Effective Date: 12 December 2025
Last Updated: 12 December 2025

This Privacy Policy explains how OneBonsai Gulf LLC (“OneBonsai”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit onebonsai.consulting (“Website”). We comply with all applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where relevant.

1. Data Controller

OneBonsai Gulf LLC
PO BOX 2282, Masdar City, Abu Dhabi, UAE
Email: [email protected]

2. Personal Data We Collect

a. Data Provided Through Forms

  • Name
  • Email address
  • Phone number
  • Company name
  • Messages submitted via contact form

b. Newsletter Subscription Data

  • Email address
  • Communication preferences

c. Recruitment & Talent Sourcing Data

  • CV/resume
  • Professional experience
  • Skills and qualifications
  • Employment history

d. Cookies, Analytics & Tracking Data

Our Website uses cookies and analytics tools, including:

  • Google Analytics
  • Google Ads tracking
  • Meta/Facebook Pixel
  • LinkedIn Insights Tag

These tools collect:

  • IP address
  • Device and browser details
  • Geographic region (approximate)
  • Pages visited
  • Time spent on each page
  • Click and scroll behavior

3. Purpose and Legal Basis for Processing

a. Responding to inquiries

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

b. Delivering recruitment and talent services

Legal basis: Contract performance / pre-contractual steps (Art. 6(1)(b) GDPR)

c. Sending newsletters and marketing content

Legal basis: Consent (Art. 6(1)(a) GDPR)

d. Conducting analytics and website optimization

Legal basis: Legitimate interest and/or consent via cookie settings

e. Running targeted advertising

Legal basis: Consent

4. Data Storage, Processing & External Systems

We use secure external systems for data processing and storage, including:

  • Google Workspace / Gmail
  • Microsoft Outlook
  • Notion
  • CRM or applicant tracking systems
  • Analytics and advertising platforms

These providers may process data outside the EU.

5. International Data Transfers

Personal data may be transferred to jurisdictions outside the UAE and EU.
We rely on:

  • Standard Contractual Clauses (SCCs)
  • Provider-specific data protection frameworks
  • Contractual obligations to safeguard data

6. Data Retention

We follow GDPR-compliant retention standards:

  • Contact form submissions: up to 24 months
  • Recruitment/talent data: up to 36 months
  • Newsletter data: until user unsubscribes
  • Cookie/analytics data: according to respective providers

7. Your GDPR Rights

Users in the EU, EEA, or UK have the right to:

  • Access their data
  • Request correction
  • Request deletion
  • Object to processing
  • Request data portability
  • Withdraw consent (for marketing & cookies)

To exercise these rights, email us at:
[email protected]

8. Cookies

We use cookies for:

  • Functionality
  • Performance and analytics
  • Advertising and retargeting

Users can manage consent through the cookie banner.

9. Data Security

We apply strong technical and organizational measures, including:

  • Encrypted communication
  • Controlled access permissions
  • Secure cloud storage
  • Regular system monitoring

10. Disclosure to Third Parties

We may share data with:

  • Recruitment clients (with candidate consent)
  • Email and CRM providers
  • Analytics and advertising platforms
  • Legal authorities when required

We do not sell personal data.

11. Children’s Privacy

Our Website is not intended for individuals under 16 years of age.

12. Updates to This Policy

We may update this Privacy Policy. Updates will be posted on this page.