Last updated: September 2026

At SETUP IN THE UAE, we are committed to protecting the privacy and personal data of users who visit our website, use our tools, or contact us.

This Privacy Policy explains what personal data we collect through setupintheuae.com, the purposes for which we use it, the legal basis that legitimises its processing, how long we retain it, and the rights users may exercise.

1. Data Controller

The controller responsible for processing personal data collected through this website is:

Company name: RLD Asociados S.A.
Tax ID / VAT No.: [TO COMPLETE]
Registered office: [TO COMPLETE]
Contact email: [TO COMPLETE]
Telephone: [TO COMPLETE, if applicable]

Hereinafter, the “Controller”.

2. What personal data may we collect?

Depending on how the user interacts with the website, we may process the following categories of data:

Identification and contact data

• Full name.
• Email address.
• Telephone number.
• Company or organisation.
• Country of residence.
• Job title or professional activity, where applicable.

Data provided through forms

We may process information voluntarily entered by the user in contact forms, information requests, quotation requests, calculators, or other tools available on the website.

Data related to service requests

When the user requests information related to establishing, setting up, or developing a company in the United Arab Emirates, we may process information relating to:

• Type of company or business activity.
• Estimated number of shareholders or employees.
• Visa requirements.
• Preferred area or jurisdiction.
• Estimated budget.
• Services requested.
• Any other information voluntarily provided by the user.

Technical and browsing data

When the user browses the website, we may receive certain technical data, including:

• IP address.
• Device type.
• Browser used.
• Operating system.
• Pages visited.
• Date and time of access.
• Referring page.
• Interactions carried out within the website.
• Identifiers associated with cookies or similar technologies.

The use of analytics or advertising cookies will be subject to the consent preferences selected by the user.

3. Purposes of processing

Personal data may be used for the following purposes:

Responding to information requests

To manage enquiries submitted through forms, email, or other contact methods available on the website.

Preparing proposals or quotations

To analyse the information provided by the user in order to prepare estimates, commercial proposals, or information relating to the requested services.

Managing requests submitted through the calculator

To process the data entered into the tools or calculators available on the website and provide the user with information relating to costs or services that may apply to their request.

Results obtained through an online calculator are for guidance purposes only unless expressly stated otherwise.

Managing prospective clients

To follow up on requests from individuals interested in the services offered by SETUP IN THE UAE and manage the communications required to respond to those requests.

Provision of services and pre-contractual measures

When the user requests the provision of a service, their data may be used to prepare, manage, and carry out the actions required before entering into a contract or during the contractual relationship.

Commercial communications

To send commercial information about services, updates, or content related to SETUP IN THE UAE only where there is a lawful basis that permits us to do so and, where required, the user has previously given their consent.

The user may request to stop receiving these communications at any time.

Website analysis and improvement

To analyse the operation and use of the website on an aggregated basis in order to understand how users interact with its content and improve the browsing experience.

Analytics tools that require consent will only be activated after the user has granted such consent through the cookie management system.

Advertising campaign measurement

Where the user has given their consent, we may use measurement and advertising technologies to assess the performance of campaigns carried out through platforms such as Google Ads.

This may include measuring visits, conversions, submitted forms, or other relevant actions performed on the website.

Security

To detect, prevent, and manage fraudulent, abusive, or potentially harmful use of the website, as well as to maintain its technical security.

4. Legal basis for processing

Depending on the circumstances, the processing of personal data may be based on:

User consent

When the user:

• Submits certain forms.
• Agrees to receive commercial communications.
• Authorises analytics or advertising cookies.
• Accepts other forms of processing that require prior authorisation.

The user may withdraw their consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

Taking pre-contractual measures or performance of a contract

Where processing is necessary to respond to a request for services, prepare a proposal, arrange a contract, or provide a service contracted by the user.

Legitimate interests

We may process certain data where the Controller has a legitimate interest, for example, to maintain the security of the website, prevent fraud, or properly manage relationships with users and clients, provided that such interests do not override the rights and freedoms of the individuals concerned.

Compliance with legal obligations

Certain data may be retained or processed where necessary to comply with legal, tax, accounting, administrative obligations, or requests from competent authorities.

5. Mandatory data

Fields identified as mandatory in our forms are required in order to process the corresponding request.

If the user does not provide this information, we may be unable to properly respond to their enquiry or request.

The user guarantees that the information provided is true, accurate, and up to date.

6. Data retention

Personal data will only be retained for as long as necessary to fulfil the purpose for which it was collected.

As a general rule:

• Data relating to enquiries or commercial requests may be retained for a maximum of 24 months from the last interaction, unless a contractual relationship begins or another obligation justifies a different retention period.
• Data relating to clients may be retained for the duration of the contractual relationship and subsequently for the periods required by applicable law.
• Data used for commercial communications may be retained until the user withdraws their consent or requests to stop receiving such communications.
• Data associated with cookies and measurement tools will be retained for the periods indicated in the Cookie Policy and in the settings of each provider.

Once these periods have expired, the data may remain duly restricted for the periods required to address potential legal liabilities and will subsequently be deleted.

7. Recipients of the data

Personal data will not be sold to third parties.

It may be accessed by service providers that provide services necessary for the operation of our business, such as:

• Web hosting services.
• Technology providers.
• Email platforms.
• Customer management tools.
• Web analytics services.
• Advertising and measurement services.
• Cloud storage services.
• IT support and maintenance providers.
• Professional advisers where necessary.

These providers will process the data in accordance with the Controller’s instructions when acting as data processors and must implement the appropriate data protection safeguards.

Data may also be disclosed to public authorities, regulatory bodies, courts, or tribunals where there is a legal obligation to do so.

8. International data transfers

Due to the nature of the services offered by SETUP IN THE UAE, certain requests may require the involvement of providers, partners, entities, or professionals located in the United Arab Emirates (UAE).

This may involve an international transfer of certain personal data where necessary to respond to a specific user request or provide the requested services.

Where an international data transfer is subject to the General Data Protection Regulation and the destination country is not covered by an applicable adequacy decision, the Controller will implement the safeguards required by law, such as Standard Contractual Clauses approved by the European Commission or other legally recognised mechanisms, where applicable.

Likewise, certain technology providers used by the website may process information from countries located outside the European Economic Area.

In such cases, the safeguards required under applicable legislation will be implemented.

The user may request additional information about the safeguards applied by contacting the Controller.

9. Analytics and advertising tools

The website may use tools provided by third parties, including:

• Google Analytics 4.
• Google Tag Manager.
• Google Ads.
• Other measurement or advertising tools that may be incorporated in the future.

Google Tag Manager is used to manage certain tags and technologies integrated into the website.

Tools that involve storing or accessing information that is not strictly necessary on the user’s device will be subject to the preferences selected through the cookie banner or cookie settings panel.

More detailed information about these technologies is available in our Cookie Policy.

10. Automated decision-making

As a general rule, no decisions will be made solely by automated means that produce legal effects concerning the user or similarly significantly affect them.

Calculators, estimators, or automated tools available on the website are intended to provide indicative information and do not, in themselves, constitute a final legal or contractual decision.

11. Users’ rights

Users may exercise the rights recognised under applicable data protection legislation.

Right of access

To request information about whether we are processing their personal data and obtain a copy of such data.

Right to rectification

To request the correction of inaccurate, incomplete, or outdated personal data.

Right to erasure

To request the deletion of their data where the requirements established by law are met.

Right to object

To object to the processing of their data in certain circumstances.

Right to restriction of processing

To request that the processing of their data be restricted in the circumstances provided for by law.

Right to data portability

To request certain personal data in a structured, commonly used, and machine-readable format and, where technically feasible, request its transmission to another controller.

Right to withdraw consent

Where processing is based on consent, the user may withdraw their consent at any time.

To exercise any of these rights, the user may contact:

Email: [TO COMPLETE]

The request must clearly indicate which right the user wishes to exercise and allow the identity of the applicant to be verified where necessary.

12. Right to lodge a complaint

If the user considers that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the competent data protection authority.

Where Spanish legislation applies, the user may contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD).

Before lodging a complaint, the user may contact us so that we can attempt to resolve any issue relating to the processing of their personal data.

13. Third-party data

If a user provides personal data relating to another person, they declare that they have sufficient authorisation to do so and that they have informed that person about the processing of their data where legally required.

The user will be responsible for the accuracy and lawfulness of any third-party data they provide.

14. Data security

The Controller will implement reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction.

However, no system connected to the Internet can guarantee absolute security.

15. Minors

The services offered through this website are primarily intended for professionals, business owners, and adults.

We do not knowingly collect information from minors through forms intended for contracting or requesting our services.

If we become aware that data relating to a minor has been provided without the appropriate authorisation, we may proceed to delete it.

16. Cookies

This website uses cookies and similar technologies.

Strictly necessary cookies may be used to ensure the proper functioning of the website.

Analytics, advertising, or third-party cookies that require consent will remain disabled until the user selects their preferences.

Detailed information about the cookies used, their purposes, duration, and providers is available in our Cookie Policy.

17. Changes to this Privacy Policy

The Controller may modify this Privacy Policy where necessary as a result of legislative, regulatory, technological changes, or changes relating to the services provided.

Where material changes are made, the date shown at the beginning of this policy will be updated.

We recommend reviewing this page periodically to remain informed about the current version of the Privacy Policy.

Controller: RLD Asociados S.A.
Website: setupintheuae.com
Privacy contact: [TO COMPLETE]