• Privacy Policy

  • About Us

    Addison Bradley Emirates (referred to as “AB”, “we”, “us”, or “our”) operates in the United Arab Emirates through its UAE-based business activities and service offerings. Our principal business operations serving UAE customers are conducted from Dubai, United Arab Emirates.

  • The Purpose of This Policy

    This Privacy Policy explains how we collect, process, use, share, and protect your personal data when you engage with our products, services, website, or communication channels in the United Arab Emirates.

    This Policy is designed to help you understand:

    • What personal data we collect,
    • Why we collect it,
    • How we process and safeguard it, and
    • What rights you have under UAE Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (UAE PDPL).

    We also explain the territories where your data may be stored or processed. Depending on the service providers we work with, your data may be stored or processed within the UAE or internationally (such as the UK, EU, or other approved jurisdictions).

  • What is Personal Data

    Under the UAE PDPL, personal data refers to any information relating to an identified or identifiable natural person.

    Examples include:

    • Name, nationality, identification numbers
    • Email address, phone number, residential address
    • Date of birth, gender
    • Financial information
    • Online identifiers (IP address, device data)

    Special categories of personal data may include:

    • Health information
    • Biometric data
    • Racial or ethnic origin
    • Religious or philosophical beliefs
    • Criminal conviction data
    • Sensitive financial information
    • Children’s personal data

    We treat all special category data with the highest level of protection required under UAE PDPL.

  • Personal Data We Collect

    We collect personal data when necessary to:

    • Provide, arrange, or administer our services or business contracts
    • Respond to enquiries about our services
    • Carry out onboarding, risk assessment, and administrative processes
    • Meet regulatory, compliance, and due diligence standards
    • Fulfil marketing or communication requests
    • Handle complaints or provide support

    You may provide data through:

    • Online forms
    • Email or phone communication
    • Website interactions
    • In-person meetings
    • Documentation submissions
    • Cookies and online tracking technologies
    • Forms completed together with our team members

    We may also collect personal data of third parties (e.g., employees, partners, dependents). When doing so, you must ensure you have the authority to share such data with us.

    We share personal data internally within our organisation and, where required, with authorised third parties such as:

    • Business partners
    • Insurance providers, intermediaries, underwriters
    • Credit reference agencies
    • Fraud prevention agencies
    • Payment processors and financing providers
    • Risk assessors and compliance partners
    • Claims handling companies
    • IT and systems support providers
    • Regulatory or government authorities in the UAE
    • Any party authorised by you

    We may also collect:

    • IP addresses and browser/device data
    • Cookie data to improve website usability and analytics

    Call recordings or communication logs for quality, training, and security

  • Data Controllers and Data Processors

    Under the UAE PDPL:

    • A Data Controller determines why and how personal data is processed.

    • A Data Processor acts on behalf of the controller and processes data according to instructions.

    AB acts as the Data Controller when you provide your data directly to us.
    Some partners, underwriters, or affiliated firms may act as joint controllers depending on the service relationship.

  • Categories of Data We Process

    We may process:

    • Personal data: name, marital status, identification details, address, contact details, contractual and transactional data

    • Special category data: health information, biometric details (if required), or other sensitive data

    • Criminal conviction data: only when legally required or when necessary for risk assessment or regulatory compliance

    If you do not agree to the collection or processing of critical personal data, we may be unable to provide certain services.

  • Purposes and Legal Bases for Processing

    We process your personal data in accordance with the UAE PDPL under the following legal bases:

    1. Contractual Necessity

    To perform our contract with you, such as:

    • Providing quotations
    • Delivering requested services
    • Assessing or processing claims
    • Managing your account
    • Undertaking administrative actions

    2. Compliance With UAE Laws

    To meet legal obligations including:

    • AML/CFT requirements
    • Regulatory reporting
    • Verification checks
    • Responding to official UAE government requests

    3. Legitimate Interests

    To pursue our business interests, including:

    • Improving services
    • Conducting analytics
    • Risk management
    • Quality assurance
    • Fraud prevention

    4. Consent

    For specific non-essential processing, such as:

    • Direct marketing
    • International transfers outside approved jurisdictions
    • Optional data sharing

    You may withdraw consent at any time.

  • International Transfers

    Your personal data may be processed or stored:

    • Within the UAE, or
    • In approved jurisdictions ensuring adequate data protection, or
    • In other countries where necessary for service delivery.

    When transferring data internationally, we implement protections required by UAE PDPL, such as:

    • Contractual safeguards
    • Encryption

    Approved transfer mechanisms

  • Data Retention

    We retain personal data only for as long as necessary to:

    • Fulfil contractual obligations
    • Comply with legal or regulatory requirements
    • Protect our legitimate business interests
    • Maintain records for audit, compliance, or potential claims 

    In most cases, data is retained for up to 6 years, unless law or service nature requires longer retention (e.g., liability-related cases).

  • Automated Decision-Making and Profiling

    We may use automated tools for:

    • Eligibility assessments
    • Risk evaluation
    • Credit or fraud checks
    • Product recommendations

    You have the right to:

    • Object to automated decision-making

    Request human review

  • Your Rights Under UAE PDPL

    You have the following rights regarding your personal data:

    • Right to be informed
    • Right to access your data
    • Right to request correction
    • Right to request deletion

    • Right to restrict processing
    • Right to data portability
    • Right to object to processing
    • Right to withdraw consent
    • Rights concerning automated decision-making

    We will respond to requests within the timeframe required under UAE law.
     If requests are repetitive or excessive, we may charge a reasonable fee as permitted by UAE PDPL.

    In some cases, we may decline a request where retention is required by:

    • Legal obligations
    • Regulatory authorities
    • Anti-fraud requirements
    • Ongoing investigations

    Public or vital interests

  • Protecting Your Data

    We apply strict technical and organisational measures to ensure:

    • confidentiality
    • integrity
    • availability
    • authenticity

    Security controls include:

    • encryption
    • access controls
    • secure storage
    • data minimisation
    • regular audits
    • staff training

    We will notify you promptly if a data breach occurs that may expose you to serious risk, in accordance with UAE PDPL requirements.

  • Privacy Officer

    For any questions regarding this Policy, or to exercise your rights, please contact:

    Privacy Officer (UAE Operations)
     Email: info@abradley.ae
     (Additional UAE contact information may be provided depending on your service relationship.)

  • Complaints

    If you are unhappy with how your data has been handled, please contact:

    Complaints Officer (UAE Operations)
     Email: info@abradley.ae

    If you believe your rights have been violated, you may also lodge a complaint with the UAE Data Office, the national supervisory authority for data protection.

  • CONTACT US

    We're here to assist you with any questions, enquiries, or concerns you may have.

    Our team is committed to providing prompt and personalised support to address your needs.

  • Email

    You can send us an email at info@abradley.ae.

    We monitor our inbox regularly and will respond promptly.

  • Customer Support

    Our dedicated customer support team is available to help you with any enquiries. You can reach them at +971 2 639 7711 during our business hours.