Privacy Policy

Last updated: 26 September 2026

This privacy policy explains how Shaw Advisory L.L.C-FZ (“Shaw Advisory”, “we”, “us”) collects and uses personal data when you visit shawadvisory.co, contact us, subscribe to our emails or buy our services. We are the controller of this data. We follow the UK GDPR and EU GDPR where they apply to you, as well as the data protection law of the United Arab Emirates.

Who we are

Shaw Advisory L.L.C-FZ, Dubai, United Arab Emirates. For any privacy question or request, email info@shawadvisory.co.

What we collect

• Enquiry form: your name, email address, phone number, the service you are interested in, your country, and the page you sent the form from.
• Newsletter: your email address.
• When you buy a plan: your name, business name, email, phone number, billing address, your website (if you give it) and the plan you chose. Card details are entered directly with Stripe. We never see or store your full card number.
• When you contact us by email, phone or WhatsApp: the details you share with us.
• Technical data: our hosting provider records basic server logs (such as IP address, browser type and pages requested) for security and performance.

How and why we use it

• To reply to your enquiry and discuss our services. Lawful basis: steps taken at your request before a contract, and our legitimate interest in responding to business enquiries.
• To deliver the services you buy, take payments and send receipts. Lawful basis: performance of a contract.
• To send our newsletter when you have signed up. Lawful basis: consent. You can unsubscribe at any time using the link in every email.
• To keep records for tax, accounting and legal purposes. Lawful basis: legal obligation.
• To keep our website secure and working well. Lawful basis: legitimate interests.

We do not sell your personal data, and we do not use it for automated decisions that have a legal or similarly significant effect on you.

Who we share it with

We use trusted service providers who process data for us under contract:

• Hostinger – website hosting and newsletter tools
• Stripe – payment processing
• monday.com – our customer relationship management (CRM) system
• Make.com – automation that passes form and payment details into our CRM
• Google – email (Gmail), web fonts, Google Tag Manager and, only if you accept analytics or marketing cookies, Google Analytics and Google Ads
• Meta Platforms – only if you accept marketing cookies, to measure our advertising (Meta Pixel)
• WhatsApp (Meta) – only if you choose to message us on WhatsApp

We may also share data if the law requires it, or with professional advisers such as accountants and lawyers.

International transfers

We are based in the UAE and some of our providers store data in the United States, the European Union or other countries. Where UK or EU data protection law applies, we rely on safeguards such as adequacy decisions, the UK International Data Transfer Addendum or the EU Standard Contractual Clauses offered by our providers.

How long we keep it

• Enquiries that do not become clients: up to 24 months after our last contact.
• Client and billing records: up to 6 years after the end of our contract, for tax and legal reasons.
• Newsletter subscribers: until you unsubscribe.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to how we use it, ask for a copy in a portable format, and withdraw consent at any time. To make a request, email info@shawadvisory.co. We reply within one month.

If you are in the UK and are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk). If you are in the EU, you can contact your local data protection authority. We would appreciate the chance to put things right first.

Cookies

See our Cookie Policy for details of the cookies and similar technologies we use.

Changes to this privacy policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.