Privacy Notice

1 · Who We Are

EDGE Advisory is a trading name of EDGE Holding USA, LLC, a limited liability company registered in Delaware under file 10663271, with its registered office at 131 Continental Drive, Suite 305, Newark, New Castle, Delaware 19713, United States. The firm advises from Riyadh and Dubai.

EDGE Holding USA, LLC is the controller of the personal data described in this notice. Write to contact@edge-advisory.net on any matter arising from it.

2 · What We Collect

We collect what you give us and, if the firm gives you access to the Client Document Room, a record of your use of it. There is no tracking on this website, no advertising technology, and no profiling.

Enquiry Details

Your name, organisation, role, email address, telephone number where you supply one, and whatever you write in the message field when you request a briefing.

Client Document Room

Where the firm has given you access to the Client Document Room: the email address the access was issued to, and the name and organisation the firm recorded with it; the sections and documents released to you, the dates your access starts and ends, and any change to them; a record of each sign-in — its time, the IP address it came from, and whether a one-time code or a sign-in link was used, including requests for a code that did not lead to a sign-in; and a record of each document you open or download, and of any request you make for your access to be extended or reviewed, with any note you add.

Server Records

Our host records the ordinary technical information every web server records — IP address, request time, page requested, browser and operating system — for security and diagnosis. These records are kept for 90 days and then deleted.

3 · Why We Hold It, and on What Basis

Enquiry details are held to answer you and, where a conversation follows, to carry it forward. The basis is our legitimate interest in responding to an approach made to the firm, and, once an engagement is contemplated, the steps taken at your request before entering a contract.

Client Document Room records are held to operate and secure the Document Room, to send you sign-in codes and notices about your access, and to keep an accurate record of which documents were released to whom and when. The basis is the mandate under which access was issued to you or to the organisation you represent, and our legitimate interest in protecting confidential material entrusted to the firm.

Server records are held for security, on the basis of our legitimate interest in protecting the service.

4 · Cookies

The public pages of this website set no cookies and use no analytics, tag managers or third-party scripts.

The Client Document Room, and the page where you sign in to it, use four cookies that are strictly necessary to sign you in and keep you signed in securely. They contain random identifiers only, are never used for tracking or advertising, and are not shared with any other party.

Sign-In Form

ea_pre — protects the sign-in form against forged requests. Kept for 2 hours.

Sign-In Code or Link

ea_li — ties a one-time code or sign-in link to the browser that asked for it. Kept for about 20 minutes.

Client Session

ea_room — keeps a client signed in. Deleted when the browser is closed; the sign-in ends after 8 hours at most.

Administrator Session

ea_adm — keeps a firm administrator signed in. Deleted when the browser is closed; the sign-in ends after 4 hours at most.

Because these cookies are needed to provide the service you have asked for, they are set without a consent prompt. If the website ever uses a cookie that is not strictly necessary, this notice will be updated before that happens and a consent control will be presented.

5 · Who Else Sees It

Your enquiry reaches the firm. It is not sold, rented or shared for anyone else's purposes.

We rely on a small number of service providers to operate. They fall into two categories: the provider that hosts this website, and the provider that carries the firm's business email. Each processes personal data only on our documented instructions, for no purpose of its own, and under a written obligation of confidentiality. We do not use advertising, analytics or data-enrichment processors. The identity of a current processor is available on request to contact@edge-advisory.net.

We disclose personal data to a public authority only where the law requires it, and only to the extent required.

6 · Where It Is Held

The firm advises from Riyadh and Dubai and is incorporated in Delaware, so personal data you send us may be processed in the Kingdom of Saudi Arabia, the United Arab Emirates and the United States.

We hold ourselves to the Saudi Personal Data Protection Law and to the United Arab Emirates personal data protection law in respect of data subjects in those countries, and we apply the standards of the EU General Data Protection Regulation as a floor for everyone else, whether or not it applies to us by its own terms.

Data moves between those places for one reason: you approached an international firm and asked for a reply, and the reply cannot be given without it. That transfer is necessary for the steps taken at your request. Where a service provider is involved it is bound by written agreement to process only on our instructions and to protect the data to the standard described here.

7 · How Long We Keep It

An enquiry that does not become an engagement is kept for 24 months from our last exchange with you, and is then deleted. An enquiry that becomes an engagement is kept for the life of the engagement and for six years afterwards, that being the period in which a claim arising from the work could still be brought.

Client Document Room records are kept for the life of the mandate and for six years afterwards; the IP addresses recorded with sign-ins and document access are kept for 90 days and are then removed from the record. Server records are kept for 90 days, as set out above. Where the law requires us to keep something longer, we keep it for that period and no longer.

8 · Your Rights

You may ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to our holding it at all. Where we rely on your consent you may withdraw it at any time, and doing so does not affect what was lawful beforehand.

Write to contact@edge-advisory.net. We will answer within one month.

If our answer does not satisfy you, you may complain to the competent authority where you are. In the Kingdom of Saudi Arabia that is the Saudi Data & AI Authority; in the United Arab Emirates, the UAE Data Office; in the European Union or the United Kingdom, your national supervisory authority. You are not required to come to us first, though we would rather you did.

9 · Security

The site is served over an encrypted connection. Access to enquiry correspondence and to the Document Room is restricted to those in the firm who need it. No transmission over the internet can be guaranteed absolutely secure, and we ask you not to send confidential material through the enquiry form — tell us it exists and we will arrange a secure route.

Access to the Client Document Room is granted by a one-time code or a sign-in link sent only to the email address the firm authorised. Each code or link works once, for ten minutes, and only in the browser that asked for it. The firm can change or withdraw access at any time, and the change takes effect immediately. Documents released for viewing only cannot be downloaded from the Document Room; no system, however, can prevent what is shown on a screen from being photographed or printed.

10 · Children

This website is directed at institutions and their officers. It is not intended for children and we do not knowingly collect their data.

11 · Changes

We may revise this notice. The date in effect appears at the head of the page, and a material change will be drawn to the attention of anyone with an active account before it takes effect.