Legal

Privacy Policy

This policy describes how Basirah collects, uses, stores, and protects personal information when you interact with our website and services. We are committed to handling information responsibly and in line with applicable laws.

Last updated: 18 April 2026

Introduction

Basirah (“we”, “us”, “our”) respects your privacy. This Privacy Policy applies to personal information we process when you visit basirah.com, communicate with us, or otherwise engage with our strategic and advisory services. By using the site or submitting information to us, you acknowledge this policy.

If you do not agree with this policy, please do not use our website or submit personal data to us. We may update this page from time to time; the “Last updated” date above will change when we do.

Who is responsible

Basirah acts as the controller of personal information described in this policy, unless we tell you otherwise in connection with a specific engagement (for example, where another entity is named in a contract).

We operate across multiple jurisdictions, including the United Arab Emirates, the Kingdom of Saudi Arabia, and the United Kingdom. The laws that apply to you may depend on where you live and how you interact with us.

Information we may collect

Depending on how you engage with us, we may process categories such as:

We do not intentionally collect special categories of personal data (such as health or biometric data) through this website. Please do not send us sensitive information unless we explicitly ask for it as part of a defined process.

How we use personal information

We use personal information for purposes including:

We do not sell your personal information. We do not use automated decision-making that produces legal or similarly significant effects solely by automated means in relation to website enquiries.

Lawful grounds

Where data protection law requires a “legal basis”, we rely on one or more of the following, as appropriate: your consent (for example where you tick a consent box or accept non-essential cookies); performance of a contract or steps at your request before a contract; our legitimate interests in operating and improving Basirah, provided those interests are not overridden by your rights; and compliance with legal obligations.

If you are in the European Economic Area, the United Kingdom, or another region with specific requirements, you may have additional rights as described below.

Cookies and similar technologies

Our website may use cookies and similar technologies to remember preferences, maintain security, and understand how visitors use the site. You can control cookies through your browser settings. If we use non-essential cookies that require consent under applicable law, we will obtain consent in line with local requirements.

Who we may share information with

We may share personal information with:

We require processors to handle information only on our instructions and in line with this policy and applicable law.

International transfers

Your information may be processed in the UAE, Saudi Arabia, the United Kingdom, and other countries where we or our providers operate. Those countries may have different data protection rules. Where required, we implement appropriate safeguards (such as standard contractual clauses or other lawful transfer mechanisms) in addition to technical and organisational measures.

How long we keep information

We retain personal information only as long as necessary for the purposes described in this policy, including to meet legal, accounting, or reporting requirements, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data and our relationship with you.

Security measures

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction. No method of transmission over the internet is completely secure; we encourage you to use strong passwords and protect your own devices and accounts.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, to object to certain processing, to data portability, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

Children’s privacy

Our website and services are not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have received such information, please contact us and we will take steps to delete it.

Links and third-party services

Our website may contain links to third-party sites or services. This policy does not apply to those sites. We encourage you to read their privacy notices before providing personal information.

Questions and requests

For privacy-related questions, requests, or complaints, please contact us at [email protected]. You may also reach us via our contact page.