Privacy Policy

Last updated: 28 October 2026

1. Introduction

DataNova Consulting FZCO (“DataNova”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, process, and safeguard personal data when you:

• Visit our website
• Book a strategy session
• Engage with our communications
• Use the DataNova platform

We process personal data in accordance with applicable data protection laws, including the UAE Personal Data Protection Law (PDPL) and, where applicable, the UK GDPR or other relevant regulations.

2. Who We Are

DataNova Consulting FZCO is a UAE-registered technology company providing a Microsoft Fabric-based data platform that enables organisations to automate data ingestion, transformation, modelling, and reporting.

For the purposes of data protection law:

• DataNova acts as a Data Controller in relation to website visitors, marketing enquiries, and booking information.
• DataNova acts as a Data Processor when providing platform services to client organisations.

Client organisations remain the Data Controller for any business data uploaded to the DataNova platform.

For any data protection queries, DataNova Consulting FZCO acts as the primary point of contact for data protection matters.

3. Information We Collect

3.1 Information You Provide

We may collect:

• Name
• Company name
• Job title
• Email address
• Phone number
• Information submitted via contact or booking forms

3.2 Client Platform Data

When providing services to clients, we may process business data uploaded to the DataNova platform, which may include:

• Financial and accounting data
• Operational data
• Transaction-level data
• Personal data only where included within client systems and reporting structures

In such cases, DataNova processes data strictly in accordance with client instructions and contractual agreements.

3.3 Automatically Collected Information

When you visit our website, we may collect:

• IP address
• Device and browser information
• Website usage data
• Cookie and tracking information

4. How We Use Personal Data

We use personal data to:

• Provide and manage our services
• Schedule and conduct strategy sessions
• Respond to enquiries
• Improve platform performance
• Maintain system security
• Send relevant communications where consent or legitimate interest applies

We do not sell personal data.

You may opt out of marketing communications at any time using the unsubscribe link in emails or by contacting us.

We do not use website enquiry information to make decisions with legal or similarly significant effects solely by automated means. Optional measurement can associate visits and accepted enquiries with a browser or advertising click, as explained in our Cookie Policy.

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent for optional website analytics, advertising measurement and marketing communications where required

6. Data Hosting & Security

The DataNova platform is built on Microsoft Azure and Microsoft Fabric infrastructure.

We implement appropriate technical and organisational security measures, including:

• Workspace-level client isolation
• Role-based access controls
• Secure authentication processes
• Encryption in transit and at rest
• Controlled upload and validation workflows
• Restricted internal access to client environments

We do not provide uncontrolled direct database access.

While we implement strong security measures, no system can guarantee absolute security.

7. Data Sharing

We may share personal data with trusted service providers necessary for operating our business, including:

• Microsoft (Azure, Microsoft 365, and related services)
• Booking and scheduling platforms
• Email and communication service providers

We may engage trusted subprocessors to support service delivery. All subprocessors are required to process data securely and in accordance with applicable data protection laws.

We do not sell or rent personal data.

Our DataNova marketing website uses first-party cookie controls. With your analytics permission, Google Analytics measures website use and Microsoft Clarity provides heatmaps and session replay with masked form inputs. With your advertising-measurement permission, Google Ads, Microsoft Advertising and OpenAI receive measurement signals about visits and accepted enquiries. These tools can receive online identifiers, page and device information, click references and IP addresses. Our accepted-enquiry conversion events do not include your enquiry text or contact fields. The current OpenAI implementation uses an image request without its JavaScript pixel SDK or advanced matching.

8. International Data Transfers

As a UAE-based entity operating on global cloud infrastructure, personal data may be processed in jurisdictions outside the UAE.

Where international transfers occur, we ensure appropriate safeguards are in place through contractual, technical, and organisational protections, including the use of standard contractual clauses or equivalent legal mechanisms where applicable.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal and contractual obligations. Enquiry and marketing data is typically retained for a reasonable period unless you request deletion.

This may include retention to:

• "Fulfil the purposes outlined in this policy"
• "Comply with legal and regulatory obligations"
• "Meet contractual commitments"

Client platform data retention is governed by client agreements

10. Your Rights

Subject to applicable law, individuals may have rights to:

• "Request access to personal data"
• "Request correction"
• "Request deletion"
• "Restrict or object to processing"
• "Withdraw consent where applicable"

You may exercise these rights by contacting us at:

• Email: privacy@datanovalabs.com

You also have the right to lodge a complaint with a relevant data protection authority where applicable.

11. Cookies

Optional website analytics and advertising measurement stay off until you allow them. You can choose these categories separately and withdraw permission through Cookie settings on the marketing website. We remember your choice for up to 180 days in a first-party cookie with the notice version, timestamps and a random receipt identifier. This receipt is stored in your browser, rather than a central consent database. Withdrawing permission stops future optional loading after a page reload, but does not erase information already received by providers. Our Cookie Policy identifies providers, purposes, storage and further privacy information.

12. Changes to This Policy

We may update this Privacy Policy periodically. The most current version will always be available on this page.

13. Contact Details

DataNova Consulting FZCO

Building A1, Dubai Digital Park

Dubai Silicon Oasis

Dubai, United Arab Emirates

License No. 72166

Email: privacy@datanovalabs.com