1. Who we are
This website (riskweise.com) is operated by ESGweise Global L.L.C-FZ, a free-zone company registered in Meydan Free Zone, Dubai, United Arab Emirates ("we", "us", "our"). Riskweise is the brand under which we deliver financial risk advisory services. ESGweise Global L.L.C-FZ is the legal entity and the data controller for the purposes of this policy.
2. What we collect
We collect the following categories of personal data:
- Information you give us directly — when you email us at contact@riskweise.com, click an article or resource subscribe link, or otherwise initiate contact. This typically includes your name, email address, institution, role, and any free-text content you choose to share.
- Information collected automatically — when you visit the site, our hosting provider (Cloudflare) records standard server-log information including IP address, country (derived from IP), browser type, pages visited, and timestamps. We do not run third-party advertising or behavioural-tracking pixels.
- Cookies — we use a single first-party cookie (
rw_country) to remember your country code so the homepage hero strap displays the right regulator-aligned message on subsequent visits. We do not use third-party tracking cookies.
3. How we use it
We use personal data only for these purposes:
- Responding to your enquiry. If you email us, we use your details to reply, evaluate fit, and (if it progresses) discuss a potential engagement.
- Sending notifications you've requested. If you email us asking to be added to the article or resource notification list, we email you when new pieces publish — and only then. No marketing sequences, no newsletter blasts.
- Operating and securing the website. Server-log data is used to detect abuse, debug issues, and understand which content is useful. We do not build behavioural profiles of visitors.
- Legal and regulatory compliance. Where required, we may retain or disclose data to comply with UAE law, supervisory requirements, or legitimate legal process.
We do not sell, rent, trade, or otherwise commercialise your personal data.
4. Legal basis for processing
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we rely on:
- Your consent — when you email us or ask to be added to a notification list.
- Contractual necessity — where data processing is necessary to discuss or deliver an engagement.
- Legitimate interest — for basic site operation, security, and aggregate analytics that don't identify you individually.
- Legal obligation — where the law requires retention or disclosure.
5. Who we share it with
We share personal data only with the following:
- Cloudflare — our hosting and edge-security provider, which receives standard server-log data when you visit the site. Cloudflare is a US-headquartered company; data may be processed in regions outside the UAE.
- Zoho — our email provider. When you email us, your message and metadata are processed through Zoho's email infrastructure.
We do not share personal data with any other third parties, marketers, or analytics platforms. Notably, the Riskweise website does not currently transmit form data to any third-party form-processing service — all enquiries flow directly to our Zoho inbox via standard email.
6. International transfers
Some of our service providers (notably Cloudflare) process data outside the UAE. When this happens, we ensure appropriate contractual safeguards are in place and that the providers maintain security standards commensurate with the data they handle. UAE PDPL permits international data transfers where the receiving jurisdiction provides adequate protection or where appropriate safeguards apply.
7. How long we keep it
- Email enquiries and correspondence: retained for the duration of any active engagement plus 6 years thereafter (to comply with professional record-keeping obligations).
- Notification list emails: retained until you unsubscribe.
- Server logs: retained by Cloudflare per their standard retention policies, typically 30 days for raw logs.
- Cookies: the country cookie expires after 24 hours.
8. Your rights
Under the UAE PDPL, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase data we no longer have a legal basis to hold.
- Restrict processing in certain circumstances.
- Object to specific uses of your data.
- Withdraw consent at any time where consent is the basis for processing.
- Lodge a complaint with the UAE Data Office if you believe your rights have been infringed.
To exercise any of these rights, email privacy@riskweise.com. We will respond within 30 days, and most requests we resolve faster.
9. Security
We take reasonable technical and organisational measures to protect personal data — including TLS encryption for all site traffic, restricted access to email inboxes, edge-level DDoS protection through Cloudflare, and secure storage of any retained engagement records. No system is perfectly secure; we do not promise zero risk, but we treat the risk seriously.
10. Children
The Riskweise website is intended for business audiences — risk and finance professionals at financial institutions. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as our practices evolve or as legal requirements change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through this page; we don't email everyone who has ever contacted us about every minor wording revision.
12. Contact
For any privacy-related question, request, or complaint, contact:
ESGweise Global L.L.C-FZ
Meydan Free Zone, Dubai, United Arab Emirates
Email: privacy@riskweise.com
General contact: contact@riskweise.com