How we handle personal data.
This notice explains what personal data we collect through gainventures.ai and in the course of our engagements, why we collect it, and the rights you have. We process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.
Who we are
GAIN Ventures Innovation & Artificial Intelligence Research & Consultancies L.L.C is a limited liability company licensed by the Department of Economy and Tourism, Dubai (licence 1648455), with its registered office at Office F-204, Building 137, Al Baraha, Deira, Dubai. We are the controller of the personal data described in this notice. Contact: engage@gainventures.ai.
What we collect
- Enquiry data — name, work email, organisation and sector, and the content of your message, when you request a briefing or write to us.
- Engagement data — contact details, role and correspondence for people at client and partner organisations, held under the relevant contract or NDA.
- Technical data — server logs generated by our hosting provider (IP address, browser type, pages requested, timestamps) used for security and service integrity. We do not run advertising trackers.
Why we use it and on what basis
- To respond to your enquiry and arrange a briefing — on the basis of your request (steps prior to entering a contract).
- To deliver and administer engagements — on the basis of contract and our legitimate interests in running the business.
- To keep the website secure and available — on the basis of our legitimate interests.
- To comply with legal obligations, including UAE licensing, accounting and tax requirements.
We do not sell personal data and we do not use it for automated decisions that produce legal or similarly significant effects.
Sharing and international transfers
We share personal data only with service providers who process it on our instructions (currently website hosting and email), with network partners where you have asked us to involve them in an engagement, and with authorities where required by law. Our website is hosted on Google Cloud infrastructure; where data leaves the UAE we rely on the transfer safeguards permitted under the PDPL.
Retention
Enquiry data is kept for 24 months from last contact unless an engagement follows. Engagement records are kept for the duration of the contract and for the period required by UAE law thereafter. Server logs are retained for up to 12 months.
Your rights
Subject to the PDPL, you may ask us to access, correct, delete or restrict the processing of your personal data, to receive it in a portable format, or to object to processing based on our legitimate interests. Write to engage@gainventures.ai; we respond within one business day and resolve requests within the statutory period. You may also complain to the UAE Data Office.
Security
Data is held on access-controlled systems with encryption in transit. Engagement material is handled under NDA and, where the client requires, within the client's own sovereign environment.
Changes
We will post any revision to this notice on this page with a new effective date.