Privacy & Data Protection Policy

We process personal data based on the following lawful bases:

• Consent — when you provide explicit consent for specific purposes.
• Contractual Necessity — when processing is required to perform a contract or deliver requested services.
• Legal Obligation — when processing is necessary to comply with applicable laws and regulations.
• Legitimate Interests — when processing is necessary for business operations, provided your rights and freedoms are not overridden.

We may collect the following types of personal data:

• Personal identifiers: name, email address, phone number, Emirates ID or passport details.
• Business-related data: trade licenses, agreements, company documents.
• Financial data: billing details, payment information.
• Website data: cookies, technical identifiers, and browsing information.

Your personal data is collected and processed for the following purposes:

• Providing consultancy, organizational, and administrative services.
• Communicating with clients regarding inquiries, agreements, and updates.
• Coordinating with third-party contractors, experts, and lawyers as part of service delivery.
• Ensuring compliance with legal, tax, and regulatory obligations.
• Improving user experience and website functionality.

As part of our services, we may use automated systems, including artificial intelligence (AI), to analyze information and prepare recommendations.

• AI outputs are for informational purposes only and are not a substitute for professional advice.
• All recommendations require independent assessment by the Client and/or licensed professionals.

We may share your data with trusted third parties strictly on a need-to-know basis, including:

• Licensed lawyers, experts, and contractors engaged to support your case.
• Governmental or regulatory authorities to comply with legal requirements.
• Technology and service providers assisting in secure communication, storage, or analytics.

All third parties are bound by confidentiality and data protection obligations.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Typical retention periods are:

• Up to 7 years for contractual, accounting, and compliance records.
• Until withdrawal of consent for marketing-related communications.
• Shorter retention periods for temporary or technical data (e.g., cookies).

We implement strict technical and organizational measures to safeguard personal data, including encryption, controlled access, and secure storage systems.

However, no system can guarantee 100% security, and Clients are encouraged to use secure communication channels when sharing sensitive data.

Under GDPR and UAE PDPL, you have the following rights:

• Access —  to request a copy of your personal data.
• Rectification — to correct inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”) — to request deletion of your personal data.
• Restriction of Processing —  to limit how we process your data.
• Data Portability — to receive your data in a structured, machine-readable format.
• Objection — to object to certain types of processing.
• Withdraw Consent — to revoke previously given consent at any time.

To exercise these rights, please contact us at asap@introuble.ae or +971585039764.

Our website uses cookies and similar technologies to improve user experience and analyze traffic.

• Types of cookies: functional, analytical, and (if applicable) marketing.
• You may disable cookies through your browser settings; however, this may affect site functionality.

This Policy is governed by the laws of the United Arab Emirates.

Any disputes arising from the processing of personal data shall be subject to the jurisdiction of the courts of Dubai, UAE, unless otherwise agreed in writing.

For any questions regarding this Policy or data protection matters, please contact our Data Protection Officer (DPO):

• InTrouble / Whale Solutions FZCO
• Email: asap@introuble.ae
• Phone: +971585039764
• Website: introuble.ae