their data processing.
  • Google reCAPTCHA v3: We use Google reCAPTCHA v3 to protect our contact form from spam and abuse. reCAPTCHA collects hardware and software information (such as device and application data) and sends it to Google for analysis. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.

We do not share your personal data with any third parties for marketing or advertising purposes.

12. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on this page, and the "Last updated" date at the top will be revised accordingly.

For significant changes that materially affect how your personal data is processed, we will make reasonable efforts to provide notice through our website.

13. Contact Us and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal data is being processed, please contact us:

  • Email: info@barryadvisory.com
  • Subject Line: Data Protection Inquiry

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office, the supervisory authority responsible for overseeing compliance with the UAE PDPL.