Privacy Policy

Effective Date: 01.08.2026

Who we are (Controller)

Qi Advisory FZ-LLC

VUNE1976, Compass Building, Al Hulaila, Al Hulaila Industrial Zone-FZ

Ras Al Khaimah, United Arab Emirates

Manager: Felix Hannes Weller   ·   Email: info@qi-advisory.com

For any question about how we handle your personal data, contact us at info@qi-advisory.com.

EU Representative pursuant to Art. 27 GDPR: Frederik Gollob, Qì Advisory FZ-LLC, Hamburg, Germany. Contact: info@qi-advisory.com.

Scope and applicable law

We are incorporated in the Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates. Our processing of personal data is governed principally by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 and its implementing regulations, the “PDPL”), supervised by the UAE Data Office. As a RAKEZ entity, we are subject to the federal PDPL; the separate DIFC and ADGM data-protection regimes do not apply to us.

We serve clients internationally. Where we offer services to, or otherwise process the personal data of, individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we also apply the EU / UK General Data Protection Regulation (“GDPR”) to that processing; the GDPR references below are provided for the benefit of those individuals. Where the data-protection law of another country applies to you — for example, the Personal Data Protection Law of the Kingdom of Saudi Arabia — we honour the rights and obligations that law provides.

The personal data we collect

Contact form. When you submit an enquiry through our contact form, we collect your name, company, email address, enquiry type, and the content of your message. We use this to respond to your enquiry and to take any steps you request before entering into a contract. Lawful basis: performance of a contract or steps taken at your request prior to a contract (GDPR Art. 6(1)(b)) and, where relevant, our legitimate interest in responding to business enquiries (GDPR Art. 6(1)(f)); under the PDPL, processing necessary for a contractual relationship or at your request. Retention: we keep contact enquiries for up to 3 years unless a contractual relationship is established, after which our standard client-record retention applies.

Website analytics. This website uses Squarespace’s built-in analytics only. These provide aggregated, anonymised information about visits — such as page views, referral sources, and country-level location. The built-in analytics do not make personal data about identifiable individual visitors available to us. We do not use Google Analytics, the Meta Pixel, the LinkedIn Insight Tag, or any comparable third-party tracking tool. Lawful basis: our legitimate interest in understanding and improving website performance (GDPR Art. 6(1)(f)).

Server logs. Our hosting provider automatically records technical log data — such as browser type, operating system, referring URL, an abbreviated / anonymised IP address, and the date and time of access — for the secure operation of the website. This data is not used to identify you. Lawful basis: our legitimate interest in the security and stability of the website (GDPR Art. 6(1)(f)).

Cookies

The website uses a small number of cookies. Those that are strictly necessary for the site to work and to keep it secure are always set. Squarespace’s built-in analytics cookies are not strictly necessary; for visitors in the EEA, the UK, and Switzerland these are set only after you consent through our cookie banner, and you can decline them. We do not use advertising or profiling cookies. Please see our Cookie Policy for the full details.

How we share your data

We do not sell or rent your personal data, and we do not share it for third-party marketing. We share it only with service providers who help us operate the website and our business (for example, our website host and our email provider), each acting under contract and only as needed to provide their service, and where we are required to do so by law or in order to establish, exercise, or defend legal claims.

International transfers

Our website is hosted by Squarespace Inc. in the United States. Squarespace self-certifies under the EU-US Data Privacy Framework (and its UK and Swiss extensions) and, as a fallback, relies on the European Commission’s Standard Contractual Clauses, as a lawful basis for transfers of personal data to the United States.

In addition, because we are established in the UAE, personal data you submit is processed in the UAE. The UAE is not currently the subject of an EU adequacy decision; where we process the personal data of individuals in the EEA, the UK, or Switzerland, such transfers are made on the basis of appropriate safeguards or, where applicable, because the processing is necessary to take steps at your request before entering into a contract (GDPR Art. 49(1)(b)). The PDPL likewise permits cross-border transfers where its conditions are met.

Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, taking into account the nature of the data and the risks involved (PDPL security obligations; GDPR Art. 32).

Automated decision-making

We do not make decisions about you based solely on automated processing, and we do not carry out profiling.

Children

This website is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

Your rights

Subject to applicable law, you have the right to:

●        access the personal data we hold about you;

●        have inaccurate data corrected;

●        have your data erased;

●        restrict or object to our processing;

●        ask us to stop processing your data;

●        receive your data in a portable format; and

●        where processing is based on consent, withdraw that consent at any time.

To exercise any right, contact us at info@qi-advisory.com. If you are in the UAE, you may also lodge a complaint with the UAE Data Office. If you are in the EEA, the UK, or Switzerland, you may lodge a complaint with your local data-protection supervisory authority.

Changes

We may update this policy from time to time. The current version is always available at www.qi-advisory.com. Last updated: August 2026.