LEGAL

Privacy Policy

Last updated: 23 October 2026

01Who we are

This website is run by Fornax Execution Consulting LLC ("FEC", "we"), a company licensed in Sharjah Media City (Shams), United Arab Emirates, trade licence 2539882.01, registered at Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates.

FEC decides why and how the personal information described here is used. For anything about your information, write to privacy@fornaxec.com.

02The short version

  • We collect what you choose to send us, plus a small amount of technical information.
  • We use it to read and answer your request, to keep the site secure, and, only if you agree, to understand how the site is used.
  • We do not sell your information.
  • We treat every review request as confidential.
  • If you subscribe to FEC Insights, we email you when FEC publishes something new, until you unsubscribe.
  • You can ask to see, correct or delete your information, subject to applicable law.

03What we collect

When you send a review request. The answers you give in the form: what the company is trying to do next, why it matters now, when it needs to happen, where the plan stands, what has already been committed, the company's name, website, ownership and approximate revenue band, your role, your name, your work email, your phone number and the company's industry, if you choose to give them, and, if you choose it, how you are approaching FEC. We also record the date and time, the page you sent it from, and which of our audience pages you came through, if any.

When you email us. Your email address, your message and anything you attach.

Technical information. Like any website, the site cannot reach you without your IP address. To deliver and protect the site, our hosting and security providers receive your IP address. They may retain it for a limited period in service logs in accordance with their documented retention practices and our arrangements with them. FEC does not keep the raw IP address. Where FEC uses it to prevent repeated abuse, it stores only a salted hash. Turnstile checks that a request comes from a person.

FEC's own audience measurement, only if you agree. FEC measures its own audience itself, with no outside provider. If you choose "Accept", your browser stores a random identifier: a string of characters with no name, email or account attached, so we can tell a returning visit from a new one and see which pages people read. This is pseudonymous, not anonymous: the identifier does not say who you are, but it does tell one browser apart from another, so we treat it as personal information. With it we record the pages you visit, how far you read, where your visit came from (for example a search engine or a link), and your country. We read your country from the connection and do not store your IP address. The identifier is read only by us, never shared, used only to understand how the site is used, and expires after 13 months. It does not run unless you accept. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as "Decline".

Google Analytics, only if you agree. The same "Accept" also lets Google Analytics record the pages you visit, how you move through the site, the device and browser you use, and your approximate location, using cookies. It does not run unless you accept.

When you subscribe to FEC Insights. Your name, your email address and, if you give it, your company. We also record when you asked to subscribe and when you confirmed. Only once you confirm are you added.

Our record of the relationship. When you send a request, subscribe or write to us, we keep one record of you and, where relevant, your company: what you sent us, the emails between us, notes from our conversations and meetings, where the conversation stands, and who at FEC looks after it. We may add details you tell us in conversation, or that your company publishes about itself, such as its industry or its markets.

What you read before writing to us. If you chose "Accept" for analytics and later send a request or subscribe, we link the pages you read on the site to your record, so we understand what brought you to us. If you did not accept analytics, there is nothing to link.

When we email you. Emails from FEC contain a small image and tracked links that tell us whether an email was opened and which links were clicked. This applies to newsletters, automatic emails and emails written by a person at FEC. To prevent this, turn off the automatic loading of images in your email app.

Please do not send us information about other people beyond what the request needs, or any special categories of information (such as health information).

04Why we use it, and on what basis

FEC is a UAE company, so UAE law always applies. European law (the EU or UK GDPR) applies only in some cases; see section 9.

What we doWhyUnder UAE lawUnder European law, where it applies
Read and answer your review request, arrange a first conversation, and prepare any agreementTo respond to you, at your requestSteps you asked us to take before entering an agreementSteps you asked us to take before entering a contract
Keep the site and the form secure, and prevent spam and abuseTo protect the site and the people who use itNecessary for security procedures and, where relevant, legal claims or rightsOur legitimate interest in security
Measure FEC's own audience (pseudonymous identifier, country only, no IP address)To understand which parts of the site are read and how people reach a requestYour consent (you can withdraw it at any time)Your consent (you can withdraw it at any time)
Google AnalyticsTo understand in more detail how the site is usedYour consent (you can withdraw it at any time)Your consent (you can withdraw it at any time)
Send FEC Insights to subscribersTo share new work with people who asked for itYour consent (unsubscribe at any time)Your consent (unsubscribe at any time)
Keep a record of the relationshipTo manage our conversations and any work with you or your companyPre-contractual steps, consent, or legal claims, as applicableOur legitimate interest in managing business relationships
Link pages read to your recordTo understand what brought you to usYour consent to analyticsYour consent to analytics
Keep records we are required to keepTo meet our legal obligationsLegal obligationLegal obligation

05Who we share it with

We share information only with the service providers that run the site for us, and only what each needs to do its job:

ProviderWhat it does for usWhere
SupabaseStores review requests and FEC's own audience measurementSingapore
ResendSends our emails, including newsletters, and tells us when they are delivered, opened or clickedUnited States
VercelHosts the websiteGlobal network
Cloudflare (Turnstile)Spam protection on the form, once switched onGlobal network
Google (Google Analytics)Website analytics, only if you agreeUnited States
DIOIKON, our internal operating system (run by Fornax Execution Consulting LLC)Keeps a copy of our records to run FEC's business; deletions in FEC reach it tooUnited States

We may also share information if the law requires it, or to protect our rights or the safety of others. If FEC is ever reorganised or sold, information may pass to the new owner under the same protections. We never sell personal information.

06Information sent outside your country

Some providers store or process information outside the UAE and outside Europe. Where required, we use contractual and other safeguards permitted by applicable data protection law.

07How long we keep it

  • Review requests that do not lead to work: deleted two years after our last contact with you, or sooner if you ask.
  • Review requests that lead to work: kept as part of the client record for as long as the agreement and the law require.
  • Emails: kept as long as needed for the conversation they belong to, then deleted under the same rules.
  • Analytics: kept for 14 months, then deleted. This applies to Google Analytics and to FEC's own analytics.
  • Newsletter subscriptions: until you unsubscribe. Afterwards, we keep only your email address, on a "do not email" list, so you are never emailed by mistake.
  • Relationship records: the same as review requests: deleted two years after our last contact if no work follows, or kept with the client record if it does.
  • Email open and click records: kept with the email they belong to, under the same rules.

08Your rights

Depending on where you live and subject to applicable law, you may have the right to ask us to:

  • tell you what information we hold about you and give you a copy;
  • correct it if it is wrong;
  • delete it;
  • limit how we use it, or object to our using it;
  • give it to you, or another organisation, in a common format;
  • stop counting your visits: withdraw your consent at any time with "Cookie settings" at the foot of any page;
  • unsubscribe from FEC Insights with the link at the foot of every newsletter.

Write to privacy@fornaxec.com. We will respond within the period required by applicable law. If you are not satisfied, you can complain to the data protection authority where you live: in the UAE, the UAE Data Office; in the European Union, your national data protection authority; in the United Kingdom, the Information Commissioner's Office.

09If European or UK law applies to you

FEC offers its services to companies in Europe and the United Kingdom, so the EU or UK GDPR may apply to information about people there. Where it does:

  • the European column in section 4 sets out our legal basis;
  • where we rely on our legitimate interests, you can object at any time, and we will stop unless we have a compelling reason the law accepts;
  • the questions marked required in the review form are needed for us to answer your request; without them we cannot respond to it;
  • we do not make decisions about you by automated means alone.

10Keeping it safe

Information is sent over encrypted connections, stored with providers that protect it, and seen only by those who need it to answer your request. In our own records, IP addresses are kept only in scrambled form.

11Children

This site is for businesses. It is not meant for anyone under 18, and we do not knowingly collect their information.

12Changes

If we change this policy, we will update the date at the top. If a change is significant, we will say so clearly on the site.