Last updated: 29 May 2026
1. About this policy
This privacy policy explains how Prism 7 Education handles personal information collected through our website. It applies to anyone who contacts us, submits a form, or requests information about our services.
2. Who we are
The data controller is Dankee DMCC trading as Prism 7 Education, a UAE-licensed business and part of the wider Prism 7 Group.
For any data protection matter, contact us at hello@prism7education.com or +971 4 451 6865.
3. The information we collect
We only collect the personal information you choose to provide through our website. Typically this means:
- Your name
- Your email address
- Your phone number
- Anything else you include in a form, message, or attachment
We also collect anonymised information about how visitors use our site through cookies and analytics — see our Cookie Policy.
4. Why we use it and our lawful basis
Our processing is governed principally by the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Where you are based in the United Kingdom, the European Union, or another jurisdiction with applicable data protection law, we also have regard to the rights and protections that apply to you in your home jurisdiction.
The lawful bases we rely on are:
- Performance of a contract — to respond to enquiries and deliver the services you have engaged us for
- Compliance with a legal obligation — UAE regulatory, anti-money-laundering (AML), and “know your customer” (KYC) requirements, where these apply to the service you have engaged us for
- Legitimate interests — to operate, manage, and develop our business; to communicate with you about your matter; and to prevent fraud
- Consent — for marketing communications, optional services, or any sensitive data we may process. You may withdraw consent at any time
5. Who we share it with
We share your information only where necessary, and only with parties bound to protect it:
- UAE government and regulatory authorities, where required by the service or by law
- Third parties involved in delivering the service you have engaged us for
- Our IT and service providers (website hosting, email, CRM, analytics)
- Group affiliates within the wider Prism 7 Group, where the service involves cross-border work
- Professional advisors (accountants, lawyers, auditors), where engaged on your matter
We do not sell your personal data to third parties.
6. International transfers
As a UAE-based business with an international client base — primarily from the United Kingdom — your data may be transferred between the UAE and your country of residence. Where we transfer data out of the UAE we do so under the safeguards permitted by Article 22 of the PDPL. Where we receive data from the UK or EU we apply the corresponding safeguards required under those frameworks.
Our website, and the personal information you submit through it, are hosted on secure servers located in the United Kingdom, operated by our hosting provider on our behalf. This means that when you contact us or submit a form — including from within the UAE — your data is transferred to and stored in the UK. Where we do this we rely on your consent and on the safeguards permitted under Article 22 of the PDPL, and we have assessed that the UK — through the UK GDPR and the Data Protection Act 2018 — offers a standard of protection comparable to that required under the PDPL.
7. How long we keep it
We keep personal data only for as long as is necessary for the purpose we collected it. As a general rule:
- Enquiry data: up to 2 years from last contact
- Active client records: for the duration of the engagement and a reasonable period afterwards (typically up to 7 years)
- Compliance and KYC records: at least 5 years from the end of the relationship, in line with UAE AML rules
- Records required by law: for the period set by the relevant legislation
- Marketing data: until you unsubscribe or ask us to delete it
8. Your rights
Under the UAE PDPL — and the UK GDPR or EU GDPR where they apply to you — you have the right to:
- Be informed about how we use your data
- Access the personal data we hold about you
- Have inaccurate or incomplete data corrected
- Ask us to delete your data, subject to any overriding legal or regulatory retention obligation
- Restrict or object to certain types of processing, including direct marketing
- Have your data ported to another provider
- Withdraw consent at any time, where consent is the lawful basis
To exercise any of these rights, email hello@prism7education.com. We will respond within the period required by the applicable law (one calendar month under the PDPL and UK GDPR).
9. Cookies
Our website uses cookies and similar technologies. See our Cookie Policy for details and to manage your preferences.
10. Security
We use appropriate technical and organisational measures to keep your data secure, including encrypted storage, role-based access controls, and staff confidentiality undertakings. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant regulator within the period required by law.
11. Complaints
If you are concerned about how we handle your personal data, please contact us first at hello@prism7education.com. If you are not satisfied with our response, you have the right to complain to:
- UAE: the UAE Data Office under the Federal Decree-Law No. 45 of 2021
- United Kingdom: if you are a UK resident, the Information Commissioner’s Office (ICO) — ico.org.uk
- European Union: if you are an EU resident, your local Data Protection Authority
12. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent version.
13. Contact us
Dankee DMCC trading as Prism 7 Education
Email: hello@prism7education.com
Phone: +971 4 451 6865