Legal
Privacy policy.
What personal data this site collects, why it is held, how long it is kept, and the rights available to the persons concerned.
- Controller
- EXILLIUM FZCO, licensed in the Dubai Multi Commodities Centre, with its registered office at Office 410, Jumeirah Bay X2, Cluster X, Jumeirah Lake Towers, PO Box 215321, Dubai, United Arab Emirates, is the controller of personal data collected through this site. [Whether a data protection officer is appointed, and the applicable data protection regime, to be confirmed.]
- What is collected
- The consultation form collects a first name, a last name, an email address, a telephone number with its international dialling code, the type of incorporation selected, and the services selected. Nothing else is requested, and no account is created. Documents, identification and details of an existing structure should not be submitted through this site.
- Purpose
- The information is used to respond to the enquiry, to arrange an introductory discussion, and to assess whether the firm is the appropriate adviser for the matter described. It is not used for marketing unless separate consent is given, and it is not sold or made available to third parties for their own purposes.
- Lawful basis
- Personal data is processed on the basis that it is necessary to take steps at the request of the person concerned prior to entering into a contract, and, where applicable, on the basis of the firm’s legitimate interest in responding to enquiries addressed to it. Where consent is relied upon, it may be withdrawn at any time. [The applicable statutory basis is to be confirmed for each jurisdiction in which the firm operates.]
- Retention
- Enquiry data is retained for as long as is necessary to respond to the enquiry and, where an engagement follows, for the period the firm is required to retain client records under the law and regulation applicable to it. Where no engagement follows, the data is retained for a limited period and then deleted. [Retention periods to be confirmed.]
- Disclosure
- Personal data is disclosed only where the firm is required to disclose it by law, by a regulator, or by a bank or authority in the course of an instructed application, and then only to the extent required. It may also be disclosed to external counsel, licensed partners and other advisers engaged on the matter, in each case subject to obligations of confidentiality.
- Third-party processors
- Enquiries submitted through the consultation form are transmitted to and stored in a customer relationship management system operated by a third-party provider on the firm’s behalf. In addition, the contact page makes a request to a third-party geolocation service in order to preselect an international dialling code; that request discloses the visitor’s internet protocol address to that service and is made on every visit to the page. No other analytics, advertising or tracking services are used, and this site does not set cookies for those purposes.
- International transfer
- Because the firm operates from offices in the United Arab Emirates, the United Kingdom, Spain and Morocco, and because its service providers may process data elsewhere, personal data may be transferred between jurisdictions. Transfers are made subject to appropriate safeguards. [The transfer mechanism relied upon is to be confirmed.]
- Rights
- Subject to the applicable regime, a person whose data is held may request access to it, correction of it, deletion of it, restriction of its processing, or a copy of it in a portable form, and may object to processing carried out on the basis of legitimate interest. Requests should be addressed to info@exillium.com. A person who is not satisfied with the response may complain to the relevant supervisory authority. [Supervisory authority to be confirmed.]
- Security
- The firm maintains technical and organisational measures appropriate to the sensitivity of the information it holds, including restricted access, confidentiality obligations on its personnel, and a compliance function. No transmission over the internet can be guaranteed secure, which is why documents and identification should not be sent with a first enquiry.
- Changes
- This policy may be amended to reflect changes in the firm’s practice or in applicable law. The version published on this page is the version in force.
- Contact
- Questions concerning this policy, or any request in respect of personal data, may be addressed to info@exillium.com, or to EXILLIUM FZCO at the registered office stated above.