Privacy Policy
Privacy Policy
Adonis Advisory Group (AAG)
Introduction
At Adonis Advisory Group ("AAG", "we", "us", or "our") We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data.
It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint.
When we use your personal data we are regulated under the EU General Data Protection Regulation (GDPR) which applies across the European Union (including in the United Kingdom) and we are responsible as ‘controller’ of that personal data for the purposes of the GDPR. Also, the UAE Personal Data Protection Law (PDPL) – Federal Decree-Law No. 45 of 2021
Our use of your personal data is subject to your instructions, the GDPR, other relevant UK, EU and UAE legislation and our professional duty of confidentiality.
What personal information do we collect about you?
We may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our legal or other services or as a result of your relationship with one or more of our staff and clients.
The personal information that we process includes:
Basic information, such as your name (including name prefix or title), the company you work for, your title or position and your relationship to a person.
Contact information, such as your postal address, email address and phone number(s).
Professional information, including your photograph, from LinkedIn or the website of the organisation you work for.
Financial information, such as payment-related information.
Technical information, such as information from your visits to our website or applications or in relation to materials and communications we send to you electronically, collected through cookies and other tracking technologies.
Information you provide to us for the purposes of attending meetings and events, including access and dietary requirements.
Identification, background and financial verification information provided by you or collected as part of our business acceptance and ongoing monitoring processes.
Personal information provided to us by or on behalf of our clients or generated by us in the course of providing services to them, which may include special categories of data.
Any other information relating to you which you may provide to us
How We Collect Personal Data
We may collect personal data:
directly from you when you engage with us
indirectly from third-party sources including your organisation, your representatives, publicly available sources, our service providers and other affiliates;
our clients, when we handle personal data for the purpose of providing our services; regulatory bodies; and other companies providing services to us.
When we collect personal data directly from you it is your decision whether to provide data. If you do not provide data, it may hinder your use of, or make it not possible to use, our services or products, not allow you to remain in contact with us, to enter into
contracts/agreements with us, to participate in our programmes, or to exercise your rights. If you provide information to us about another person, you must ensure that you comply with any legal obligations that may apply to your provision of the information to us, and allow us, where necessary, to share that information with our service providers.
How We Use Your Personal Data
How we use your personal data depends on the nature of your relationship with us. How we use your personal data and our legal basis for doing so, including where applicable our legitimate interest is explained below.
We will only use your personal data when applicable law allows us to. Depending on the nature and purposes of processing being carried out, our basis for processing may include:
pursuing our legitimate interest or those of a third party. Under the EU GDPR, the UK GDPR and the UAE PDPL, the lawful basis of such processing is Article 6(1)(f) of the EU GDPR (or equivalent provisions in the UK GDPR) (i.e. the processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests, fundamental rights and freedoms which require protection of personal data). Under the UAE Personal Data Protection Law (PDPL) – Federal Decree-Law No. 45 of 2021, processing based on legitimate interest must not conflict with an individual’s rights or freedoms as per Article 4(9) of the PDPL;
complying with legal obligations. Under the EU GDPR, the UK GDPR and the UAE PDPL, the lawful basis of such processing is Article 6(1)(c) of the EU GDPR (or equivalent provisions in the UK GDPR) Under the UAE PDPL, data processing must comply with legal and regulatory obligations as per Article 4(8) of the PDPL (i.e. the processing is necessary to discharge a relevant legal or regulatory obligation to which we are subject); and
performance of a contract. Under the EU GDPR, the UK GDPR and the UAE PDPL, the lawful basis of such processing is Article 6(1)(b) of the EU GDPR (or equivalent provisions in the UK GDPR), and the UAE PDPL, processing for contractual necessity is covered under Article 4(3) of the PDPL (i.e. the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract).
Generally, we do not rely on consent as a legal basis for processing your personal data, although we will obtain your consent before sending third party direct marketing communications to you, or where your consent is otherwise required under applicable law. You have the right to withdraw your consent at any time by contacting us using the details set out under "Contacting Us" below.
We do not sell your personal information. We do not envisage your personal data will undergo any automated decision making.
To the extent that our processing of your personal data is subject to data protection legislation other than the UAE, EU or UK GDPR, the relevant legal basis are explained in the Supplementary Provisions.
Visitors to Our Website, Microsites, and Client Portal
When you visit the Adonis Advisory Group ("AAG") website, microsites, or client portal, we automatically collect, store, and process technical information about your device, browser, and interaction with our website. This includes your IP address, browser type, referring website, pages visited, and time spent on our site. Such information is collected through cookies and other tracking technologies to ensure the proper functioning of our website, improve user experience, and maintain security. Additionally, we process personal data such as login credentials to provide and manage access to our premium tools and restricted areas. This processing is carried out based on either your consent or our legitimate interest in providing you with secure access to the services and information offered through our website, enhancing our premium services, and monitoring compliance with our terms of use. Further details on how we use cookies and similar technologies can be found in our Cookie Policy.
Thought Leadership, Briefings, Podcasts, and Events
We collect personal data when you sign up for newsletters, request legal briefings, attend an event, or otherwise engage with our thought leadership content. This data may include your name, email address, phone number, mailing address, job title, company name, and professional interests. Additionally, we may collect marketing preferences, dietary requirements for catered events, and feedback from surveys. This information is stored in our customer relationship management system to enable us to send you legal and business updates, invite you to events, and facilitate networking opportunities. We also use this information to manage your communication preferences, ensuring that if you choose to opt out of marketing communications, we maintain suppression lists to prevent further outreach. Depending on our relationship with you, we process this data based on either your explicit consent, our legitimate interest in maintaining business relationships and engagement, or to comply with legal obligations related to data protection and electronic communications.
Former Employees
If you were previously employed by or were a partner at Adonis Advisory Group, we may continue to process certain personal data collected during your tenure. This includes contact details, biographical information, employment and compensation records, training history, job title, performance data, and any media in which you participated, such as webinars or podcasts. We process this data for the purposes of maintaining employment records, providing references upon request, publicising firm activities where appropriate, and conducting workforce analytics to enhance our business operations. We may also retain certain information to establish, exercise, or defend legal claims, and to comply with tax and regulatory obligations.
Where necessary and permitted by applicable law, we may continue to process special category data, such as race, ethnicity, or health-related information, for legal compliance purposes, including obligations related to employment, social security, or social protection law. We do not share personal data of former employees with third parties unless required to fulfil ongoing legal or contractual obligations.
If you are invited to join our alumni program, we will use your name, contact details, professional role, and relevant history to facilitate ongoing engagement. This may include sharing firm updates, inviting you to alumni networking events, and providing insights into developments at Adonis Advisory Group. The processing of this data is based on our legitimate interest in maintaining professional relationships with former employees, partners, and associates.
Clients and Those Whose Personal Data We Process in Connection with Our Professional Services
When clients engage Adonis Advisory Group for legal, regulatory, or advisory services, we collect and process personal data necessary for service delivery. This includes your name, contact details, financial information, and any other relevant data. Such information may be obtained directly from you, shared by your organisation, or sourced from third-party providers such as regulators, financial institutions, or public records.
We process this data to conduct due diligence, including client onboarding, compliance checks, and regulatory obligations such as anti-money laundering (AML) and conflict-of-interest screening. Additionally, we use this data to manage client relationships, provide legal and regulatory advice, engage with counterparties, and coordinate with service providers such as litigation support or translation firms.
We also process client data for billing and financial administration, ensuring accurate record-keeping for payments and tax purposes. Regulatory bodies may request information as part of their oversight functions, and we process personal data to comply with such requests. The legal basis for processing client data is primarily the performance of a contract. Additionally, we process personal data when required to meet legal or regulatory obligations, and in some cases, we rely on legitimate interests to ensure effective service delivery and business management.
In the course of providing legal services, we may also process the personal data of third parties whose information is relevant to a matter we are handling. This may include individuals involved in a business transaction, regulatory investigation, or legal dispute. In such cases, all personal data is handled in accordance with client confidentiality obligations, legal professional privilege, and the terms of our client engagement.
We only process special category data when necessary to advise clients on their legal obligations or rights in employment, social security, or related matters; where we are subject to a legal obligation to do so; or where it is essential to establish, exercise, or defend legal claims.
Applicants for Jobs, Work Experience, and Internships
When you apply for a job, internship, work experience opportunity, or attend an open day at Adonis Advisory Group, we collect personal data necessary for the recruitment process. This includes your name, contact details, CV, academic qualifications, professional background, employment history, and references. Where required, we may also conduct background checks, including verifying visa status and other employment-related legal requirements.
All applications must be submitted through our designated recruitment system, which includes a specific privacy statement outlining how applicant data is processed. Applications submitted outside of this process may not be accepted.
Visitors to Our Premises
If you visit one of our offices, we may collect personal data necessary for visitor management and security purposes. This includes your name, identification details, purpose of visit, and records of any visitor passes issued. We also use CCTV monitoring to maintain security and protect our premises. If you access our guest Wi-Fi, we may collect network usage data to ensure cybersecurity and prevent unauthorised access. The processing of visitor data is conducted based on legal obligations and our legitimate interest in securing our facilities and protecting confidential information.
People Who Contact Us
If you contact us via our website, by email, or by phone, we process your personal data to respond to inquiries and provide requested information. This includes your name, contact details, and the content of your message. The processing of this data is based on our legitimate interest in responding to business inquiries and maintaining professional communication.
Suppliers and Third Parties
If you provide goods or services to Adonis Advisory Group, we collect and process necessary business and financial details, including supplier contact information, contract details, billing addresses, and payment records. We process this data to manage supplier relationships, fulfil contractual obligations, and ensure compliance with financial and regulatory requirements. In some cases, personal data may be processed to establish, exercise, or defend legal claims.
How We Protect Your Data
We are committed to protecting your personal data and have implemented appropriate technical, physical and organisational security measures to protect personal data and we operate a robust information security international programme.
We do not keep your personal data for any longer than is necessary to fulfil the purpose for which we collected it, to comply with any legal, regulatory or reporting obligations or to assert or defend against legal claims.
We also require our business partners, suppliers, and third parties to implement appropriate safeguards, such as contract terms and access restrictions, to protect information from unauthorised access, use, and disclosure.
Data Sharing and Transfers
We treat your personal data with respect and do not share it with third parties except as follows:
We may share your personal data with our legal affiliates and consultants, in connection with our internal business processes and for the purposes listed in this Privacy statement. When we share personal data within our group, we have in place an intra-group data transfer and security agreement that incorporates appropriate data transfer provisions, including the EU and UK Standard Contractual Clauses.
We may share personal data with our suppliers and service providers who process personal data on our behalf to provide or support the services described in this Privacy statement and with other legal specialists, including barristers, mediators, arbitrators, consultants, experts and other law firms.
We may share personal information, where necessary, with courts, law enforcement regulatory authorities and government officials, where it is necessary to provide legal services, as permitted by applicable law or as required under applicable law (in which case we will notify you, unless we are prohibited from doing so or it is not possible or reasonable to do so).
We may also share your personal data where you have consented to us doing so.
Any such transfers will comply with our obligations under applicable data protection laws. Some of these parties may process your personal data in accordance with our instructions and others will themselves be responsible for their use of your personal data.
Your Rights in Relation to your Personal Data
To the extent that our processing of your personal data is subject to the GDPR or other data protection legislation with data subject rights, you may have rights which are explained below. To exercise these rights, please contact us at connect@adonisadvisorygroup.com.
You have the right to ask us for a copy of your personal data. This right is subject to applicable law and relevant exemptions.
You can ask us to correct or complete any inaccurate or incomplete personal data.
You can (in certain circumstances) ask us to delete your personal data. We may be unable to delete your data if we are legally obliged to retain it.
You can (in certain circumstances) object to our processing of your personal data or ask us to "restrict" our use of it.
If you have consented to our processing of your personal data, you can withdraw your consent.
You have the right to ask that personal data which you have provided to us be provided to you in machine readable format if we process that data using automated means, you have consented to its use or so that we can enter into a contract with you.
We aim to respond to all legitimate rights requests within the relevant statutory time limits; however, where permitted by law, we may take longer if the request is complex.
Cookies and Online Tracking
We use cookies and analytics tools on our website. You can manage your preferences through browser settings or our Cookie Policy.
Complaints
We respect your rights and want you to be comfortable with our use of your personal data. If you have a complaint or concern about how we use your personal data, we would like to work with you to resolve it. You also have the right to make a complaint to your local data protection authority using their website. If you are unsure as to who is your local data protection authority, please contact us.
How to contact us
If you have any queries regarding anything mentioned in this Privacy statement or want to exercise any of the rights mentioned, please contact us at: connect@adonisadvisorygroup.com
