Privacy Policy

1. Who is responsible for your data

Lighthouse Advisory Partners - FZCO, trading as Lighthouse Basira ("we", "us"), is the controller of the personal data described in this policy. We are a free zone company licensed by the Dubai Integrated Economic Zones Authority under commercial licence no. 91125, at IBP-S12-100882, Dubai Silicon Oasis, Dubai, United Arab Emirates.

Data protection enquiries: enquiries@lighthousebasira.com.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing legislation.

2. What this policy covers

This policy covers personal data collected through this website and through correspondence that begins here. Personal data we hold under a signed engagement letter is governed by that engagement letter and by our client confidentiality obligations, which are stricter than this policy.

3. What we collect

Information you give us

If you complete the enquiry form, we collect your name, organisation, role, email address, the market or sector you name, the content of your message, and the fact and time of your consent. If you write to us by email or apply for a role, we collect whatever you choose to send, including a CV.

Information collected automatically

Our web server records the IP address, the page requested, the time of the request, the HTTP status and the browser user-agent string. These logs exist to keep the site available and secure. They are not used to build a profile of you.

What we do not collect

• This website sets no cookies and uses no local storage.
• We run no analytics, no advertising pixels, no session recording and no A/B testing tools.
• We do not buy personal data, and we do not enrich what you send us with third-party datasets.
• We do not knowingly collect data from anyone under 18.

4. Why we hold it, and on what basis

• To answer your enquiry. Basis: your consent, given when you submit the form, and our legitimate interest in responding to business correspondence.
• To assess a job application. Basis: steps taken at your request prior to entering a contract.
• To keep this website available and secure. Basis: our legitimate interest in operating the service and preventing abuse.
• To meet legal obligations. Where an enquiry becomes an engagement, identity, beneficial ownership and source-of-funds records are held to satisfy UAE anti-money-laundering and counter-terrorist-financing requirements. Basis: compliance with a legal obligation.

We do not use anything you send through this website for marketing, and we do not add you to a mailing list.

5. Who else sees it

We do not sell personal data, and we do not share it for anyone else's marketing. Personal data collected through this website is disclosed only to:

• Our hosting provider, which operates the server this website runs on and therefore processes server logs and form submissions in transit.
• Our email provider, which carries correspondence between us.
• Google LLC, in one narrow respect: the typefaces used on this site are served from the Google Fonts network (fonts.googleapis.com and fonts.gstatic.com). Your browser requests those font files directly, which discloses your IP address and user-agent to Google. No cookie is set by that request. If you prefer to avoid it, blocking those two hosts leaves the site fully readable.
• Professional advisers and authorities, where we are required to disclose by law, regulation, or an order of a competent authority.

Anyone processing data on our behalf does so under contract, on our instructions only.

6. Where it is held

Our hosting and email infrastructure may be located outside the United Arab Emirates. Where personal data is transferred outside the UAE, we do so on the bases permitted by Federal Decree-Law No. 45 of 2021 — an adequate jurisdiction, appropriate contractual safeguards, or your explicit consent.

7. How long we keep it

• Enquiries that do not proceed — 12 months from the last message, then deleted.
• Enquiries that become an engagement — for the life of the engagement and then for the period required by UAE law, which for anti-money-laundering records is at least five years after the relationship ends.
• Job applications — 12 months from the decision, unless you ask us to keep them longer for future roles.
• Server logs — 30 days.

8. How it is protected

This website is served over an encrypted connection. Form submissions are delivered to our own server rather than to a third-party form service. Access to enquiry data is limited to those who need it to answer you. We keep no payment details of any kind on this website.

9. Your rights

Under UAE data protection law you may ask us to:

• confirm what personal data we hold about you, and give you a copy;
• correct data that is inaccurate or incomplete;
• delete data where we no longer have a basis to keep it;
• restrict or object to a particular use;
• transfer data you gave us to another controller in a structured, machine-readable form;
• stop processing that relies on your consent, by withdrawing that consent at any time.

Write to enquiries@lighthousebasira.com. We will respond within 30 days. Withdrawing consent does not affect processing carried out before you withdrew it, and does not override a record we are required by law to retain. If you are not satisfied with our response, you may complain to the UAE Data Office.

10. Changes to this policy

This policy was last updated on 18 September 2026. If we change it materially, the revised version will be published on this page with a new date. We do not apply changes retrospectively to data already deleted.