Legal
Privacy Policy
This policy describes how Basirah collects, uses, stores, and protects personal information when you interact with our website and services. We are committed to handling information responsibly and in line with applicable laws.
Last updated: 18 April 2026
Overview
Introduction
Basirah (“we”, “us”, “our”) respects your privacy. This Privacy Policy applies to personal information we process when you visit basirah.com, communicate with us, or otherwise engage with our strategic and advisory services. By using the site or submitting information to us, you acknowledge this policy.
If you do not agree with this policy, please do not use our website or submit personal data to us. We may update this page from time to time; the “Last updated” date above will change when we do.
Controller
Who is responsible
Basirah acts as the controller of personal information described in this policy, unless we tell you otherwise in connection with a specific engagement (for example, where another entity is named in a contract).
We operate across multiple jurisdictions, including the United Arab Emirates, the Kingdom of Saudi Arabia, and the United Kingdom. The laws that apply to you may depend on where you live and how you interact with us.
Data we hold
Information we may collect
Depending on how you engage with us, we may process categories such as:
- Identity and contact details — for example name, email address, telephone number, company or organisation, and country.
- Enquiry and correspondence — information you include in contact forms, emails, or other messages, including your stated area of interest and the content of your message.
- Technical and usage data — such as IP address, browser type, device type, general location derived from IP or network information, pages viewed, and timestamps, where our hosting or analytics tools collect this automatically.
- Consent and preferences — records of marketing or cookie preferences where applicable.
We do not intentionally collect special categories of personal data (such as health or biometric data) through this website. Please do not send us sensitive information unless we explicitly ask for it as part of a defined process.
Purposes
How we use personal information
We use personal information for purposes including:
- responding to enquiries and managing our relationship with you;
- providing, improving, and securing our website and services;
- internal analysis and reporting (for example understanding how the site is used);
- complying with legal obligations and protecting our rights, users, and the public;
- sending relevant communications where permitted by law and your preferences.
We do not sell your personal information. We do not use automated decision-making that produces legal or similarly significant effects solely by automated means in relation to website enquiries.
Legal bases
Lawful grounds
Where data protection law requires a “legal basis”, we rely on one or more of the following, as appropriate: your consent (for example where you tick a consent box or accept non-essential cookies); performance of a contract or steps at your request before a contract; our legitimate interests in operating and improving Basirah, provided those interests are not overridden by your rights; and compliance with legal obligations.
If you are in the European Economic Area, the United Kingdom, or another region with specific requirements, you may have additional rights as described below.
Cookies
Cookies and similar technologies
Our website may use cookies and similar technologies to remember preferences, maintain security, and understand how visitors use the site. You can control cookies through your browser settings. If we use non-essential cookies that require consent under applicable law, we will obtain consent in line with local requirements.
Sharing
Who we may share information with
We may share personal information with:
- service providers who assist us (for example hosting, email delivery, analytics, or customer relationship tools), subject to appropriate contractual protections;
- professional advisers where required (for example lawyers or accountants);
- authorities or third parties when required by law or to protect rights and safety.
We require processors to handle information only on our instructions and in line with this policy and applicable law.
Transfers
International transfers
Your information may be processed in the UAE, Saudi Arabia, the United Kingdom, and other countries where we or our providers operate. Those countries may have different data protection rules. Where required, we implement appropriate safeguards (such as standard contractual clauses or other lawful transfer mechanisms) in addition to technical and organisational measures.
Retention
How long we keep information
We retain personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data and our relationship with you.
Security
Security measures
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your own devices and accounts.
Your choices
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.
To exercise these rights, contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.
Children
Children’s privacy
Our website and services are not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have received such information, please contact us and we will take steps to delete it.
Third parties
Links and third-party services
Our website may contain links to third-party sites or services. This policy does not apply to those sites. We encourage you to read their privacy notices before providing personal information.
Contact
Questions and requests
For privacy-related questions, requests, or complaints, please contact us at [email protected]. You may also reach us via our contact page.