Privacy notice

Who we are

This website is operated by KCM Consultants LLC, Al Saqr Business Tower, Office 3001A, Trade Centre Second, Dubai, United Arab Emirates ("KCM", "we", "us"). KCM decides how and why the personal data described in this notice is processed.

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other laws that apply to us. For any question about this notice or your data, write to connect@kcmehta.ae.

What we collect

Enquiry forms (the contact page and the "get in touch" forms on service pages): your name, email address, phone number, company, the service you are interested in, your message, the page you sent the form from, and how you first arrived at the site (for example a search engine, a link or a campaign tag).

Job applications (the careers pages): your name and contact details, your CV, your answers to the questions in the application form, details of previous roles, and how you heard about the role.

When you use the site: technical data such as your IP address, browser and device type, pages visited, how you arrived at the site (for example a search engine, a link or a campaign tag), and how you interact with pages. See "Cookies and analytics" below.

If you email, call or message us on WhatsApp, we receive whatever you choose to send, together with your email address or phone number.

Please do not send sensitive personal data (for example health, religious or financial account details) through the website forms. If an engagement needs it, we will agree a secure way to receive it.

How we use it and why

• To reply to your enquiry and, if you ask us to, to prepare a proposal or provide our services. We do this because you have asked us to and to take steps before entering into an engagement with you.
• To assess job applications and contact candidates. We do this with your consent, which you give on the application form, and to take steps before a possible employment contract. With your consent we also keep your application so we can consider you for future roles.
• To keep the site secure and free of spam and abuse, including the automated check that runs before a form is sent.
• To understand how the site is used so we can improve it, using the analytics tools listed below.
• To meet our legal and regulatory obligations, and to establish or defend legal claims.

We do not sell your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you. We send our newsletter or event invitations only if you ask for them, for example by signing up on the enquiry form or on an article page. Every newsletter has an unsubscribe link.

Who we share it with

We use trusted service providers who process data on our behalf and only for the purposes above:

• Cloudflare, which hosts and protects the website and runs the anti-spam check (Turnstile) on our forms.
• Hostinger, which hosts the system where form submissions, newsletter sign-ups and job applications are stored.
• Google (Google Analytics) and Microsoft (Clarity), which provide website analytics.
• Resend, which delivers the email notifications our team receives when a form is sent and, if you sign up, sends our newsletter and keeps the list of subscribers.

Where your matter involves India and you agree to it (on the enquiry form or by email), we share your enquiry with our associate firm K C Mehta & Co LLP, India, so that it can help us respond. We may also share a job application with them where the role involves India. We may also disclose data where the law requires it or to a regulator or court.

Transfers outside the UAE

Some of our service providers store or process data outside the UAE. Where that happens, we rely on the safeguards that UAE law allows, such as the provider's contractual commitments to protect the data. This includes sharing with our associate firm K C Mehta & Co LLP in India, as described above.

How long we keep it

• Enquiries that do not lead to an engagement: 24 months from our last contact with you.
• Unsuccessful job applications: 12 months from the date you applied, or sooner if you withdraw your consent.
• Client records: for as long as our professional and legal record-keeping obligations require.
• Analytics data: Google Analytics keeps event data for 14 months. Microsoft Clarity keeps data for the periods Microsoft sets, currently up to 13 months.

Cookies and analytics

On kcmehta.ae we use Google Analytics 4 and Microsoft Clarity to measure visits and understand how pages are used. Clarity records how visitors scroll, click and move through pages so we can find usability problems; we do not use it to identify you. These tools set cookies or similar identifiers in your browser. We also use Cloudflare Turnstile on our forms, which may read browser signals to tell people from bots.

The site also stores a small record in your browser of how you first arrived (the referring site, campaign tags and landing page) so we can see which channels bring enquiries. It holds no name or contact details.

You can block or delete cookies in your browser settings, and Google offers an opt-out add-on for Google Analytics. Blocking them does not stop the site from working.

Your rights

Subject to the conditions in UAE law, you can ask us to:

• give you information about how we process your personal data;
• tell you what personal data we hold about you and give you a copy;
• correct data that is inaccurate or incomplete;
• delete your data or restrict how we use it;
• stop processing it, and stop using it for direct marketing at any time;
• send your data to you or another organisation in a structured format;
• withdraw your consent at any time, where we rely on consent (for example for job applications). This does not affect processing that took place before.

To make a request, email connect@kcmehta.ae. We may need to confirm your identity before acting on it. If you are not satisfied with our response, you can complain to the UAE Data Office.

Security

We use technical and organisational measures to protect personal data, including encrypted connections to this website, restricted access to form submissions and CVs, and spam protection on all forms. No system is completely secure, so please contact us at once if you think your data has been put at risk.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.