Privacy Policy

Company: Trustory FZCO, trading as Trustory Consulting (“Company”, “we”, “our”, or “us”).

Registered Address: IFZA Business Park, Building A2, Dubai Silicon Oasis, Dubai, United Arab Emirates.

Registered Jurisdiction: United Arab Emirates.

Trustory FZCO is a UAE-based AI-assisted brand consultancy providing strategic analysis, market intelligence, positioning insights, analytical reporting, and business advisory services.

This Privacy Policy explains how we collect, use, process, store, disclose, transfer, and protect information submitted through our website (www.trustory.ae), forms, questionnaires, payment systems, AI-powered analytical tools, and consulting services.

This Privacy Policy is intended to comply with applicable laws of the United Arab Emirates, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”), applicable implementing regulations, UAE Cybercrime laws, electronic transactions regulations, consumer protection laws, and related confidentiality obligations applicable to UAE free zone entities.

By accessing our website, submitting information, completing questionnaires, uploading documents, or purchasing our services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

We may collect personal information including your name, email address, phone number, company details, billing information, and payment-related information.

We may also collect business-related information voluntarily submitted by clients, including brand information, market positioning data, strategy documents, marketing materials, customer demographics, questionnaire responses, uploaded files, and other consulting-related materials.

Technical information collected automatically through your use of our website is limited to IP address (logged briefly for spam-prevention purposes via Cloudflare Turnstile), browser type, operating system, device information, and standard server logs. We do not run third-party website analytics, advertising, or behavioural tracking.

2. AI-Assisted Consulting Services

Trustory FZCO provides AI-assisted consulting and analytical services. Information submitted through our platform may be processed using artificial intelligence systems, machine learning technologies, and automated analytical tools — used by our team during our internal analysis workflow — in order to generate:

• Brand strategy reports;
• Competitive analysis;
• Market intelligence insights;
• Consumer behaviour analysis;
• Strategic recommendations;
• Business positioning outputs;
• AI-generated summaries and reports.

AI processing currently takes place as part of our internal analysis carried out by our team and is not used to take fully-automated decisions at the point of form submission.

The third-party AI providers we rely on may change from time to time. Where you specifically request details of the providers we currently use, we will provide them on request.

The Company may combine AI-generated analysis with human expertise, consulting methodologies, and strategic review.

AI-generated outputs may contain inaccuracies, assumptions, omissions, or incomplete information and should be independently reviewed before implementation or reliance.

The Company does not intentionally use confidential client information to train proprietary AI models.

3. How We Use Information

We use submitted information to provide consulting services, generate AI-assisted reports, process payments, communicate with clients, improve our services, maintain platform security, comply with legal obligations, provide customer support, and optimise user experience.

We may also use anonymised and aggregated information for internal analytics, benchmarking, service improvement, and business intelligence purposes.

We do not sell personal data to third parties.

4. Legal Basis for Processing

Where required under applicable UAE law, we process personal data on one or more of the following lawful bases:

• Consent — where you have given specific consent (for example, opting in to receive marketing communications);
• Contractual necessity — where processing is required to deliver the services you have requested (for example, to complete an intake form, generate a deliverable, or process a payment);
• Legitimate interest — where processing is necessary for our legitimate business interests (for example, preventing spam and fraud, securing our website, and maintaining internal records);
• Legal compliance — where processing is required to comply with applicable laws, regulations, or lawful requests from competent authorities.

By submitting information through our website or platform, you consent to the processing of such information for the purposes described in this Privacy Policy that rely on consent as the lawful basis. Processing carried out under the other bases above does not require, and does not rely on, your consent.

5. Third-Party Providers and International Transfers

Payments made through the Services may be processed through third-party payment providers. The Company does not store or directly process full credit card, debit card, or banking information. Payment transactions are subject to the privacy policies, terms, and security practices of the applicable third-party payment provider.

Your information may be transferred to, processed in, or stored outside the United Arab Emirates where necessary for hosting, AI processing, payment processing, email delivery, file storage, security, system monitoring, technical support, or operational purposes. Where you specifically request details of the providers we currently rely on for these purposes, we will provide them on request.

The Company will implement commercially reasonable safeguards for such transfers in accordance with applicable UAE laws.

By using our Services, you acknowledge and consent to such international processing and transfers where necessary.

6. Data Retention

We retain client information, uploaded materials, questionnaires, and generated reports only for as long as reasonably necessary to provide the Services and comply with legal obligations.

Unless legally required otherwise, client information and generated outputs are retained for up to six (6) months after completion of the Services and are thereafter deleted or anonymised.

Certain anonymised or aggregated information that does not identify individuals may be retained for internal analytics and service improvement purposes.

7. Data Security

We implement commercially reasonable technical, administrative, and organisational safeguards designed to protect information against unauthorised access, misuse, disclosure, loss, alteration, or destruction. However, no internet-based system or electronic storage method can be guaranteed to be completely secure, and the Company cannot guarantee absolute security.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, the Company will notify the UAE Data Office within seventy-two (72) hours of becoming aware of the breach, in accordance with the PDPL Executive Regulations.

Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify affected data subjects without undue delay and provide guidance on steps that may be taken to mitigate the impact.

9. Confidentiality

Clients may submit confidential commercial information through the Services. The Company will use commercially reasonable efforts to maintain confidentiality and restrict access to authorised personnel and approved service providers only. Clients should avoid uploading highly sensitive regulated information, government-classified information, or special category personal data unless specifically requested under a separate written agreement.

10. Cookies and Tracking Technologies

We use a small number of technologies to make our website work, protect it from spam, and process payments safely. We do not use cookies or storage of any kind for advertising, behavioural tracking, profiling, or third-party analytics.

The items below are the cookies and similar technologies we currently use:

We do not use Google Analytics, GA4, Meta (Facebook) Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity, TikTok Pixel, retargeting cookies, cross-site tracking cookies, behavioural-profiling cookies, or cookies set by embedded video players (our videos are self-hosted).

Because the items above are limited to what is strictly necessary to operate the website, prevent spam, and process payments, your prior opt-in consent is not required under the PDPL for the cookies described above. We disclose them here so that you are fully informed of what is stored on your device.

You may control or disable cookies through your browser settings. However, disabling certain items above may affect form submission, spam prevention, or payment processing.

Where we later introduce non-essential cookies or analytics technologies, we will update this Privacy Policy and, where legally required, present a cookie consent mechanism before such cookies are activated.

11. Your Rights

Subject to applicable UAE laws, you may have rights to request access to personal data, correction of inaccurate information, deletion of personal data, withdrawal of consent, restriction of certain processing activities, or transfer of data where legally applicable. Requests may be submitted using the contact information below.

The Company may request verification of identity before responding to requests. We aim to respond to verified requests within thirty (30) days, in line with the PDPL Executive Regulations standard.

12. Third-Party Websites

Our website or Services may contain links to third-party websites or external services.

The Company is not responsible for the privacy practices, content, or security standards of third-party platforms. Users should review the privacy policies of external services separately.

13. Children’s Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

14. Changes to this Privacy Policy

The Company may update this Privacy Policy periodically. Updated versions will be published on the website together with a revised effective date. Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy.

15. Contact Information

For questions, requests, or privacy-related concerns, please contact:

Trustory FZCO (trading as Trustory Consulting)
IFZA Business Park, Building A2, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: info@trustory.ae
Website: www.trustory.ae

Website Consent Language

By using this website and submitting your information, you:

• Consent to the collection and processing of your information as described in this Privacy Policy, for the purposes that rely on consent as the lawful basis;
• Acknowledge that AI systems may process submitted information to generate reports, insights, recommendations, and strategic outputs;
• Understand that information may be processed through third-party cloud hosting providers, payment processors, email delivery providers, security providers, and AI technology providers, including transfers outside the United Arab Emirates;
• Acknowledge that AI-generated outputs may contain inaccuracies and should be independently reviewed before reliance or implementation.