Privacy Policy

1. Who We Are

Cardilett HR Advisory and Consultancy (“Cardilett”, “we”, “us”, or “our”) is an Abu Dhabi based L.L.C – S.P.C company in the United Arab Emirates, that is committed to protecting the data and privacy of cardilett.ae (the “Site”, “Website”, “Page”) visitors and the clients' data. This Privacy Policy is in accordance with the United Arab Emirates' Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its implementing regulations, as well as any applicable free-zone data protection law (where relevant). By using the Site, you acknowledge the practices described in this Policy.

2. Personal Data We Collect

We collect the following categories of personal data – (information you willingly submitted only):

• Contact form submissions. When you submit our contact form, we collect your name, email address, company name, the type of service you are enquiring about, any message you provide, and your consent to be contacted.
• Usage and analytics data. We use Microsoft Clarity, which operates without cookies, to collect anonymised and aggregated information about how visitors interact with the Site, such as pages viewed and general on-page behaviour (via heatmaps and session recordings). No cookies are used, and no personal data is collected or stored through this process.
• Correspondence. If you contact us directly by email or telephone, we retain that correspondence data for the sole purpose of contacting you as per your enquiry/request and nothing more whatsoever.

3. How We Use Your Data

We use the personal data described above to:

• Respond to enquiries submitted through the contact form;
• Provide, discuss, and follow up on Cardilett provided services;
• Understand and improve how visitors use the Site;
• Maintain the security and proper functioning of the Site; and
• Comply with our legal and regulatory obligations under UAE law.

Our legal bases for processing include your consent (for example, the consent checkbox on our contact form), our legitimate interest in operating and improving the Site and responding to business enquiries, and compliance with applicable legal obligations.

4. No Use of Cookies

The Site does not use cookies or any similar tracking technologies. We use Microsoft Clarity, which does not collect personal data, solely to understand aggregate Site usage such as pages viewed and general on-page behaviour (including via heatmaps and session recordings). This tool does not set cookies, does not track visitors individually, and no personal data is collected or stored as a result.

5. Data Sharing and Disclosure

We do not sell personal data whatsoever. We may only share personal data with:

• Service providers who process data on our behalf, such as our email delivery provider, hosting and database providers, and Microsoft (for the Clarity analytics tool), each acting under contractual obligations to protect your data;
• Professional advisors, regulators, or authorities where required by UAE law or to establish, exercise, or defend legal claims; and
• A successor entity in the event of a merger, acquisition, or restructuring of Cardilett's business, subject to equivalent privacy protections.

6. International Transfers

Some of our service providers, including Microsoft, may process data on servers located outside the UAE. Where personal data is transferred outside the UAE, we take reasonable steps to ensure such transfers are subject to appropriate safeguards consistent with the PDPL, including reliance on providers that maintain recognised international data protection standards.

7. Data Retention

We retain contact form submissions and related correspondence for as long as necessary to respond to your enquiry, maintain our client relationship, and meet our legal, accounting, or reporting obligations, after which it is securely deleted or anonymised.

8. Your Rights

Subject to the conditions set out in the PDPL, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete personal data;
• Request deletion of your personal data, where applicable;
• Object to or restrict certain processing of your personal data;
• Withdraw consent at any time, without affecting prior lawful processing; and
• Lodge a complaint with the UAE Data Office if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, or alteration. While we take reasonable steps to safeguard your data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Therefore, and to be completely and always transparent, Cardilett will never approach or contact you through any communication channel other than the one you used when you submitted your enquiry. We encourage you to be cautious, to disregard anything you may receive in the name of Cardilett that falls outside this Privacy Policy, and to contact us if you feel that any approach was inconsistent with this Policy – this allows us to take immediate corrective action aimed at protecting your safety and data confidentiality.

10. Children's Privacy

The Site is intended for employees and business audiences in the UAE and is not directed at children whatsoever. We do not knowingly communicate or engage with any individual under the age of 18 and, should we become aware of a user's age at any point, we shall stop the communication or engagement immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page indicates when this Policy was last revised. We encourage you to review this page periodically and to exercise your rights accordingly.

12. Contact us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Cardilett HR Advisory and Consultancy
Abu Dhabi, United Arab Emirates
Email: assist@cardilett.ae