Legal
Privacy Policy
Last updated: 30 September 2026
This policy explains how Rethink Finance ("we", "us") collects and uses personal data when you use this website, our website assistant, or contact us by form, email or WhatsApp. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other laws that apply to us.
Who we are
Rethink Finance is based in Dubai, United Arab Emirates. For any privacy question or request, email admin@rethinkfinance.org.
What we collect
- Contact form: your name, email address, phone number, the service you are interested in and anything you write in your message.
- Newsletter: your email address.
- Website assistant (chat): the questions you type and the answers you receive. If you choose to continue on WhatsApp or by email, we also keep the summary of your chat and the optional name and business name you give us.
- WhatsApp and email: your phone number or email address, your name as shown in your account, and the messages you send us.
- Basic usage statistics: counts of events such as "chat opened" or "form sent", with the page they happened on. These do not include your name, IP address or any identifier, and we do not use cookies for them. If your browser sends a Do Not Track or Global Privacy Control signal, we do not record them at all.
- Security data: our servers briefly use your IP address to prevent abuse (for example, limiting how many messages can be sent per minute). This is held in memory and not stored with your enquiry.
Please don't share sensitive information (such as passport, bank or health details) through the chat or forms.
How the website assistant works
The assistant gives general information about our services and common UAE finance topics. It is not financial, tax or legal advice, and it can make mistakes. When AI answers are switched on, the text of your chat is sent to our AI provider, OpenAI, to generate a reply. OpenAI acts as our service provider. Under its API terms, data sent this way is not used to train its models by default and may be kept for a limited period for abuse monitoring. If AI is switched off, answers come from a fixed set of questions and answers on our own server.
The conversation itself is kept in your browser for the current tab only. We do not store chat transcripts on our server, except the summary you choose to send us.
WhatsApp (Meta)
If you tap a WhatsApp button, WhatsApp opens with a pre-written message. Nothing is sent until you press send. WhatsApp is operated by WhatsApp LLC / Meta Platforms, and your use of it is covered by WhatsApp's own privacy policy. Once you message us, our team can see your phone number, profile name and messages so we can reply.
Why we use your data
- To reply to your enquiry and give you the information or quote you asked for (at your request, and with your consent).
- To send you our newsletter, if you subscribed (with your consent, which you can withdraw at any time).
- To keep the website secure and understand, in aggregate, which parts are useful.
- To meet our legal and regulatory obligations if you become a client.
We do not sell your personal data, and we do not use it for automated decisions about you.
Who we share it with
We only share personal data with service providers who help us run the website and respond to you, such as:
- our website hosting and database provider;
- our email provider, to notify our team about new enquiries;
- OpenAI, for AI chat answers (when switched on);
- WhatsApp / Meta, when you choose to contact us on WhatsApp.
We may also share data where the law requires it. Some of these providers process data outside the UAE. Where that happens, we take the steps the PDPL requires to make sure your data stays protected.
How long we keep it
We keep enquiries for as long as we need to deal with them and for up to 24 months after our last contact, unless you become a client, in which case we keep records for as long as UAE law requires. Newsletter details are kept until you unsubscribe. Usage statistics are kept in aggregate only.
Your rights
Under the PDPL you can ask us to:
- tell you what personal data we hold about you and how we use it, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, or restrict or stop how we use it;
- stop sending you marketing, and withdraw any consent you have given.
Email admin@rethinkfinance.org and we will respond within the time the law allows. If you are not happy with our response, you can complain to the UAE Data Office.
Security
We use encrypted connections, access controls and rate limiting to protect your data. No system is completely secure, so please avoid sending sensitive documents through the website.
Changes
We may update this policy from time to time. The date at the top shows when it last changed.