This is a comprehensive Privacy Policy drafted for a business operating in the MENA region with a global reach.
Disclaimer: This document is a template intended for informational purposes only. It does not constitute legal advice. You must consult with a legal professional to ensure this policy fully complies with all applicable laws and regulations specific to your business operations in the MENA region (e.g., UAE PDPL, KSA PDPL) and internationally (e.g., GDPR).
🔒 Privacy Policy for MENA to GLOBAL
Effective Date: January 1, 2025
Website: menatoglobal.com
At MENA to GLOBAL (“we,” “us,” or “our”), we are dedicated to fostering successful connections between the MENA region and the world, specializing in cross-border advisory, executive search, and market entry services. We are committed to protecting the privacy and security of the personal data of our website visitors, clients, candidates, and business partners.
Operating globally from our base in the Middle East, we adhere to the principles of relevant data protection laws in the MENA region (including the UAE Federal Personal Data Protection Law (PDPL) and the Saudi Arabia Personal Data Protection Law (PDPL)) and international frameworks, notably the European Union’s General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, process, and protect your Personal Data when you interact with us through our website and services.
1. Personal Data We Collect
We collect various types of information for different purposes to provide and improve our services to you.
| Category of Data | Examples of Data Collected | Purpose of Collection |
| Identity/Contact Data | Name, email address, phone number, company name, job title, and physical address. | To respond to inquiries, manage client relationships, and fulfill contracts for services. |
| Professional/Candidate Data | CV/Resume, employment history, qualifications, professional references, and salary expectations. | For executive search, recruitment, and professional advisory services. |
| Technical/Usage Data | IP address, browser type and version, time zone setting, location data, operating system, and data about how you use our website (e.g., pages visited). | To ensure network and information security, analyze website traffic, and improve user experience. |
| Marketing Data | Your preferences in receiving marketing from us and your communication preferences. | To send relevant updates, newsletters, and promotional materials (where consent is given). |
2. Legal Basis and How We Use Your Data
We will only use your Personal Data when we have a valid lawful basis for doing so. The primary purposes and legal bases for processing your data are:
| Purpose of Processing | Legal Basis |
| To Provide Services | Necessary for the performance of a contract with you (e.g., executive search, market entry). |
| To Respond to Inquiries | Our legitimate interests (to communicate with potential clients and grow our business). |
| For Compliance | Necessary for compliance with a legal obligation (e.g., tax, employment, or financial laws). |
| For Marketing | Your consent (when required by law) or our legitimate interests (for existing clients). |
| To Improve Our Website | Our legitimate interests (to analyze usage data and optimize service delivery). |
3. Disclosure and Sharing of Your Personal Data
We may share your Personal Data with the following parties, strictly on a “need-to-know” basis and under robust data protection agreements:
- Clients and Business Partners: When performing executive search or market entry services, we share relevant professional data (like CVs) with specific, pre-approved clients or co-advisors (e.g., legal or tax partners) with your explicit consent or where necessary for the contract.
- Third-Party Service Providers: We use external providers for IT hosting, data storage, website analytics, and email distribution. These providers are bound by strict contractual obligations to protect your data.
- Legal & Regulatory Authorities: We will disclose Personal Data where required by law, court order, or governmental regulation (including in the UAE or KSA).
- Business Transfers: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred to the new owners.
4. International Data Transfers
As an entity facilitating cross-border business (“MENA to GLOBAL”), we routinely transfer data internationally, including from the MENA region to North America, Europe, and Asia, and vice versa.
- When transferring Personal Data from jurisdictions with strict transfer rules (like the EU, UAE, or KSA) to countries not deemed to offer an adequate level of protection, we implement necessary safeguards, such as Standard Contractual Clauses (SCCs), or rely on specific legal exemptions (e.g., your explicit consent or the necessity for performance of a contract).
5. Data Security and Retention
- Security: We have implemented appropriate technical and organizational measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorized way, including encryption, access controls, and data minimization techniques.
- Retention: We will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For candidates, data is retained only as long as relevant to placement services, after which it is anonymized or securely deleted, unless you explicitly request to remain in our talent pool.
6. Your Data Protection Rights
Depending on your location (e.g., if you are in the EU/EEA, UK, or a jurisdiction with similar data laws like the UAE), you may have the following rights regarding your Personal Data:
- Right of Access: The right to request copies of your Personal Data.
- Right to Rectification: The right to request that we correct any information you believe is inaccurate.
- Right to Erasure (The ‘Right to be Forgotten’): The right to request that we erase your Personal Data, under certain conditions.
- Right to Restrict Processing: The right to request that we restrict the processing of your Personal Data, under certain conditions.
- Right to Object to Processing: The right to object to our processing of your Personal Data, under certain conditions (e.g., for direct marketing).
- Right to Data Portability: The right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
To exercise any of these rights, please contact us using the details provided below.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top.
8. Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us:
- Website: menatoglobal.com
- Email: hello@prtosky.com (This email is managed by the PR to SKY team on behalf of MENA to GLOBAL.)