Privacy Policy

White Water Management Consultants

Last updated: February 2026

White Water Management Consultants (“White Water”, “we”, “us” or “our”) is committed to protecting personal information and processing it in accordance with applicable data protection laws of the United Arab Emirates, including Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL).

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website or interact with us in the course of our business activities.

1. Who We Are

White Water Management Consultants is a UAE-based management consultancy firm.

For the purposes of UAE data protection law, White Water Management Consultants acts as a Data Controller in relation to personal information collected through our website and business interactions.

2. Scope of This Policy

This Privacy Policy applies to personal information collected in connection with:

• Use of our website
• Enquiries submitted via our website or email
• Professional interactions related to our consultancy services
• Business development and professional communications

Our website is intended for a business audience and is not directed at children. We do not knowingly collect personal information from children.

3. Our Data Protection Principles

We process personal information in accordance with the principles set out under UAE PDPL, including:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality

4. Information We Collect

We collect only personal information that is relevant and necessary for our business activities. This may include:

• Name
• Business email address
• Company name and job title
• Business contact details
• Information provided in correspondence or contact forms
• Professional information relevant to consultancy engagements
• Basic technical information (such as IP address, browser type, device information, and website usage data)

We do not intentionally collect Sensitive Personal Data (as defined under UAE PDPL), such as data relating to health, biometric data, religious beliefs, criminal records, genetic data, or political opinions, through our website.

5. How We Collect Information

We collect personal information when you:

• Submit an enquiry via our website
• Contact us by email or other direct communication
• Engage with us in a professional capacity
• Interact with our website through cookies or analytics tools

Certain technical information may be collected automatically to ensure website functionality and performance.

6. How We Use Your Information

We may process personal information for the following purposes:

• To respond to enquiries and communicate with you
• To provide, manage, and develop our consultancy services
• To administer client and professional relationships
• To improve and maintain our website
• To share relevant professional insights or updates (where permitted by law)
• To comply with legal or regulatory obligations
• To protect our legal rights and interests

We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

7. Legal Basis for Processing

We process personal information on one or more of the following legal bases under UAE PDPL:

• Your consent (where required)
• Performance of a contract or steps taken prior to entering into a contract
• Compliance with legal or regulatory obligations
• Legitimate interests in operating and developing our consultancy business, provided such interests do not override your rights and freedoms

Where processing is based on consent, you may withdraw your consent at any time by contacting us.

8. Provision of Information

Providing personal information to us is generally voluntary.

However, if you choose not to provide certain information, we may be unable to respond to your enquiry or provide requested services.

9. Cookies and Analytics

Our website uses cookies and similar technologies to:

• Ensure the website functions properly
• Understand how visitors use the site
• Improve performance and user experience

We may use analytics tools (such as Google Analytics) to collect aggregated and anonymised usage data.

You may control or disable cookies through your browser settings.

10. Sharing of Personal Information

We do not sell personal information.

We may share personal information with trusted third parties where necessary for legitimate business purposes, including:

• Website hosting providers
• IT and cloud service providers
• Analytics providers
• Professional advisers (such as legal or accounting advisers)
• Competent authorities where required by law

All third parties are required to process personal information in accordance with applicable data protection requirements and appropriate safeguards.

11. International Data Transfers

Some service providers may be located outside the UAE.

Where personal information is transferred outside the UAE, we ensure that such transfers comply with UAE PDPL requirements, including:

• Transferring to jurisdictions that provide an adequate level of data protection; or
• Implementing appropriate contractual or organisational safeguards

You may contact us for further information about international transfer safeguards.

12. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

• Access controls and restricted access to data
• Secure hosting environments
• Encryption and cybersecurity safeguards
• Internal confidentiality obligations

While we take reasonable steps to protect personal information, no system can guarantee absolute security.

13. Data Retention

We retain personal information only for as long as necessary to:

• Respond to enquiries
• Provide our services
• Maintain business records
• Comply with legal, regulatory, or contractual obligations
• Establish, exercise, or defend legal claims

When personal information is no longer required, it is securely deleted or anonymised.

14. Your Rights Under UAE PDPL

Subject to applicable law, you may have the right to:

• Request confirmation of whether we process your personal information
• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Request restriction of processing
• Object to processing in certain circumstances
• Request data portability (where applicable)
• Withdraw consent where processing is based on consent
• Request that automated decision-making not apply to you (where applicable)

To exercise your rights, please use the “Contact Us” section of this website.

We may require verification of identity before responding to requests.

If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office in accordance with applicable law.

15. Data Protection Officer

Based on the nature and scale of our processing activities, White Water Management Consultants does not currently conduct processing activities that require the mandatory appointment of a Data Protection Officer under UAE PDPL.

We regularly review our data protection practices to ensure continued compliance.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our data practices.

Any updates will be posted on this page with the revised “Last updated” date.

We encourage you to review this Privacy Policy periodically.