Who we are

Finchie L.L.C-FZ (“Finchie”, “we”, “us”) is a company licensed in the Meydan Free Zone, Dubai, United Arab Emirates (licence number 2652130.01). Our registered address is Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai.

We are the controller of the personal data described in this policy. If you have any questions about it, email info@finchie.co.

This policy covers finchie.co and any enquiry you send us through it. If you become a client, how we handle data in the work we do for you is covered by your agreement with us.

What we collect

When you get in touch. If you use our contact form or email us, we collect your name, email address, company name (if you give it), which option best describes you, and anything you tell us in your message.

When you browse the site. If you accept analytics cookies, Google Analytics collects information about how you use the site: pages visited, time on page, how you arrived, device and browser type, and approximate location (city level), which is worked out from your IP address. Google doesn’t store your IP address. See our cookie policy for details.

Technical data. Our website host, Framer, processes basic technical data such as your IP address and browser details to deliver the site and keep it secure.

We don’t ask for, and you shouldn’t send us, sensitive personal data such as health information through the site.

How we use it, and why we’re allowed to

• To reply to your enquiry. Our legal basis is our legitimate interest in responding to people who contact us. Where UAE law applies, it is your consent, which you give by choosing to contact us.
• To talk to you about working together, where you ask us about becoming a client. Our legal basis is taking steps at your request before entering into a contract with you.
• To understand how the site is used so we can improve it. Our legal basis is your consent, which you give through the cookie banner and can withdraw at any time.
• To keep the site secure and working properly. Our legal basis is our legitimate interest in running a safe website.
• To meet legal obligations, for example keeping business records or responding to lawful requests from authorities.

We don’t sell your personal data, we don’t use it for automated decision making, and we won’t add you to a marketing list unless you ask us to.

Who we share it with

We only share your data with service providers who help us run the business, and only as much as they need:

• Framer, which hosts this website and processes contact form submissions.
• Microsoft, which provides our email (Microsoft 365), where enquiries arrive.
• Google, which provides Google Analytics, if you accept analytics cookies.
• Other business tools, such as the scheduling, client management and document storage services we use to manage enquiries and client relationships.
• Professional advisers, such as our accountants and lawyers, where needed.
• Authorities, where the law requires it.

International transfers

We are based in the UAE and our service providers operate in other countries, including the EU, the UK and the US. So your data may be processed outside the country you’re in.

Where the law requires it, we only make these transfers with the safeguards that law requires. For data protected by UK or EU law, that means relying on an adequacy decision, the provider’s certification under a recognised data transfer framework, or contract terms approved for the purpose, such as the European Commission’s standard contractual clauses and the UK International Data Transfer Addendum. For data protected by UAE law, we only transfer it to countries with an adequate level of protection, or where another condition allowed by UAE law applies.

How long we keep it

• Enquiries that don’t lead to working together: up to 24 months from our last contact, then deleted from our email and website form records.
• Enquiries that lead to working together become part of our client records and are kept as long as our agreement and the law require.
• Google Analytics data: 14 months, then deleted automatically.

Your rights

Depending on where you live, you have rights over your personal data. Under the UK GDPR, the EU GDPR and the UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021) these include the right to:

• ask for a copy of the data we hold about you
• ask us to correct it
• ask us to delete it
• ask us to restrict or stop using it
• object to us using it on the basis of legitimate interests
• ask for it in a portable format
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email info@finchie.co. We’ll reply within the time required by the law that applies to you, which under UK and EU law is usually one month. We may need to confirm who you are first.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to your local data protection authority. In the UK that’s the Information Commissioner’s Office (ico.org.uk).

Keeping it safe

We use encrypted devices, multi-factor authentication and access controls to protect the data we hold. No system is completely secure, but we take reasonable steps to protect your data and limit who can see it.

Children

This site is for businesses and professionals. It isn’t aimed at anyone under 18, and we don’t knowingly collect their data.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we’ll make it clear on the site.