Privacy Policy
Effective Date: September 2025
Updated Date: July 2026
Comply Sphere Advisory FZCO (“Comply Sphere”, “we”, “our” or “us”) is committed to protecting your privacy and processing personal information in a responsible, secure and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our free tools, participate in our training programs, or engage our consultancy and advisory services.
By accessing or using our website, tools, or services, you acknowledge that you have read and understood this Privacy Policy.
Comply Sphere Advisory FZCO acts as the data controller for personal information collected through this website unless otherwise stated.
1. Information We Collect
A. Information You Provide
We may collect personal information you voluntarily provide, including:
- Full name
- Business email address
- Telephone number
- Company name
- Job title
- Business address (where provided)
- Information submitted through contact forms
- Consultation requests
- Webinar and event registrations
- Newsletter subscriptions
- Downloads of guides, brochures or other resources
- Information submitted through our free compliance tools and assessments
B. Information Collected Automatically
When you visit our website we may automatically collect:
- IP address
- Browser type and version
- Device information
- Operating system
- Date and time of access
- Pages visited
- Referring website
- Website activity
- Cookies and similar technologies
Please refer to our Cookie Policy for further information.
C. Information from Third Parties
Where appropriate we may receive information from:
- Publicly available sources
- Business partners
- Referral partners
- Professional networking platforms
- Regulatory or compliance databases
- Service providers supporting our business
We only collect such information where lawful and necessary.
2. How We Use Your Information
We use personal information to:
- Deliver consultancy, advisory and training services.
- Respond to enquiries and requests.
- Manage client onboarding.
- Provide access to free compliance tools.
- Generate compliance assessments.
- Deliver newsletters and regulatory updates.
- Improve our website and user experience.
- Monitor website security.
- Prevent fraud or misuse.
- Comply with legal and regulatory obligations.
- Maintain internal business records.
- Develop and improve our services.
3. Legal Basis for Processing
Where applicable under applicable data protection legislation, including the General Data Protection Regulation (GDPR), we process personal information on one or more of the following legal bases:
|
Purpose |
Legal Basis |
|
Responding to enquiries |
Legitimate Interests |
|
Consultancy services |
Performance of a Contract |
|
Training registrations |
Performance of a Contract |
|
Newsletters |
Consent |
|
Website analytics |
Legitimate Interests |
|
Website security |
Legitimate Interests |
|
Legal compliance |
Legal Obligation |
4. Artificial Intelligence
Certain services offered by Comply Sphere Advisory, including Nexus™ by Comply Sphere Advisory, and selected compliance assessment tools, may utilise artificial intelligence (“AI”) to assist in generating sanctions, compliance and risk-related insights.
AI-assisted outputs are provided solely as decision-support information.
They:
- do not constitute legal advice;
- do not constitute regulatory advice;
- do not replace professional judgement;
- and should always be independently reviewed before being relied upon.
Information submitted through our website or free tools will not be used to train publicly available artificial intelligence models without your explicit consent.
5. Sharing and Disclosure of Information
We do not sell, rent or trade your personal information. We may share information with trusted third parties including:
- Website hosting providers
- Cloud infrastructure providers
- Email marketing providers
- CRM providers
- Analytics providers
- IT support providers
- Professional advisers
- Payment providers (where applicable)
We may also disclose information where required by law, court order or a competent regulatory authority. All third parties are required to maintain appropriate confidentiality and security measures.
We only share personal information where it is necessary to provide our services, operate our website, comply with legal obligations or protect our legitimate business interests.
6. Confidentiality
Information shared with us during consultancy engagements, compliance assessments, training or advisory services may contain commercially sensitive or confidential information.
We treat such information as confidential and implement reasonable administrative, technical and organisational safeguards designed to prevent unauthorised access, disclosure or misuse.
7. Data Retention
We retain information only for as long as reasonably necessary.
| Information | Typical Retention |
| Website enquiries | 2 years |
| Client records | Contract duration plus 6 years |
| Newsletter subscribers | Until unsubscribed |
| Website analytics | 12 months |
| Financial records | As required by applicable law |
Where information is no longer required, it will be securely deleted or anonymised where reasonably practicable.
8. Data Security
We implement technical and organisational measures designed to protect personal information, including:
- Secure website hosting
- SSL/TLS encryption
- Role-based access controls
- Authentication mechanisms
- Secure cloud infrastructure
- Regular software updates
- Monitoring and logging
- Secure backups where appropriate
Although we take reasonable steps to protect personal information, no internet transmission or electronic storage system can be guaranteed to be completely secure.
9. Your Rights
Depending on your jurisdiction and applicable laws, you may have the right to:
- Access the personal information we hold about you
- Request correction or updating of inaccurate information
- Request deletion of your personal information
- Withdraw consent where processing is based on consent
- Object to or restrict certain processing activities
- Request portability of your personal data
- Lodge a complaint with a relevant data protection authority
Depending on your location, you may also have the right to object to certain processing activities, request restriction of processing, or request a copy of your personal information in a portable format.
To exercise your rights, contact us at: info@complysphereadvisory.com
If you no longer wish to receive marketing communications, you may unsubscribe at any time by emailing: info@complysphereadvisory.com
Subject line: “Unsubscribe”
10. Use of Tools and Assessments
When using our free compliance tools or assessments:
- Information submitted will be used to generate your requested assessment or report.
- Where you provide consent, we may contact you regarding relevant services, regulatory developments or compliance updates.
- Outputs generated by our tools are intended for general informational purposes only.
- They do not constitute legal, regulatory, accounting or professional advice.
Users remain responsible for their own compliance decisions.
11. Intellectual Property
All reports, guides, publications, frameworks, training materials, website content and downloadable resources remain the intellectual property of Comply Sphere Advisory FZCO unless otherwise stated.
Nothing within this Privacy Policy transfers ownership of our intellectual property to users of this website. Unauthorised reproduction, distribution or commercial use of our intellectual property may infringe applicable intellectual property laws.
12. International Data Transfers
As an international consultancy headquartered in the United Arab Emirates, we may process or store personal information in countries outside your country of residence.
Where international transfers occur, we implement appropriate safeguards designed to protect personal information in accordance with applicable data protection laws, including:
- Contractual data protection obligations
- Standard Contractual Clauses (where applicable)
- Secure service provider arrangements
13. Third-Party Websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party sites. We encourage users to review the privacy policies of any external websites they visit.
14. Children’s Privacy
Our services are intended for business and professional audiences and are not directed toward individuals under the age of 18. We do not knowingly collect personal information from children.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. Any updates will be posted on this page with a revised effective date.
Your continued use of our website or services after changes are published constitutes acceptance of the updated Privacy Policy.
16. Contact Us
Comply Sphere Advisory FZCO
Dubai International Free Zone Authority (IFZA)
Dubai, United Arab Emirates
General enquiries: info@complysphereadvisory.com
Privacy enquiries: info@complysphereadvisory.com
Website: https://www.complysphereadvisory.com