Element MEA Privacy Policy
Effective date: 23 August 2025
This Privacy Policy explains how element (“element,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you visit elementmea.com (the “Site”), use our forms, subscribe to our communications, engage with our content, or interact with us in any other way described below.
By using the Site, you acknowledge that you have read this Policy. If you do not agree, please discontinue use of the Site.
1) Who we are & scope
This Policy applies to the Site operated for the Middle East & Africa region and to related online touchpoints where this Policy is linked. It covers personal data we process in connection with:
-
Website browsing and analytics
-
Contact/lead forms, consultations, surveys, and downloads
-
Newsletter subscriptions and marketing communications
-
Recruitment and talent submissions
-
Client, vendor, and partner interactions initiated via the Site
Contact for privacy matters:
Email: info@elementmea.com
Postal: ELEMENT MEA HUMAN RESOURCES CONSULTANCIES L.L.C
2) What data we collect
a) Data you provide directly
-
Contact details (name, email, phone, company, role)
-
Inquiry content (messages, meeting preferences, project details)
-
Newsletter/marketing preferences
-
Recruitment information (CVs, portfolios, work history, professional profiles, compensation expectations, availability)
-
Event or survey responses
b) Data we collect automatically
-
Device and usage data: IP address, browser type, operating system, language, referring URLs, pages viewed, time stamps, and interactions with Site elements
-
Cookies and similar technologies: identifiers that help us remember preferences, improve performance, and measure engagement (see Section 7)
c) Data from third parties
-
Lead-gen and marketing platforms (e.g., form connectors, email tools)
-
Analytics/providers (e.g., aggregated insights)
-
Public sources (e.g., LinkedIn, company websites) when relevant to B2B outreach or recruitment
d) Special categories
We do not intentionally seek sensitive personal data via the Site. If you choose to submit such information (e.g., in a CV), you consent to our processing it for recruitment/assessment purposes.
3) Why we process your data (lawful bases)
We process personal data under applicable laws (including UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection “PDPL,” and, when applicable, GDPR-style principles) based on:
-
Consent (e.g., newsletter subscriptions, certain cookies/marketing)
-
Contract (responding to your requests or preparing to enter into an engagement)
-
Legitimate interests (running and improving the Site, preventing misuse, B2B marketing relevant to your role, enhancing security)
-
Legal obligations (record-keeping, compliance with lawful requests)
4) How we use your data
-
Provide and improve the Site (troubleshoot, analyze performance, personalize content)
-
Respond to inquiries and schedule consultations
-
Send newsletters and thought leadership you opted into (with an easy opt-out)
-
Recruitment: evaluate applications, communicate about opportunities, maintain a talent pipeline
-
Marketing and analytics: measure campaign impact, refine our content strategy
-
Security and compliance: detect, investigate, and prevent fraud or misuse; comply with laws
We do not sell your personal data.
5) How we share information
We may share personal data with:
-
Service providers/Processors under contract (hosting, analytics, email/SMS tools, applicant tracking, form and file tools, website platforms) who must protect your data and act on our instructions
-
Professional advisors (legal, compliance, auditors)
-
Corporate transactions (merger, acquisition, restructuring—your data may transfer as part of the transaction)
-
Authorities where required by law or to protect rights, safety, or security
6) International data transfers
Your personal data may be transferred to and processed in countries outside your location, including outside the UAE. Where required, we implement appropriate safeguards (e.g., contractual clauses, risk assessments, and security controls) to protect your data consistent with applicable law.
7) Cookies & similar technologies
We use cookies, pixels, tags, and local storage to:
-
Operate the Site (essential/functional cookies)
-
Improve performance and understand usage (analytics cookies)
-
Support marketing and measure campaign effectiveness (where permitted)
You can manage cookies through your browser settings and, where available, through our on-site cookie controls. Disabling some cookies may impact Site functionality.
Typical categories we may use:
-
Strictly necessary (security, load balancing, session management)
-
Performance/analytics (page views, time on page, click patterns)
-
Functional (remembering preferences)
-
Marketing (measuring conversions and campaign reach, where permitted)
8) Retention
We keep personal data only as long as needed for the purposes set out in this Policy (e.g., while your subscription is active, while handling your inquiry or recruitment process), and for longer where required by law, contract, or to establish, exercise, or defend legal claims. When no longer needed, data is securely deleted or anonymized.
9) Security
We use technical and organizational measures appropriate to the risk (access controls, encryption in transit where applicable, least-privilege practices, vendor due diligence). No system is 100% secure; if we identify a breach affecting your data, we will act in line with applicable legal requirements.
10) Your rights
Subject to applicable law (e.g., UAE PDPL and, where applicable, GDPR-style frameworks), you may have the right to:
-
Access your personal data
-
Correct inaccurate or incomplete data
-
Delete your data (erasure)
-
Restrict or object to certain processing
-
Data portability (receive data in a portable format)
-
Withdraw consent where processing is based on consent (without affecting prior lawful processing)
-
Complain to a competent supervisory authority
To exercise your rights, contact privacy@elementmea.com. We may need to verify your identity and ask for clarifications to process your request. We will respond within the timelines required by law.
11) Marketing communications
If you subscribe to our newsletters or thought leadership, you can unsubscribe at any time via the link in the email or by contacting us. We may still send you non-marketing messages (e.g., about a request you submitted).
12) Recruitment
If you apply for a role or submit your CV through the Site or by email:
-
We will process your information to evaluate your fit for current or future roles
-
We may retain your profile for a reasonable period to consider you for future opportunities (unless you ask us to delete it)
-
We may share your information with internal stakeholders and vetted processors supporting our recruitment activities
13) Children’s data
The Site is not intended for children, and we do not knowingly collect personal data from individuals under the age of 18. If you believe a child has provided us personal data, please contact us to request deletion.
14) Third-party links
The Site may contain links to third-party websites, apps, or services. We are not responsible for their privacy practices. We encourage you to review their policies before providing personal data.
15) Changes to this Policy
We may update this Policy from time to time. The “Effective date” reflects the latest version. Material changes will be highlighted on the Site or communicated through other appropriate channels.
16) How to contact us
For questions or requests related to this Policy, your personal data, or our privacy practices, please contact:
privacy@elementmea.com
[Your legal entity & registered address here]
[Add a phone number if you want one published]
17) Regional supplements (if applicable)
Depending on where you live or engage with us, the following may also apply. If in doubt, contact us.
a) UAE Mainland (PDPL)
We process personal data per UAE PDPL principles (lawfulness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, accountability). You can contact us to exercise PDPL rights. If unresolved, you may contact the UAE Data Office.
b) DIFC / ADGM
Where processing falls under DIFC or ADGM regimes, we act in accordance with those frameworks (including transparency notices, rights, and transfer safeguards). You may contact the DIFC Commissioner of Data Protection or ADGM Office of Data Protection, as applicable.
c) EEA/UK (if applicable)
Where GDPR/UK GDPR applies, our lawful bases include consent, contract, legitimate interests, and legal obligations. Where we transfer data outside the EEA/UK, we rely on appropriate safeguards (e.g., standard contractual clauses plus supplementary measures where required).
