Last updated: 4 October 2026  |  Effective date: 4 October 2026

1. Introduction

Aurum Consulting Services ("Aurum", "we", "us", or "our") is committed to protecting the privacy and personal data of everyone who visits our website at aurumcsp.com (the "Site") or contacts us through any of our communication channels.

This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, and what rights you have in relation to your data. Please read it carefully. By using our Site or submitting information to us, you acknowledge that you have read and understood this policy.

2. Who We Are

Aurum Consulting Services is a business advisory firm based in Dubai, United Arab Emirates. For any questions about this policy or our data practices, please contact us at:

3. What Data We Collect

We may collect the following categories of personal data:

  • Contact and enquiry data — name, company name, email address, phone number, and the content of your message, submitted via our contact form or directly by email or phone.
  • Usage and analytics data — pages visited, time spent on the Site, referring URLs, device type, browser type, operating system, and approximate geographic location (derived from IP address). This data is collected via Google Analytics 4 (GA4) through Google Tag Manager (GTM) and is processed in an aggregated, pseudonymised form.
  • Cookie data — information stored in cookies on your device. Please see Section 7 (Cookies) for more detail.
  • Partner Network listing data — the details you enter on our directory listing form. See Section 13 (Partner Network Directory) for more detail.
  • Communication records — records of correspondence if you contact us by email, WhatsApp, phone, or social media.

We do not knowingly collect data from individuals under the age of 18, and our Site is not directed at children.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

  • To respond to your enquiries and provide advisory services you have requested.
  • To communicate with you about your matter or follow up on a conversation.
  • To understand how visitors use our Site, improve its content and performance, and measure the effectiveness of our digital presence (analytics).
  • To comply with applicable legal and regulatory obligations.
  • To send you relevant information about our services where you have consented or where we have a legitimate interest to do so.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent — where you have given us specific consent to process your data (e.g. by submitting a contact form or accepting analytics cookies).
  • Contract — where processing is necessary to provide services you have requested or to take steps at your request prior to entering into a contract.
  • Legitimate interests — where processing is necessary for our legitimate business interests (such as improving our Site and responding to enquiries), provided these are not overridden by your rights.
  • Legal obligation — where we are required to process data to comply with applicable law.

6. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share your data with:

  • Google LLC — for website analytics via Google Analytics 4, managed through Google Tag Manager. Google processes data in accordance with Google's own privacy policy and data processing terms. Data may be transferred to and stored in servers outside the UAE. You may opt out of Google Analytics tracking via Google's opt-out browser add-on.
  • Netlify Inc. — our website hosting and form processing provider. Contact form and Partner Network listing submissions are processed through Netlify's servers. Netlify's privacy policy governs their handling of this data.
  • Professional advisors and service providers — where necessary to operate our business, subject to confidentiality obligations.
  • Regulatory authorities — where required by law or in connection with legal proceedings.

Any third parties with whom we share your data are required to take appropriate security measures and to process it only as instructed by us.

7. Cookies

Our Site uses cookies — small text files stored on your device — to help us understand how the Site is used and to improve your experience. We use the following types of cookies:

  • Strictly necessary cookies — essential for the Site to function. These cannot be disabled.
  • Analytics cookies — set by Google Analytics via Google Tag Manager to collect anonymised usage data. These cookies are only set where you have consented.
  • Preference cookies — used to remember your settings and preferences on return visits.

You can control and manage cookies in your browser settings. Disabling analytics cookies will not affect your ability to use our Site but will mean we cannot measure how our content performs.

When you first visit the Site, a banner asks whether you accept analytics cookies. Analytics stays off unless you accept. Your choice is remembered on your device, and you can change it at any time using Cookie Settings in the footer of any page.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Contact enquiry data is generally retained for up to 3 years unless an ongoing business relationship requires longer retention. Analytics data is retained in accordance with Google Analytics' standard retention settings. Partner Network listing data is covered in Section 13.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website is hosted on a secure, encrypted (HTTPS) platform. However, no data transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Some of our service providers (including Google and Netlify) are based outside the United Arab Emirates. Where personal data is transferred internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection requirements.

11. Your Rights

Depending on the laws applicable to you, you may have the following rights in relation to your personal data:

  • The right to access the personal data we hold about you.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request deletion of your data, subject to certain conditions.
  • The right to withdraw consent at any time, where processing is based on consent.
  • The right to object to or restrict certain processing of your data.
  • The right to data portability in certain circumstances.

To exercise any of these rights, please contact us at team@aurumcsp.com. We will respond within a reasonable timeframe and in accordance with applicable law.

12. Links to Other Websites

Our Site may contain links to third-party websites, including our social media profiles on LinkedIn, Instagram, and Facebook. These sites have their own privacy policies and we are not responsible for their content or practices. We encourage you to review the privacy policy of any site you visit.

13. Partner Network Directory

If you ask to be listed in the Aurum Partner Network directory, we collect the details you enter on the directory listing form. These include your name, business name, country, city, email address, phone number, website and other links, a description of what you offer, your availability and experience, any registration or licence number you choose to give, and your confirmations. We use these details to prepare your listing, to contact you about it and to keep the directory accurate.

  • What the directory shows. Your listing shows your name, category, what you offer and your country, together with the contact details you choose to display. Anyone who visits the directory can see it. You can ask us to change or remove your listing at any time.
  • Suggesting your listing to our clients. If you tick the optional box, we may suggest your listing to Aurum clients who ask for help with what you offer. You can withdraw this permission at any time.
  • Where your details are held. Netlify, a provider based in the United States, hosts the form and stores submissions for us. Your details may therefore be processed outside the country where you live.
  • How long we keep it. We keep your details while your listing is live. If you ask us to remove your listing, or if we do not publish it, we delete your details within 12 months unless the law requires us to keep them for longer.
  • Your rights. You can ask to see, correct or delete your details, or withdraw a permission you gave, by emailing team@aurumcsp.com. Withdrawing a permission does not affect what we did with your details before you withdrew it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Your continued use of our Site after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: