Privacy Policy

1. Scope & Purpose

This Privacy Policy ("Policy") explains how BM MORRISON PARTNERS DMCC ("BMMP," "we," "our," or "us") collects, uses, discloses, and safeguards Personal Data obtained through https://bmmp.ae/ and related online services (collectively, the "Services"). The Policy reflects UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations.

2. Personal Data We Collect

*Additional legal bases (e.g., contract performance) may apply where relevant.

3. Cookies & Tracking Technologies

We use:

• Google Analytics 4 (GA4) to measure Site traffic and behaviour. GA4 places first-party cookies and collects truncated IP addresses, device IDs, and browser info. Users can opt out via Google's browser add-on or by disabling cookies.
• Google Tag Manager (GTM) to manage analytics and marketing tags. GTM itself does not collect Personal Data but may deploy third-party scripts.

A cookie banner appears on first visit to request consent for non-essential cookies. You can change your preferences at any time via "Cookie Settings".

4. How We Use Personal Data

1. Respond to enquiries submitted through the contact form;
2. Operate, maintain, and improve the Site;
3. Monitor analytics, detect security incidents, and prevent fraud;
4. Send occasional service-related announcements or marketing emails (opt-in only);
5. Comply with legal obligations.

5. Disclosure of Personal Data

We share Personal Data only with:

• Service providers (hosting, analytics, email) bound by confidentiality;
• Government authorities when required to comply with UAE law;
• Potential acquirers in connection with a merger or reorganisation (subject to confidentiality).

We do not sell Personal Data.

6. International Transfers

Personal Data may be processed outside the UAE (e.g., on servers in the EU or US). Where required, we rely on adequacy decisions, contractual clauses, or other lawful transfer mechanisms recognised under PDPL Art. 23.

7. Data-Subject Rights

Under the PDPL you have the right to access, rectify, erase, restrict, or object to processing of your Personal Data, and to withdraw consent at any time (without affecting prior processing). Submit requests via the contact details below; we respond within 30 days.

8. Data Retention

• Contact-form records: 24 months after last interaction;
• Analytics data: 14 months (GA4 default), after which it is deleted or anonymised;
• Legal/backup copies: up to 7 years where mandated by UAE commercial regulations.

9. Security

We implement appropriate technical and organisational measures, including TLS 1.2+ encryption, role-based access controls, and regular vulnerability scanning, to protect Personal Data against loss, misuse, or unauthorised access.

10. Children

The Site is not directed to children under 13 years. We do not knowingly collect data from children. If you believe a child has provided data, please contact us for deletion.

11. Third-Party Sites & Social Media

Our Site may link to external sites or social-media platforms that operate independently. Their privacy practices are governed by their own policies.

12. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on the Site or notified by email where practicable. The "Last updated" date indicates the latest revision.

13. Contact

Data Protection Officer
BM MORRISON PARTNERS DMCC
Office 3610, Platinum Tower, Cluster I
Jumeirah Lake Towers, P.O. Box 337674
Dubai, United Arab Emirates
Email: info@bmmp.ae

*These documents are templates and should be reviewed by UAE counsel to ensure full compliance with PDPL, DMCC regulations, and any sector-specific requirements before publication.*