Privacy policy

It would be helpful to start by explaining some key terms used in this policy:

• We, us, our / Data Controller: WHITE SQUARE PARTNERS L.L.C. – FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates Tower, which operates this website and decides the purposes and means of processing personal data.
• Personal Data: any information relating to an identified or identifiable person.
• Data Subject: an individual whose personal data is processed by us.
• Processing: any operation performed on Personal Data (collection, storage, use, disclosure, deletion). 
• Third Party: any entity other than the Data Subject or Controller.
• Cross-Border Transfer: transferring personal data outside the UAE.

In order to provide our services, we may collect certain personal data from you. Under data protection law, we can only use your personal data if we have a proper reason, e.g.The table below sets out the categories of personal data we may collect, the purposes for which it is processed, the legal basis under the UAE PDPL, and the retention period.

• you have given consent—where we need your consent, we will ask for it separately of this privacy policy and you can withdraw consent at any time;
• to comply with our legal and regulatory obligations; 
• to fulfil our contract with you or take steps at your request before entering into a contract; or
• for our legitimate interests or those of a third party.

All personal data is processed in accordance with the principles of lawfulness, transparency, purpose limitation, and data minimization under UAE PDPL.

We do not disclose any personal data received through our website to any third parties, except in strictly limited circumstances. Personal data may be shared only with:For analytics purposes, we share aggregated statistical data with:

• Google LLC (Google Analytics) 

• our affiliated entities who support the provision of our services and who are bound by strict confidentiality obligations, including NDAs;
• our employees and authorized personnel who require access to such data in order to perform their professional duties, and only to the extent necessary;
• government authorities, regulators, courts or law-enforcement bodies, but solely where disclosure is required by applicable law or a valid official request.

Personal data may be held at our offices as described above (see ‘Who we share your personal data with’). 

Personal data is stored on secure servers located in the UAE and, where applicable, in other jurisdictions as part of cloud hosting services.

The cross-border transfer of personal data from the UAE may only be carried out for specific purposes and in accordance with the requirements established by the laws of the United Arab Emirates.

It is sometimes necessary for us to transfer your personal data to countries outside the UAE. We will transfer your personal data outside the UAE only in the following cases: 

• Companies, operating in countries where there are no laws for Data Protection, may transfer data under a contract or agreement obligating the companies in such countries to adopt measures, controls and requirements set out in the PDPL, in addition to provisions forcing the Controller or the Processor to adopt appropriate measures which are imposed by a judicial or regulatory authority in such countries as set out in the contract.
• If there is an explicit consent granted by the Data Subject to transfer his/her Personal Data outside the UAE, provided that such transfer shall not contradict the public or security interest of the UAE. 
• If the transfer is necessary to fulfil obligations and establish rights before judicial entities, exercise or defend the same. 
• If the transfer is necessary to sign or implement a contract made between the Controller and the Data Subject, or between the Controller and third parties to serve the interest of the Data Subject. 
• If the transfer is necessary to implement an action related to an international judicial cooperation.
• If the transfer is necessary to protect the public interest.

Whenever we conduct a cross-border transfer, we perform a risk assessment and ensure that adequate safeguards are applied in accordance with Articles 22–23 of the PDPL.

You as The Data Subject have the following rights, which you can exercise free of charge:

If you would like to exercise any of those rights, please:You also have the right to request information about the logic involved in automated processing, where applicable.

• email or write to us — see below: ‘How to contact us’; and
• provide enough information to identify yourself (e.g. your full name, address and client or matter reference number) and any additional identity information we may reasonably request from you;
• let us know what right you want to exercise and the information to which your request relates.

We use some essential cookies to provide you with a good experience and make this site work. under the conditions set out below. You can object to the use of cookies by us by disabling the option in your browser’s settings.

Cookies are small files that are managed by your browser and are directly stored on your device whenever you visit our website. You can disable the use of cookies in the preferences of your browser, but this might result in some functions of our website or some services being unavailable to you or not functioning properly anymore.

The Data Controller uses various categories of cookies to ensure the correct functioning of the Website, improve user experience, analyze the behavior of Data Subjects, and optimize the services provided.

Below are the main types of cookies used by the Data Controller, as well as the purposes for which they are used.

1. Necessary cookies.

These cookies are necessary for the user to browse the website and use it and its functions. Essential cookies are processed on the basis of our legitimate interest to ensure the functioning of the Website.

1. Statistic / performance cookies.

These cookies are used by the Data Controller to collect information about how visitors use our website. These statistics give us information about how often our website is visited, which pages of our website visitors spend the most time on, and how often they use the page or part of it. This allows us to make the structure, navigation and content of our website as user-friendly as possible. The Data Controller can monitor you for any errors and determine which parts of the website need to be adjusted.

For analytics purposes we are using Google Analytic services and its provided cookies:

• Purpose: Analysis of website traffic, user behavior, and service improvement.
• Data shared: Aggregated, statistical information (IP address in form, on-site actions). We do not use cookies to identify specific individuals.
• Legal basis: Consent (for analytics cookies).
• Please note that, although we only have access to aggregated data (we do not use cookies to identify specific person), the service provider of respective cookies may have access to your personal data.

For more information about how Google processes your personal data, please visit: https://policies.google.com/privacy?hl=en-US.

Please note that this is hyperlink to third party website for which we have no control and we are not liable for its content. By accepting third party cookies you are also consenting to the privacy policies of respective service providers.

Analytics cookies (including those placed by Google Analytics) are used only with your consent.

Cookie consent banner is displayed in English upon first visit to the website. Users express consent by ticking the checkbox.

We do not use cookies for automated decision-making that produces legal or significant effects.

1. Third-party cookies

Some cookies placed on the Website may belong to third parties. This is because certain elements of the Website may be obtained from third-party resources.

Since such elements are placed by third parties, the Data Controller cannot control the configuration and content of the corresponding cookies. To change the settings or obtain information about such cookies, the Data Subject must refer to the privacy policies and terms of use of the relevant third parties.

You can disable the use of cookies at any time by deleting the cookies placed by the website on your device. Alternatively, most web browsers allow some control of most cookies through the browser settings. The technical instructions within the browser settings include information such as how you can delete or deactivate cookies in your browser.

• Chrome (ENG): https://support.google.com/chrome/answer/95647?hl=en&sjid=629312960687721476-NC.
• Explorer (ENG):  https://support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d.
• Firefox (ENG): https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US.
• Safari (ENG): https://support.apple.com/en-ae/guide/safari/sfri11471/mac.

We maintain a range of technical and organizational safeguards designed to ensure that your personal data remains protected, confidential, and secure against any form of unauthorized access, disclosure, alteration or misuse. Access to personal data is strictly limited to individuals who require it for legitimate business purposes, and all such persons are bound by confidentiality obligations and permitted to process personal data only in accordance with our instructions and applicable law.

We ensure that any affiliates or other third parties acting on our behalf apply security and confidentiality measures that meet the standards required under the UAE Personal Data Protection Law. These parties are required to protect personal data against unauthorized access, unlawful processing, accidental loss, destruction or damage.

We also maintain internal procedures for identifying, assessing, and responding to any actual or potential personal data breach. Where required by the UAE PDPL, we will notify the competent regulatory authority and, where applicable, the affected individuals of a personal data breach in a timely manner.

We regularly test, assess, and evaluate the effectiveness of our technical and organizational measures.

This privacy policy was published on 25th December 2025.

We may change this privacy policy from time to time. When we do, we will publish the updated version on our website and ask for your consent to the changes if legally required.

Please contact us if you have any queries or concerns about our use of your personal data (see below ‘How to contact us’). We hope we will be able to resolve any issues you may have.You may also file a complaint with the UAE Data Office via its official portal if you believe our data processing breaches the Protection of Personal Data Law.

If you wish to exercise your rights or have any questions regarding the processing of your personal data, you may contact the Data Controller at the following address:

Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates

Email: info@whitesquarepartners.com

Tel: +971 45 400 900