1. Controller & Contact

The Rockets Consulting DMCC, Jumeirah Lakes Towers, Dubai, UAE, is the controller of personal data collected via this website and through direct client engagements. For privacy questions or to exercise your rights, contact privacy@5th.ae or hello@5th.ae.

2. Scope & Applicable Laws

We process personal data in accordance with:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and its executive regulations issued by the UAE Data Office;
• Regulation (EU) 2016/679 ("EU GDPR") and the UK GDPR / Data Protection Act 2018, where we target or monitor individuals in the EU/EEA or United Kingdom;
• The California Consumer Privacy Act, as amended by the CPRA ("CCPA/CPRA"), for California residents;
• Other data protection laws that apply to specific engagements or campaign geographies.

3. Personal Data We Collect

• Identity & contact data: name, job title, company, business email, phone number, country.
• Enquiry & brief content: information you voluntarily submit through contact forms, strategy sessions, discovery calls or campaign briefs.
• Commercial data: proposals, contracts, billing details and correspondence with client contacts.
• Technical data: IP address, device and browser type, operating system, referring URL, timestamps, pages visited and interaction events, collected automatically through server logs and analytics.
• Cookie & similar identifiers: see our Cookie Policy.
• Marketing data: preferences, subscription status and engagement with our communications.

We do not knowingly collect special-category / sensitive personal data or data relating to children under 18. Please do not submit such information through our website.

4. Purposes of Processing

• Responding to enquiries and preparing commercial proposals.
• Delivering contracted advisory and campaign services and managing the client relationship.
• Operating, securing and improving the website.
• Sending service updates and, where permitted, business-to-business marketing.
• Compliance with legal, regulatory, tax, accounting and contractual obligations.
• Establishing, exercising or defending legal claims.

5. Legal Basis for Processing

Depending on the activity and your location, we rely on:

• Consent (Art. 6 UAE PDPL / Art. 6(1)(a) GDPR) — e.g. for optional marketing or non-essential cookies.
• Performance of a contract (Art. 6(1)(b) GDPR) — to provide services you request.
• Legal obligation (Art. 6(1)(c) GDPR) — for record-keeping, tax and regulatory duties.
• Legitimate interests (Art. 6(1)(f) GDPR) — to run and secure our business, respond to B2B enquiries, and conduct proportionate direct marketing to professional contacts. You may object at any time.

6. Recipients & Processors

We do not sell personal data. We share personal data only with:

• Affiliates within our group, on a need-to-know basis.
• Vetted service providers acting as processors — cloud hosting, email, CRM, analytics, e-signature, accounting and IT security — under written data-processing agreements.
• Underwriting and insurance partners engaged to place capacity for insured promotions, under confidentiality and, where applicable, joint-controller or controller-to-controller terms.
• Professional advisers (lawyers, auditors) and competent authorities where required by law.
• Successors in the context of a corporate reorganisation, merger or sale.

7. International Transfers

Personal data may be processed outside your country of residence, including in jurisdictions that do not offer an equivalent level of data protection. Where required, we implement appropriate safeguards, such as UAE Data Office adequacy mechanisms, EU Standard Contractual Clauses (2021/914), the UK International Data Transfer Addendum, or equivalent contractual and technical measures.

8. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting or reporting obligations. Enquiry data is generally retained for up to 24 months from the last interaction; contract and financial records are retained for the periods required by UAE commercial and tax laws (typically up to 5 years or longer where mandated).

9. Your Rights

Subject to the applicable law, you have the right to:

• Access the personal data we hold about you and obtain a copy.
• Request correction of inaccurate or incomplete data.
• Request erasure ("right to be forgotten") where legally permitted.
• Restrict or object to processing, including for direct marketing.
• Data portability, where technically feasible.
• Withdraw consent at any time, without affecting prior lawful processing.
• Not be subject to solely automated decisions producing legal or similarly significant effects. We do not carry out such automated decision-making.

California residents (CCPA/CPRA): you also have the right to know the categories and specific pieces of personal information collected, the right to delete, the right to correct, the right to opt-out of "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA/CPRA), and the right to non-discrimination for exercising these rights.

To exercise your rights, contact privacy@5th.ae. We will respond within the timeframes required by applicable law. You have the right to lodge a complaint with the UAE Data Office, an EU data protection authority (e.g. your local supervisory authority), or the UK ICO.

10. Security

We implement appropriate technical and organisational measures — including access controls, encryption in transit, least-privilege administration, logging and vendor due diligence — to protect personal data against unauthorised access, alteration, disclosure or loss. No system can be guaranteed 100% secure.

11. Third-Party Websites

This website may link to third-party sites. Their privacy practices are governed by their own policies, which we recommend you review.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page and, where appropriate, notified to you. The "Last updated" date reflects the latest revision.

13. Contact

The Rockets Consulting DMCC — 5th Consulting
Jumeirah Lakes Towers, Dubai, UAE
Email: privacy@5th.ae · Phone: +971 4 577 0956