Legal
Privacy Policy
This policy explains what we do with personal information when you use this website or work with us.
Who we are
Stable Rock Partners is a business consultancy working with companies in the United Kingdom. For anything you send us through this website, we are the controller of your personal information. You can reach us at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, or by email at admin@stablerockpartners.net. Registration details for our operating entity are available on request.
Which laws apply
Because our clients are in the United Kingdom and our delivery team sits in Dubai, two regimes apply to us at the same time and we hold ourselves to both.
- In the United Kingdom: the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, which govern cookies and marketing messages.
- In the United Arab Emirates: Federal Decree Law No. 45 of 2021 on the Protection of Personal Data, together with its executive regulations.
Where the two differ, we apply whichever standard gives you more protection.
What we collect
- Enquiry details you type into our contact form: your name, company, role, email address, an indication of turnover and headcount, and the description of your situation.
- Correspondence: emails, meeting notes and documents you choose to share with us during an engagement.
- Technical information created automatically by our hosting provider when a page is served, such as your internet address and browser type, held in short lived server logs for security and reliability.
We do not ask for special category data and we ask you not to send it. We do not run advertising trackers, we do not build profiles, and we do not sell anything about you to anybody.
Why we use it, and on what basis
- To reply to your enquiry and to decide whether we are the right fit. Our basis is legitimate interests, or the steps taken before entering a contract with you.
- To deliver an engagement you have appointed us to do. Our basis is performance of a contract.
- To keep the site available and secure, and to keep records we are required to keep. Our basis is legitimate interests and legal obligation.
We do not add enquirers to a mailing list. If we ever want to send you something you did not ask for, we will ask first and you will be able to stop it at any point.
Who can see your information
Access is limited to the people at Stable Rock Partners who need it for your enquiry or your engagement. We use a small number of service providers who process information on our instructions, such as our website host and our email provider. They are bound by contract, they may only act on our instructions, and they may not use your information for their own purposes. We share information with anybody else only where you ask us to, or where the law requires it.
Transfers outside the United Kingdom
Our delivery team works from the United Arab Emirates, so information you send us is accessed there. Where personal information leaves the United Kingdom, we rely on the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses, and we assess the destination first. Where information moves out of the United Arab Emirates, we apply the transfer conditions set out in Federal Decree Law No. 45 of 2021.
How long we keep it
Enquiries that do not become engagements are deleted after twelve months. Engagement records are kept for seven years after the work ends, which reflects the tax and professional record keeping periods we are subject to. Server logs are held for a short period only, measured in weeks.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it, or ask us to send it to another provider. You can also withdraw any consent you gave us. Email us at admin@stablerockpartners.net and we will respond within one month.
If you are not satisfied with how we have handled a request, you may complain to the Information Commissioner in the United Kingdom at ico.org.uk, or to the UAE Data Office. We would rather you came to us first so we can put it right.
Cookies
This site sets only what is strictly necessary to serve pages and to remember that you have seen our cookie notice. Full detail is on our Cookie Policy page.
Changes to this policy
If we change how we handle personal information, we will update this page and change the review date above. Material changes will be flagged on the site itself.