Effective 2 July 2026
This policy explains what personal data CXA Global Consultancy collects through this website, why we collect it, and the rights you have over it. We have written it in plain English because policies are only useful if they are read.
Who we are
CXA Global Consultancy ("CXA Global", "we") is an engineering commissioning and project management consultancy registered in the United Arab Emirates (Trade Licence No. 1626279), with its registered office at OFFICE-M258, P1 / BLOCK R - 01R-SH, Dubai Industrial City, Dubai, UAE, P.O. Box 40419. For anything in this policy, contact [email protected].
What we collect
The only personal data this website collects is what you choose to send us through the contact form: your name, email address, company (optional), the nature of your enquiry, and your message. If you subsequently correspond with us by email or phone, we hold that correspondence as ordinary business records.
Like almost every website, our hosting infrastructure keeps short-lived technical logs (such as IP addresses and browser type) for security and reliability purposes. We do not use these logs to identify or profile visitors.
What we deliberately do not do
This site sets no cookies of its own. We run no analytics, no advertising pixels, no social-media trackers, and no marketing automation. We do not buy, sell, rent, or trade personal data, and we do not send marketing email.
Our content delivery and security provider (Cloudflare) may set a strictly functional cookie used to protect the site from malicious traffic. It is not used for tracking or advertising.
Why we process your data
We process contact-form data for one purpose: to respond to your enquiry and, where it leads somewhere, to take the steps needed to enter into a professional engagement with you. Under the UAE Personal Data Protection Law this processing is grounded in your request and our legitimate business purposes. We may also retain records where UAE law requires us to.
Where your data goes
Contact-form submissions are delivered to our business inbox via a transactional email provider. Our website is hosted on infrastructure located in the European Union, and DNS and security services are provided by Cloudflare. This means your data may be processed outside the UAE; where that happens, we rely on providers with recognised data-protection safeguards and use the data only for the purpose described above.
We share personal data with no one else, unless required by law or a competent authority.
How long we keep it
We keep enquiry correspondence for as long as needed to deal with your enquiry and any professional relationship that follows, and thereafter only as long as UAE record-keeping obligations require. Data that no longer serves either purpose is deleted.
Your rights
Under the UAE Personal Data Protection Law you have the right to know what personal data we hold about you, to receive a copy of it, to have it corrected or deleted, to restrict or object to its processing, and to withdraw consent where processing is based on consent.
To exercise any of these rights, email [email protected] and we will respond within the timeframes the law prescribes. If you are unhappy with our response, you may lodge a complaint with the UAE Data Office, the federal data protection authority.
Security
The site is served exclusively over HTTPS with modern security headers, and access to enquiry correspondence is limited to the people who need it to respond to you. No system is perfectly secure, but we deliberately minimise what we collect so there is little to lose.
Children
This website is a business-to-business site and is not directed at anyone under 18. We do not knowingly collect personal data from minors.
Changes to this policy
If our data practices change — for example, if we add privacy-respecting analytics or a newsletter — we will update this policy and revise the effective date above before the change takes effect.