Privacy notice
Last updated: 13 October 2026
1. Who is responsible?
Nous Advisory Partners LLC, registration number 05590, is responsible as data controller for personal data it determines to process in relation to its website and business enquiries. Contact the person responsible for privacy in writing at Tornado Tower, Floor 22, West Bay, Doha, Qatar, P.O. Box 27774, marked “Privacy request”. A dedicated email channel will be added when confirmed.
This notice concerns website visits and initial enquiries, not all personal data handled under a consultancy engagement. Engagement-specific processing, including HR information handled on a client’s instructions, needs a separate notice or data processing agreement as appropriate.
2. Information and purposes
| Activity | Information | Purpose and basis where Nous processes it |
|---|---|---|
| Preparing a brief | Name, email, optional company, selected service and message | The code uses this information locally to generate your requested brief. No enquiry submission is sent to Nous. |
| An enquiry you separately send to Nous | Contact details, correspondence and business information you choose to share | Responding and discussing services: steps at your request before a contract where applicable; otherwise legitimate interests in responding to business enquiries and managing business relationships, subject to your rights. |
| Website delivery and security | A host may process IP address, browser/device information, request timestamps, visited pages and security events | Delivering and protecting the website: legitimate interests in operating a reliable and secure site. Hosting-specific arrangements remain to be verified. |
3. Your choices and local processing
Providing an enquiry is voluntary. Fields marked required are needed only to create a useful brief; you can browse without entering them. Without contact details, Nous may be unable to respond to a separately sent enquiry. Company information is optional.
The website has no form-submission endpoint. Its code holds entered text in page memory, does not use local storage or a database, and does not send form values in background requests. Resetting the form clears its displayed content and in-page brief; closing or refreshing ends the page’s in-memory session. Your browser may independently retain autofill entries or restore a session. Copied text and downloaded files remain under your control until you clear or delete them.
4. Recipients, hosting and international transfers
Opening the site necessarily sends a request to its host. The current review version is delivered through ChatGPT Sites; access and authentication may also involve the platform’s own processing. The downloadable code contains no embedded analytics, advertising pixels, external fonts or third-party form service.
Where Nous receives an enquiry separately, authorised personnel and relevant IT, email or professional service providers may need access for the stated purposes; disclosures to authorities may be required by law. Specific providers, retention settings and processing locations must be identified for the production deployment. No claim is made here that provider contracts or overseas transfer safeguards have already been verified.
Transfers of personal data outside the QFC require a lawful transfer basis under the QFC Data Protection Regulations, such as an adequacy decision or appropriate safeguards. Where required, safeguards and how to obtain a copy must be explained before the transfer occurs. Contact Nous about the safeguards applicable to your data.
5. Retention and security
There is no website database retaining prepared briefs. Any enquiry you send separately should be kept only as needed to resolve it and administer a resulting relationship, subject to applicable record-keeping duties or legal claims. The applicable criteria include the enquiry’s status, whether an engagement follows and the legal purpose requiring retention. Host log retention remains to be confirmed and this notice must be updated accordingly.
The design minimises collection by keeping preparation local. Production controls must include secure hosting, restricted access and appropriate processor arrangements. No internet transmission or device is entirely secure. Please do not provide sensitive personal data or third-party records through the initial enquiry tool.
6. Your rights
Under applicable QFC data protection law, you may request access, correction, deletion, restriction, objection or portability where the relevant conditions apply. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. This site does not subscribe you to marketing or use automated decision-making or profiling to make decisions about you.
Send requests to the privacy contact above. Necessary identity checks may apply. Nous must respond without undue delay, normally within 30 days; an extension of up to 60 additional days may apply to complex or numerous requests, with notice and reasons within the first 30 days. Requests are normally free, subject to the exceptions allowed by law.
7. Complaints and updates
You may complain to the QFC Data Protection Office if you believe your personal data has been handled contrary to the Regulations, without first having to complete our internal complaints process. The official QFC data protection page provides the complaint form and current guidance.
See our cookie notice and request and complaint instructions. We will update this notice when collection, service providers or processing practices change.