Privacy notice

This website is operated by Gulf Gateway Corporate Services Provider, a corporate services firm licensed in Dubai, United Arab Emirates, at Clover Bay Tower, Office 1912, 19th Floor, Business Bay, Dubai, United Arab Emirates. We are the controller of the personal information described here. For anything in this notice, write to hello@gulfgatewaycsp.ae or call +971 56 866 3666.

Anyone who visits this site or contacts us through it, wherever they are. Our clients come from many countries, so we apply one standard everywhere: the UAE Personal Data Protection Law as our home law, and, where you are in the European Economic Area, the United Kingdom or another place with its own data protection law, the rights that law gives you.

When you send an enquiry through the form, we receive the details you enter: your name, your email address, your phone number if you give it, the service you are asking about and anything you write about your plans. We also record the page you sent it from, the time, and the network address the request came from, which we keep for security and to trace abuse.

If you call, message or email us instead, we receive whatever you choose to share through that channel. The prefilled message behind the WhatsApp and email links is built in your browser from what you typed and is not sent anywhere until you send it yourself.

If you become a client, we collect what the engagement requires: identity documents, company details, shareholder and visa information and financial records, as set out in your engagement letter.

To answer your enquiry and prepare a consultation, because you asked us to (steps at your request before a contract). To carry out an engagement, because a contract requires it and because UAE licensing, immigration and tax authorities require it. To keep the site secure and to keep records the law obliges us to keep, because we have a legitimate interest and a legal duty to do so. To measure how the site is used, only with your consent, which you can withdraw at any time.

We do not sell personal information, we do not use it for advertising, and we do not make automated decisions about you.

Service providers who act on our instructions: Cloudflare, which delivers the site and filters automated traffic; Resend, which carries enquiry emails; Google Workspace, which hosts our mailboxes; and Google Analytics, only if you consent to analytics. Each is bound by contract to use the information only for the service it provides.

Authorities and institutions, when we act for you: the licensing authority for your jurisdiction, immigration and identity authorities, the Federal Tax Authority, and any bank you ask us to introduce you to. We share what each requires to process your file, and nothing more.

Otherwise we disclose personal information only where the law requires it.

We are based in the UAE. The site is delivered from Cloudflare's global network and our email providers operate in the United States, so information you send through the site passes through or is stored in those places. Where a law requires safeguards for such transfers, we rely on the provider's standard contractual protections.

Enquiries that do not become an engagement are kept for twelve months to allow follow up, then deleted. Client files are retained for the period the licensing and tax authorities require, currently up to seven years after the engagement ends, after which they are securely destroyed. Server logs holding network addresses are kept for no more than 30 days.

The site sets strictly necessary cookies to run, and analytics cookies only with your consent. The full list, with durations, is in the cookie policy, and you can change your choice from Cookie settings in the footer at any time.

You can ask us what information we hold about you and receive a copy; ask us to correct it; ask us to delete it or to stop using it; object to a use based on our legitimate interests; ask for it in a portable form; and withdraw any consent you have given. Write to hello@gulfgatewaycsp.ae and we will respond within one month. We may ask you to confirm your identity first. Where a legal obligation requires us to keep a record, we will tell you.

If you are unhappy with our answer, you may complain to the data protection authority where you live. In the UAE, that is the UAE Data Office.

The site is served only over encrypted connections. Enquiries are delivered to a secured business mailbox and are not stored on the website itself. Client files are held on access controlled systems and shared with authorities through their official channels.

The site is for businesses and adults. We do not knowingly collect information from anyone under 18.

We will update this notice when our practices change. The date at the top is the date of the current version. A material change will be shown on the site before it takes effect.