Who handles your information
Ras Al Hekma Businessmen Services, Trade Licence No. 1354791 issued by the Department of Economy & Tourism, Dubai, operates this website. Our business is based in Al Nahda 1, Dubai, United Arab Emirates. In this policy, “we”, “us” and “our” refer to Ras Al Hekma.
For enquiries and client records whose purposes and handling we determine, we act as the data controller. A government body, court or independent specialist receiving information for its own functions may have separate responsibilities and its own privacy notice.
For privacy requests, email privacy@rasalhekmaae.com with the subject “Privacy request”. You can also call our English-speaking team on +971 54 437 2661 or our Arabic-speaking team on +971 54 540 6287.
Information we receive
The enquiry form requests your name, telephone number, selected service and a description of your requirements. The service-specific enquiry type, where available, your email address and attachments are optional. You may attach up to two PDF, JPG or PNG files, with a combined size of 3 MB.
If you contact us by telephone, email or WhatsApp, we receive the contact details and information you share through that channel. During an agreed service, relevant records may include company details, application references, correspondence, authorisations and documents needed for the transaction. We may also receive relevant information from your authorised representative, an appointed specialist or the authority handling your application.
Hosting and security providers may process technical information such as your IP address, browser and device characteristics, request time and security signals. This supports delivery of the website and protection of the enquiry form.
Why we use information
We use enquiry details to understand your request, contact you, explain requirements and prepare a proposed scope of assistance. If you engage us, relevant information is used to coordinate the agreed work, prepare or follow up applications, keep correspondence and maintain client records.
We also use information where necessary to address complaints, meet applicable legal obligations, respond to lawful requests and establish or defend legal rights. Technical information is used to prevent spam, abuse and unauthorised use.
An enquiry is not an automatic subscription to promotional messages. This website does not sell your personal information or publish your enquiry. We do not use the form to make automated decisions about visa eligibility, approval or acceptance of a government application.
Permission and legal grounds
We seek consent where required by the applicable data protection law. Other grounds may apply to information needed to take steps you request before entering a contract, perform an agreed service, comply with a legal obligation or deal with legal proceedings and rights. The appropriate ground depends on the particular purpose and applicable law; sending an enquiry is not a waiver of your privacy rights.
If we need additional sensitive information or a use that requires separate consent, we will explain the request before proceeding. Where processing relies on consent, you may withdraw that consent by contacting us. Withdrawal does not invalidate earlier lawful processing, and a separate lawful obligation may require certain records to be retained.
Website, email and messaging providers
We use service providers for website hosting, security, email delivery and business correspondence. Enquiries and optional attachments are delivered to our business inbox and handled by the employees responsible for your request. Uploaded files are not published in a public document library.
Our website security provider processes technical information to help prevent automated abuse. If you choose WhatsApp, a social platform or an external link, that provider also handles information under its own terms and privacy policy.
You can read the providers’ notices: Cloudflare, Google and WhatsApp. Contact us if you prefer to discuss which information is needed before sending a document.
Processing outside the UAE
Cloud and messaging services can involve processing and storage in countries outside the UAE. A service may also involve an overseas recipient if the work you have requested requires it. A provider’s global infrastructure does not mean that all data remains in Dubai or within the UAE.
Cross-border sharing must have a basis permitted by the law that applies to the information. Depending on the circumstances, this can require recognised protections, contractual safeguards or a specific legal exception. Where the GDPR applies, its transfer requirements must also be considered. You may request information about the safeguards relevant to your service; no waiver of applicable transfer protections is required by this notice.
Ask us about the intended recipients and relevant arrangements before sending information if the location of processing is important to your request.
Archives and retention
Enquiries and related correspondence are archived in our business records. There is no single fixed deletion period for every enquiry or service file. The relevant period depends on whether the enquiry becomes an active matter, the work performed, the need for follow-up, applicable record-keeping duties and any complaint or legal claim.
Records should not be kept longer than necessary for the applicable purpose or legal requirement. You may ask us to review a record or request deletion. We will assess the request against the purpose for retaining it and any obligation or legitimate legal need to keep it, and explain any reason that prevents deletion. Removing a record from our systems does not remove an authority’s independently held official records.
Your rights and requests
Depending on the applicable law and its conditions, you may request information about the use of your data, access or a copy, correction, deletion, restriction of processing, objection to certain uses or transfer of eligible data. You may also withdraw consent where that is the basis for processing. These rights are subject to relevant exceptions, including lawful record retention and protection of other people’s rights.
Contact us using the details above and explain your request. We may ask for proportionate information to verify your identity or authority to act for someone else. Please do not send a full identity document unless it is needed and the method of providing it has been agreed.
We will address requests within the time required by applicable law and explain any restriction or lawful extension. You may raise a concern with the competent data protection authority or other competent regulator. Contacting us first does not remove that right.
Where European data protection law applies
The GDPR does not apply solely because a website can be opened from the European Union. Its territorial scope includes relevant processing through an EU establishment, or offering goods or services to people in the EU or monitoring their behaviour there, subject to the Regulation’s conditions.
For processing within that scope, the grounds may include your requested pre-contract steps or contract, a binding legal obligation recognised by the GDPR, consent for a specific optional use, or legitimate interests in security and handling business correspondence where balanced against your rights. Special-category information requires an additional applicable condition; an ordinary enquiry does not provide unlimited consent to process it.
GDPR rights may include access, rectification, erasure, restriction, portability and objection, including objection to direct marketing. Requests are normally free of charge and answered without undue delay, normally within one month; lawful exceptions or an extension may apply, with the required explanation. You may complain to a competent EU supervisory authority or seek a judicial remedy. EU status does not eliminate UAE requirements applicable to the requested transaction.
Documents, security and family enquiries
Send only information relevant to the initial enquiry. Redact unnecessary passport or identity numbers and unrelated details. If a full document is needed to proceed, our team can explain the requirement and agree how it should be provided. If you send another person’s information, ensure that you are authorised to do so and that they know how it will be used.
The form uses encrypted HTTPS transmission, server-side validation and anti-abuse checks. These measures reduce risk but cannot guarantee that every transmission, recipient device or email account is secure. Contact us promptly if you believe you sent information to the wrong recipient or suspect misuse.
The website is not intended for children to submit independent enquiries. A parent, guardian or authorised representative should handle any information concerning a child that is necessary for a family-related service.
Language, appearance and security technology
The website stores your selected language and your light, dark or automatic appearance preference in your browser’s local storage. These settings are not enquiry records. Clearing website storage removes the saved preferences.
We have not added advertising pixels or marketing analytics tools to this website. Hosting and form-protection services may use technical identifiers or security storage under their own notices. If optional tracking is introduced, the notice and any consent controls required by applicable law must be updated before it is used.
Links to social profiles do not require you to use those platforms. Once you open an external service, its own storage and privacy practices apply.
What you choose to provide
The form identifies the details needed to handle an initial enquiry. Without a name, contact number and sufficient description, we may be unable to understand the request or respond effectively. An email address and attachments are optional; you can make an initial enquiry without uploading documents.
Do not send health records, criminal records, bank statements or full identity documents merely to ask a general question. If a particular application later requires such information, the necessity, recipient and means of submission should be clarified for that service. Receiving a document does not mean that we have verified its authenticity, accepted responsibility for an application or agreed to use it for an unrelated purpose.
Privacy concerns and suspected incidents
If you suspect unauthorised disclosure, a misdirected message or misuse of documents connected with our service, contact us promptly using the privacy contact above. Describe what happened and provide a reference where available, without resending sensitive attachments unnecessarily.
Where a personal data breach occurs, assessment, remedial steps and any notification to affected individuals or the competent authority must follow the applicable legal requirements. A security concern is not resolved simply by referring to a provider’s terms, and nothing in this policy limits obligations that the law places on us.
Policy updates
We may update this policy when our services, information handling or applicable requirements change. The revision date appears at the top of the page. A new notice does not retrospectively authorise an incompatible use of information. Where required, we will provide additional notice or seek consent for a new use.