top of page
Karbuna-logo

Privacy Notice

Last updated: 5 October 2026

 

1. Who we are

This website, karbuna.com, is operated by Karbuna Management Limited ("Karbuna", "we", "us"), a company registered in the Dubai International Financial Centre (DIFC) with registration number 13050. Our address is Level 1, Gate Avenue, South Zone, DIFC, Dubai, United Arab Emirates.

Karbuna is the controller of the personal data described in this notice. We process it in line with the DIFC Data Protection Law (DIFC Law No. 5 of 2020). Questions about this notice or your personal data can be sent to info@karbuna.com.

 

2. The personal data we collect

  • Enquiry form: your name, organisation, email address, country, the type of enquiry you select, and your message.
  • Emails and other correspondence: your contact details and the content of what you send us, including any CV or supporting documents.
  • Website usage data: your IP address, browser and device type, pages visited, and the date and time of your visit. This is collected through cookies and similar technologies (see section 8).

Please do not send us sensitive personal data, such as information about health, religion or political opinions, through the website.

 

3. How we use your personal data and our legal basis

  • Responding to your enquiry and corresponding with you: our legitimate interests in answering enquiries and developing business relationships; or your consent, given through the enquiry form.
  • Considering you for work with us or as a partner firm, where you send your CV or details: our legitimate interests in building a network of specialists; and steps you ask us to take before entering into a contract.
  • Running, securing and improving the website: our legitimate interests in operating a secure and functional website.
  • Keeping records and meeting legal, regulatory and tax obligations: compliance with legal obligations that apply to us.
  • Analytics and non-essential cookies: your consent.

Where we rely on legitimate interests, we have considered your rights and do not use your data in ways you would not reasonably expect. We do not use your personal data for automated decision-making or profiling that has legal or similarly significant effects on you.

 

4. Who we share it with

We do not sell your personal data. We share it only with:

  • our website host and platform provider (Wix.com), our cookie consent provider (Usercentrics GmbH, Germany), and our email and IT service providers, who process it on our instructions;
  • professional advisers, such as lawyers, accountants and auditors, where needed;
  • regulators, courts or other authorities, where the law requires it.

 

5. International transfers

Our service providers may store or access personal data outside the DIFC, including in jurisdictions that the DIFC Commissioner of Data Protection has not recognised as providing adequate protection. Where that happens, we rely on appropriate safeguards permitted by the DIFC Data Protection Law, such as standard contractual clauses, or on another lawful basis for the transfer.

 

6. How long we keep it

We keep enquiry and correspondence records for up to three years after our last contact with you, unless a business relationship follows, in which case we keep records for as long as the relationship lasts and for any period the law requires afterwards. Website usage data is kept for the periods set by the relevant cookie (see section 8).

 

7. Your rights

Subject to the conditions and exceptions in the DIFC Data Protection Law, you have the right to:

  • ask for access to the personal data we hold about you;
  • ask us to correct inaccurate or incomplete data;
  • ask us to erase your data;
  • ask us to restrict how we use your data;
  • object to our use of your data, including where we rely on legitimate interests;
  • receive your data in a portable format;
  • withdraw your consent at any time, where we rely on consent. This does not affect processing already carried out.

To exercise any of these rights, email info@karbuna.com. We will respond within one month, or within any longer period the law allows. We may need to confirm your identity first.

If you are unhappy with how we have handled your personal data, you can complain to the DIFC Commissioner of Data Protection. We would appreciate the chance to address your concern first.

 

8. Cookies

The website uses cookies set by Wix that are essential for it to work and to keep it secure. With your consent, we also use analytics cookies to understand how visitors use the site. You can accept or decline non-essential cookies through the cookie banner, which is provided by Usercentrics, and change your choice at any time by reopening the banner or through your browser settings.

 

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, so please take care with what you send us.

 

10. Links to other websites

This website may link to other websites, such as social media pages. We are not responsible for how those websites handle personal data. Please read their privacy notices.

 

11. Children

This website is intended for businesses and professionals. It is not directed at anyone under 18, and we do not knowingly collect their personal data.

 

12. Changes to this notice

We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated.

bottom of page