Policies

Privacy Policy

Last updated: 5 August 2026

1. Introduction

Welcome to the privacy policy of Consura Management Consultancies L.L.C S.O.C ("Consura", "we", "us" or "our"). Consura is a management consultancy licensed by the Dubai Department of Economy & Tourism (Licence No. 1537756). As the Controller of the personal data we collect through this website, we are committed to complying with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). The PDPL is overseen by the UAE Data Office established under Federal Decree-Law No. 44 of 2021.

This Privacy Policy explains how we collect, use, disclose and safeguard your personal data in accordance with the PDPL.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data we process when you interact with our website, submit enquiries, request consultancy services, or otherwise engage with us. It covers personal data collected directly from you and through automated processes such as cookies and analytics, and explains our commitment to protecting your privacy and maintaining transparency in our data-handling practices.

3. Data We May Collect

3.1 Contact Data

• Name
• Email address
• Telephone number
• Company name (if applicable)
• The contents of your communications with us (e.g., messages submitted via our contact channels)

3.2 Usage and Technical Data

• IP address
• Device and browser details
• Pages viewed, links clicked, and interactions with our website
• Data collected via cookies, including analytics data

3.3 Business Correspondence

• Emails exchanged with us
• Files shared or transmitted via cloud services (e.g., Microsoft 365, Google Workspace)

4. Purpose of Processing

We process your personal data lawfully and transparently for the following purposes:

• Responding to enquiries: to provide consultancy services or respond to your queries.
• Website operations: to monitor and optimise website performance through analytics, including aggregating usage statistics.
• Regulatory compliance: to meet legal and regulatory obligations under UAE law.
• Security and fraud prevention: to safeguard our digital platforms and services against unauthorised access or malicious activity.

5. Legal Basis for Processing

We rely on the following lawful bases under the PDPL:

• Consent: for specific processes such as subscribing to communications or accepting cookies.
• PDPL Article 4 exemptions: where processing is necessary to perform a contract to which you, as the data subject, are a party; where processing is required to comply with legal obligations or public interest mandates; or to safeguard the vital interests of the data subject.

All processing aligns with the PDPL principles of fairness, transparency, purpose limitation, minimisation, accuracy, security and storage limitation.

6. Your Rights as a Data Subject

Under the PDPL, you have the following rights concerning your personal data:

• Right to information: receive clear details about how your personal data is used.
• Right to portability: request the transfer of personal data to another entity, where technologically feasible.
• Right to correction and erasure: request corrections or deletion of inaccurate or unnecessary data.
• Right to restriction: request restricted processing in specific circumstances.
• Right to objection: object to the processing of personal data for direct marketing or automated decision-making (subject to safeguards).

To exercise your rights: email enquiry@consura-management.ae with the subject line "Data Request". We will respond within 30 days, consistent with the obligations and exemptions under the PDPL.

7. Sharing of Personal Data

We only share personal data with third parties when necessary for the following purposes:

• Cloud/email providers: Microsoft 365, Google Workspace.
• Professional advisors and delivery partners: external consultants and service providers engaged in delivering our services (e.g., for conflict checks or compliance).
• IT service providers: for website hosting and analytics.

Processor obligations: we ensure that any third parties processing personal data on our behalf comply with PDPL obligations, including maintaining appropriate safeguards and processing records.

8. International Data Transfers

As a consultancy utilising reputable cloud service providers and an international delivery network, data processed by Consura may be stored in, or accessed from, jurisdictions outside the UAE. We ensure compliance with Article 23 of the PDPL, including:

• Transfers only to jurisdictions deemed to provide adequate levels of data protection by the UAE Data Office;
• Use of legally approved contractual safeguards for transfers to non-adequate jurisdictions; and
• Obtaining explicit consent where other mechanisms are unavailable.

Queries regarding these safeguards can be directed to our DPO.

9. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to comply with legal or regulatory obligations.

Retention schedule examples:

• General enquiries: retained for 12 months unless further interaction occurs.
• Client correspondence and engagement records: retained for 7 years, or longer to comply with professional and regulatory obligations.
• Cookie data: retained as per the expiry of the relevant cookies (e.g., 6 months for analytics cookies).

When personal data is no longer necessary, we securely delete or anonymise it in accordance with the storage limitation principle under the PDPL.

10. Data Security

We implement appropriate technical and organisational measures to ensure a high level of protection for your personal data, including:

• Encryption and pseudonymisation: protecting data when stored or transmitted.
• Incident and breach management: procedures for notifying the UAE Data Office in the event of data breaches within 72 hours, consistent with the PDPL.
• Regular security assessments: periodic reviews to ensure compliance with the latest standards.

11. Cookies and Analytics

Our website may use cookies to deliver an optimised user experience, including analytics tools that track aggregated, pseudonymised data regarding site usage:

• Necessary cookies: essential for website functionality.
• Non-essential cookies: used for tracking and analytics (user consent required).

Cookie preferences and management: you may manage or disable cookies through your browser settings.

12. Updates to This Policy

This Privacy Policy was last updated on 5 August 2026. We reserve the right to amend this policy to align with changes in the PDPL or our internal practices. Updates will be reflected here and, where significant changes occur, we will notify you via appropriate channels.

13. Contact Details

Policies

Anti-Money Laundering, Counter-Terrorism Financing, and Sanctions Compliance Statement

Last updated: 5 August 2026

Consura Management Consultancies L.L.C S.O.C ("Consura") is committed to achieving and maintaining full compliance with the UAE's Anti-Money Laundering (AML), Combatting the Financing of Terrorism (CFT), and Sanctions regime. This statement outlines our obligations, commitments and the measures we employ to ensure consistency with prevailing legal frameworks.

Where Consura's activities fall within the scope of a Designated Non-Financial Business or Profession (DNFBP) — including the facilitation of company formation and corporate services — we adhere to the applicable registration, supervision and reporting requirements under UAE law.

1. Legal Framework

Consura's compliance framework is guided by the following UAE laws and regulations:

• Federal Decree-Law No. (20) of 2018 on Anti-Money Laundering, Combatting the Financing of Terrorism, and Financing of Illegal Organisations;
• Cabinet Decision No. (10) of 2019, Implementing Regulations to the Decree-Law;
• Cabinet Decision No. (74) of 2020 concerning UN Security Council Sanctions and Targeted Financial Sanctions (TFS); and
• Cabinet Decision No. (109) of 2023 on Regulating the Beneficial Owner Procedures.

We further adhere to regulatory guidance provided by the UAE Financial Intelligence Unit (FIU) and the UAE Executive Office for Control and Non-Proliferation.

2. Policy Commitment

We uphold a strict zero-tolerance policy against money laundering, terrorism financing and sanctions violations. Consura ensures compliance through the following measures:

• Risk-based approach: a risk-based compliance programme is employed, consistent with Cabinet Decision No. (10) of 2019, to identify, assess and mitigate AML/CFT risks.
• Customer Due Diligence (CDD): comprehensive CDD and Enhanced Due Diligence (EDD) measures are implemented where applicable, pursuant to Articles 6–10 of Federal Decree-Law No. 20 of 2018.
• Screening: clients, beneficial owners and transactions are screened against UAE Local Terrorist Lists and the UN Security Council Consolidated List using automated compliance tools.
• Suspicious Transaction Reporting (STR): procedures are in place to promptly file Suspicious Transaction Reports (STRs) or Suspicious Activity Reports (SARs) to the UAE FIU via the goAML platform.
• Targeted Financial Sanctions: obligations under Cabinet Decision No. (74) of 2020 are implemented to ensure prompt freezing of assets or restriction of transactions involving designated persons or entities, as legally required.
• Record retention: identification and transactional records are retained for a minimum of five years in accordance with Article 16 of Federal Decree-Law No. 20 of 2018.
• Awareness and training: AML/CFT training is provided at least annually, with updates in response to significant regulatory changes or identified risks.
• Independent reviews: regular compliance reviews are carried out to evaluate the effectiveness of our AML/CFT programme.

3. Governance and Responsibility

Money Laundering Reporting Officer (MLRO)

The MLRO oversees the implementation, review and ongoing management of Consura's AML/CFT and Sanctions programme, and is directly responsible for:

• Managing CDD/EDD processes;
• Filing STRs/SARs via the goAML platform; and
• Ensuring organisation-wide compliance with relevant laws.

Employee Responsibilities

All employees, including part-time, contracted or outsourced staff, must:

• Comply with the internal AML, CFT and Sanctions Policy;
• Actively participate in training initiatives; and
• Escalate any suspicious transactions or irregularities promptly to the MLRO.

Non-compliance may result in disciplinary action, regulatory fines or, where applicable, criminal liability under UAE law.

4. Client Due Diligence and Monitoring

4.1 Verification Obligations

Prior to providing services, Consura must:

• Verify the identity of the client and ultimate beneficial owner;
• Establish and document the purpose of the engagement; and
• Assess the source of funds and wealth of the client, where applicable.

Enhanced Due Diligence (EDD) is undertaken for high-risk clients, including those with links to high-risk jurisdictions, politically exposed persons (PEPs), or complex ownership structures.

4.2 Suspicious Transaction Identification

Any suspicious transactions, or attempts to circumvent compliance requirements, are promptly reported to the UAE FIU via the goAML platform.

4.3 Payment Restrictions

Consura does not accept:

• Cash payments;
• Cryptocurrency payments; or
• Client funds deposited in trust or escrow accounts.

5. Sanctions Compliance

Consura is committed to full compliance with UAE, UN Security Council and, where relevant, OFAC/EU sanctions regimes.

5.1 Screening

We perform sanctions screening using automated compliance tools updated in coordination with the UAE Executive Office for Control and Non-Proliferation.

5.2 Freezing and Reporting

• Assets or transactions involving designated persons or entities are promptly frozen; and
• Relevant matters are reported immediately to the UAE authorities.

5.3 Operational Restrictions

Consura will not provide services to individuals, entities or jurisdictions where sanctions compliance is at risk.

6. Training and Awareness

Consura provides AML/CFT and sanctions compliance training to all employees on at least an annual basis. Training content includes:

• Identification of suspicious transaction/activity red flags;
• Awareness of money laundering and terrorism financing typologies; and
• Compliance procedures for CDD/EDD and STR filing.

7. Independent Reviews and Monitoring

To ensure systemic compliance, Consura undertakes the following measures:

• Periodic reviews to evaluate internal adherence to compliance obligations; and
• Ongoing monitoring and gap reviews of existing processes.

8. Contact and Enquiries

9. Legal Notice

This web statement is a summary of Consura's AML, CFT and Sanctions compliance obligations under UAE Federal Decree-Law No. 20 of 2018, Cabinet Decision No. 10 of 2019, Cabinet Decision No. 74 of 2020 and Cabinet Decision No. (109) of 2023. It is intended for transparency purposes only and does not constitute advice or a substitute for the more comprehensive internal AML/CFT and Sanctions Policy.

10. Updates to This Statement

This statement was last updated on 5 August 2026. We reserve the right to amend it to align with changes in applicable law or our internal practices. Updates will be reflected here and, where significant changes occur, we will notify you via appropriate channels.

Policies

Accessibility Statement

Last updated: 5 August 2026

At Consura, we are dedicated to ensuring accessibility for all individuals, including those with disabilities. We are constantly working to improve the accessibility of our website and digital communications in order to provide a seamless experience for everyone.

At Consura Management Consultancies L.L.C S.O.C, we are committed to making our website accessible to all, including individuals with disabilities.

What web accessibility is

Web accessibility ensures that people with disabilities can perceive, understand, navigate and interact with the web, and that they can contribute to the web. It encompasses all disabilities that affect access to the web, including visual, auditory, physical, speech, cognitive and neurological disabilities.

Accessibility adjustments on this site

Our website has been designed in accordance with WCAG 2.1 guidelines, and we aim to achieve a level of AA accessibility. Our efforts include:

• Setting the language of the site;
• Establishing clear heading structures on all pages;
• Providing alternative text for images;
• Implementing colour combinations that meet contrast requirements;
• Minimising the use of motion, and respecting reduced-motion preferences; and
• Ensuring visible keyboard focus and full keyboard navigation.

Requests, issues, and suggestions

If you encounter any accessibility issues on our website or require further assistance, please contact our accessibility coordinator:

Policies

Disclaimer

Last updated: 5 August 2026

The information provided on this website is for general informational purposes only. While we strive to ensure that the content is accurate and up to date, Consura Management Consultancies L.L.C S.O.C makes no warranties or representations of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability of the website or the information, products, services or related graphics contained on the website for any purpose.

Any reliance you place on such information is therefore strictly at your own risk.

In no event will Consura Management Consultancies L.L.C S.O.C be liable for any loss or damage, including without limitation indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits, arising out of or in connection with the use of this website.

Through this website, you may be able to link to other websites which are not under the control of Consura Management Consultancies L.L.C S.O.C. We have no control over the nature, content and availability of those sites. The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.

This website and its contents do not constitute legal, tax, financial or other professional advice and should not be relied upon as such. You should obtain appropriate professional advice tailored to your specific circumstances before acting on any information contained on this website.

By using this website, you agree to this disclaimer in full. If you do not agree, please refrain from using the site.