Privacy Policy | ERMES Strategy & Consulting

This Privacy Policy explains how Ermes Strategy & Consulting ("Ermes", "we", "us") collects, uses, and safeguards personal information through this website and in the course of our engagements with prospective and existing clients.

Who we are

Ermes Strategy & Consulting is a multi-jurisdictional advisory and conciergerie firm coordinating cross-border legal, tax, structuring, and lifestyle services on behalf of corporates, entrepreneurs and families. The firm is incorporated in the Meydan Free Zone, Dubai, United Arab Emirates. For data protection enquiries, contact info@ermesstrategy.com.

What information we collect

We collect personal information that you choose to provide to us directly, including:

Identity information (name, professional title, organisation)
Contact details (email address, telephone number, postal address)
Information you submit through enquiry forms or correspondence
Information necessary to deliver the services you have requested, which may include sensitive personal and financial information provided in confidence

We may also collect limited technical information automatically when you visit this website, including IP address, device and browser type, pages visited, and referring URL. See our Cookie Policy for further details.

How we use your information

We use personal information for the following purposes:

To respond to enquiries and deliver requested services
To coordinate engagements with our network of licensed advisors, fiduciary providers, and partner firms (with your knowledge and consent)
To comply with legal, regulatory and professional obligations
To send periodic communications you have requested
To improve the operation and security of this website

Legal basis for processing

Where data protection law applies to your interaction with us, we process personal information on the following bases: performance of a contract or pre-contractual steps; compliance with a legal obligation; your consent (which may be withdrawn at any time); and our legitimate interests in operating and developing our advisory practice, where these are not overridden by your rights and freedoms.

Sharing your information

Ermes does not sell personal information. We share personal information only as necessary to deliver the services you have engaged us for, including with:

Licensed law firms, fiduciary providers, tax advisors and regulated specialists with whom we coordinate on your behalf
Service providers supporting our operations (such as email, document management, and IT infrastructure providers) under appropriate confidentiality obligations
Regulatory authorities, courts, or professional bodies where required by applicable law

International transfers

Because Ermes operates across multiple jurisdictions, your personal information may be transferred to, processed in, and stored in countries outside the country where it was originally collected. Where required, we put in place appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms.

Your rights

Subject to applicable law in the jurisdiction in which you reside, you may have rights including: the right to access the personal information we hold about you; the right to correction or deletion; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent. To exercise any of these rights, please contact info@ermesstrategy.com. You may also have the right to lodge a complaint with your local data protection authority.

Retention

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to protect our legal interests. Engagement records are retained for a maximum of seven years following the conclusion of an engagement, after which they are securely deleted or anonymised.

Security

We maintain organisational and technical measures designed to protect personal information against unauthorised access, disclosure, alteration, or destruction. Confidentiality is foundational to our practice.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above indicates when it was most recently revised. Material changes will be communicated as appropriate.