This Privacy Notice explains how ForbesBerry AI Research and Consulting Limited collects, uses, shares and protects personal data when you visit our website, complete our forms, use our assessments, contact us, engage with our services, or receive communications from us.

ForbesBerry AI Research and Consulting Limited is the controller of the personal data described in this Privacy Notice.

Controller: ForbesBerry AI Research and Consulting Limited

Website: www.forbesberry.com

Address: Level 3, Dubai AI Campus, DIFC, Dubai, United Arab Emirates

Privacy Contact: [email protected]

In this Privacy Notice, "ForbesBerry", "we", "us" and "our" refer to ForbesBerry AI Research and Consulting Limited. This notice covers how we handle your personal data across all touchpoints, including website visits, form submissions, assessments and tools, direct contact and enquiries, service engagements, and marketing communications.

For any questions about how your personal data is handled, please reach out to our privacy team at [email protected].

We may collect and process the following categories of personal data:

Please do not include confidential information, sensitive personal data, personal data about other people, or commercially sensitive material in assessment responses unless it is necessary and you have authority to provide it.

We collect personal data when you:

We may also receive personal data from referrals, business contacts, professional networks, event organisers, publicly available business sources, client organisations and service providers.

We do not intend to build marketing lists using scraped personal data from websites or digital interfaces. We also do not intend to rely on bought, brokered, stale or indirect marketing lists unless we have verified an appropriate lawful basis, notice trail and opt-out mechanism.

We use personal data for the purposes set out below.

To respond to enquiries — We use your personal data to respond to enquiries, arrange meetings, provide information, understand your requirements and manage follow-up communications.

To provide assessments and recommendations — We use AI maturity assessment responses to evaluate organisational AI maturity, generate indicative results, identify potential gaps and provide relevant recommendations or follow-up.

To provide services — We use personal data to provide consulting, research, advisory, implementation, training, workshop, speaking and related services.

To manage business relationships — We use personal data to manage client, partner, supplier, research, event and professional relationships.

To improve our website and services — We may use website usage data, analytics data, assessment data and feedback to improve our website, content, frameworks, research, services and user experience. Where practical, we use aggregated or anonymised information for research, benchmarking and service improvement.

To send marketing communications — Where permitted, we may send updates about our services, research, events, assessments, insights and advisory offerings. We will only send direct marketing where we have a lawful basis to do so. Where consent is required, we will ask for a clear, specific and affirmative opt-in. You can unsubscribe or opt out at any time.

To manage cookies and digital communications — We use cookies and similar technologies to operate the website, remember preferences, understand site usage, measure engagement and manage digital communications. Non-essential analytics, functional or marketing cookies are used in accordance with your cookie preferences, where consent is required.

To comply with law and protect our rights — We may use personal data to comply with legal, regulatory, accounting and reporting obligations, protect our systems, prevent misuse, enforce our terms, resolve disputes and protect our legal rights.

Depending on the purpose, we may rely on one or more of the following lawful bases:

Consent — where you have given a clear affirmative indication that we may process your personal data for a specific purpose.

Contract — where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you or your organisation.

Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

Legal obligation — where processing is necessary to comply with applicable law or regulatory requirements.

Legal claims — where processing is necessary to establish, exercise or defend legal claims.

Examples of our legitimate interests include responding to business enquiries, managing client and partner relationships, improving our services, protecting our systems, developing business opportunities, conducting appropriate B2B communications, and maintaining accurate records.

If you complete an AI maturity assessment, we may use your responses to generate an indicative maturity profile, score, classification, recommendation or follow-up discussion.

The assessment is intended to support business discussion and advisory engagement. It is not intended to produce legal effects or similarly significant effects about any individual.

We may use aggregated or anonymised assessment information for benchmarking, research, service development and thought leadership. We will not intentionally publish information that identifies you or your organisation without appropriate permission.

We may send direct marketing communications about ForbesBerry services, research, events, insights, assessments and advisory offerings where permitted by applicable law.

Where we rely on consent, we will ask you to opt in through a clear affirmative action, such as ticking an unticked checkbox. We will not treat silence, inactivity or a pre-ticked box as valid consent.

We may use separate opt-ins for different channels, such as email, phone, SMS or messaging apps, where appropriate.

Every marketing email will include an unsubscribe method or other clear way to opt out. You can also opt out by contacting us at [email protected].

If you opt out, we may keep limited information on a suppression list to make sure we do not send you further marketing communications. We will not use that suppression list to contact you later asking you to opt back in.

If we connect with you on LinkedIn or another professional platform, we may use your business contact information to maintain a professional relationship and communicate with you in a way that is consistent with your reasonable expectations.

We do not treat a social media connection alone as automatic permission to add you to marketing campaigns. Where contact information is added to our CRM or marketing systems, we consider the source of the information, the purpose of the contact, the applicable privacy notice, the lawful basis for processing and your right to object or opt out.

Our website may use cookies, pixels, tags, scripts, local storage and similar technologies.

We use the following categories of cookies:

Essential cookies — These are necessary for the website to function, provide security, load pages and enable requested services.

Analytics cookies — These help us understand how visitors use the website, which pages are viewed, how visitors arrive at the site and how the website performs.

Functional cookies — These help remember preferences and improve the user experience.

Marketing cookies — These may help measure campaigns, understand engagement and support relevant marketing communications.

Where required, non-essential cookies are only used in accordance with your cookie preferences. You can change your cookie preferences at any time using the Cookie Settings link on our website.

For more information, please see our Cookie Notice.

We may share personal data with the following categories of recipients where necessary:

Our service providers may include Gamma, Jotform, Monday.com, Google Analytics, Google Tag Manager, LinkedIn and other providers that support our website, forms, communications and business operations.

Some of our systems, service providers, partners or recipients may be located outside the DIFC, the UAE or the country where you are located.

Where personal data is transferred internationally, we take steps designed to protect the data in accordance with applicable data protection requirements. These steps may include transfer assessments, contractual safeguards, recognised adequacy mechanisms, intra-group arrangements or other lawful transfer mechanisms.

You may contact us for more information about the safeguards we use for international transfers.

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, regulatory, accounting, reporting, security and dispute-resolution purposes.

As a general guide:

When personal data is no longer required, we delete it, anonymise it, securely archive it or put it beyond further active use.

Subject to applicable conditions and exemptions, you may have the right to:

To exercise your rights, contact us at [email protected]. We may need to verify your identity before responding to a request.

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No website, transmission or storage system can be guaranteed to be completely secure, but we take reasonable steps to protect personal data having regard to the nature of the data and the risks involved.

Our website may link to third-party websites, forms, platforms or social media pages. Those third parties may process personal data under their own privacy notices and terms.

We recommend reviewing the privacy notices of any third-party platform before submitting personal data to it.

Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal data from children through the website.

We may update this Privacy Notice from time to time. The latest version will be published on our website with the "Last updated" date shown above.

For privacy questions, data protection requests, cookie preference questions or marketing opt-outs, contact:

Email: [email protected]

Address: Level 3, Dubai AI Campus, DIFC, Dubai, United Arab Emirates