Privacy Policy

1. Introduction
Our website address is: https://www.iq-leem.com. IQ-LEEM is a consulting firm based in Dubai, United Arab Emirates. In this policy, "we", "us" and "our" refer to IQ-LEEM, the entity responsible for controlling the personal data described herein.

2. Data Collection and Usage

Comments
When visitors interact with our insights or articles by leaving comments, we collect the information provided in the comment form. Additionally, we capture the visitor’s IP address and browser user agent string to facilitate spam detection. If you use Gravatar, an anonymized string (hash) from your email may be shared with their service. Following approval, your profile picture becomes visible to the public within the context of your comment.

Media
Avoid uploading images with embedded location data (EXIF GPS). Visitors have the capability to download and extract location information from images hosted on the site.

Contact Forms
When you submit a consultation request, we collect your name, company, email, phone number, and message. This data is utilized to respond to inquiries, draft proposals, and deliver consulting services. Data is stored within our secure website database and CRM systems.

3. Cookies
• Comment Cookies: If you leave a comment, you may opt to save your details for convenience. These persist for one year.
• Session Cookies: Temporary cookies are used on our login page to check browser compatibility and are removed upon closing the browser.
• Login & Preferences: We set cookies to maintain your login status (2 days, or 2 weeks with "Remember Me") and screen display settings (1 year).
• Article Editing: A 1-day cookie tracks IDs for content publishers.
• Analytics & Marketing: These are deployed only with your explicit consent via our Cookie Settings.

4. Third-Party Integration

Embedded Content
Articles may feature embedded content (videos, images, etc.) from external sites. These websites function as if you visited them directly and may collect data, use cookies, or track your interactions, particularly if you are logged into their platforms.

Analytics
We utilize Google Analytics to monitor site traffic and user behavior. This involves collecting anonymized IP addresses and device details, subject to your acceptance of analytics cookies.

5. Data Sharing
We never sell your personal data. Sharing is limited to:
• Internal service providers (hosting, CRM, accounting, payments)
• Professional advisors (legal, audit, insurance)
• Partner consultants under strict confidentiality agreements
• Legal authorities, where mandated by  law

6. Data Retention
• Comments & Metadata: Retained indefinitely for automated follow-up approval.
• Registered Users: Profile info is stored until deleted by the user or admin.
• Enquiries: Non-client enquiries are kept for 2 years.
• Client Records: Retained for the engagement duration plus 5 years.
• Financial Records: Kept in accordance with UAE tax regulations.

7. Your Rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and GDPR (where applicable), you may have the right to:
• Access and receive copies of your data.
• Rectify inaccurate information.
• Request data deletion.
• Object to or restrict specific processing.
• Data portability.
• Withdraw consent.
• Lodge a complaint with the UAE Data Office or local regulators.

To exercise these rights, contact info@iq-leem.com. We respond to verified requests within 30 days.

8. Data Transfers & Security
We utilize encrypted HTTPS connections, multi-factor authentication, and strict access controls. Visitor comments are processed via automated spam detection. For data processed outside the UAE, we ensure protection through adequacy decisions or specific contractual safeguards.

9. Contact Information
For inquiries regarding this policy, please contact:
IQ-LEEM — Data Protection Representative
Email: info@iq-leem.com
Address: Dubai, United Arab Emirates

10. Additional Disclosures
• Breach Procedures: In the event of a data breach, we will notify affected individuals and the UAE Data Office as required by law.
• Third-Party Data: We may collect professional data from sources like LinkedIn or scheduling platforms.
• Automated Processing: We do not engage in automated decision-making with legal consequences.
• Regulatory Compliance: This policy meets the requirements of the UAE Personal Data Protection Law and relevant international standards.