Crestbridge Strategy — Effective Date: [Date], 2026
Crestbridge Strategy ("Crestbridge Strategy", "we", "us", "our") is a boutique advisory firm based in Dubai, United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit www.crestbridgestrategy.com and its EN / RU / DE / PL language versions (the "Website"), or otherwise contact us through it.
We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL"). Because our website reaches visitors and clients across the GCC, Europe, and beyond, we also apply the core principles of the EU General Data Protection Regulation ("GDPR") where relevant to visitors from the European Economic Area, the UK, or Switzerland.
Crestbridge Strategy is the controller responsible for personal data collected via the Website.
3.1 Information you provide directly. When you submit the Contact page inquiry form, we collect: name, company name, email address, phone number, area of interest (e.g. Strategy & Corporate Finance, Transactions & M&A, Transformation & Restructuring, Fractional CFO, Company Setup, Investment & Market Advisory), and the content of your message. If you subscribe to updates, apply for a role via the Careers page, or otherwise correspond with us by email or phone, we collect the personal data you choose to share in that correspondence.
3.2 Information collected automatically. Like most websites, we (and our hosting and analytics providers) automatically collect limited technical data when you visit, including IP address, browser type and version, device type, pages visited, referring pages, approximate location (derived from IP), and the language version of the site you view. This data is collected via cookies and similar technologies — see our Cookies Policy for full detail and how to manage your preferences.
We do not use personal data submitted through the Website for automated decision-making that produces legal or similarly significant effects, and we do not sell personal data to third parties.
Where GDPR principles apply to you, we rely on: performance of pre-contractual steps at your request (responding to an inquiry you initiate); our legitimate interests in operating and improving the Website and in business development, balanced against your rights; consent, where you have actively opted in (e.g. newsletter or non-essential cookies); and compliance with legal obligations. Under the UAE PDPL, we process data based on your consent when you submit the form, and on our legitimate business interests in providing advisory services.
We do not sell or rent personal data. We may share it with:
Personal data submitted through the Website may be processed by service providers located outside the UAE (e.g. cloud hosting or analytics infrastructure operated elsewhere). Where this occurs, we take reasonable steps to ensure an adequate level of protection, through contractual safeguards or by using providers with recognised security and privacy standards.
We retain inquiry-form data for as long as necessary to respond to your inquiry and, where an advisory relationship develops, for the duration of that relationship plus any period required by UAE record-keeping obligations or professional standards. Where no engagement results, inquiry data is retained for a limited period (typically no longer than [12–24] months) and then deleted or anonymised, unless you ask us to delete it sooner or we are required to keep it longer by law.
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, including access controls and secure hosting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to applicable law, you may have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; request deletion where it's no longer needed; object to or restrict certain processing; withdraw consent at any time (without affecting prior processing); and request a copy of your data in a portable format. Contact us using the details in Section 12 to exercise these rights.
The Website uses cookies and similar technologies for essential functionality, language preference, and analytics — see our Cookies Policy for full detail.
The Website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from individuals under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be highlighted on the Website.
Crestbridge Strategy — [Registered Office Address, Dubai, UAE]
[Privacy Contact Email] · [Phone Number]
