Privacy Policy

Warren Thomas BI is a sole consulting practice operated by Warren Dean Thomas, based in Ras Al Khaimah, United Arab Emirates. In this policy "we", "us" and "our" refer to Warren Thomas BI; "you" refers to anyone who uses this website or contacts us through it.

For privacy questions or requests, contact warren@fcsza.com.

We only collect the information we need to respond to enquiries, schedule discovery calls, and deliver consulting services you've asked for.

• Contact details you give us — name, email, phone number, company name, role, and anything you write in a message or booking form (including the "Consulting Challenge" field on the discovery call form).
• Booking and meeting data — date, time, appointment status (booked, attended, rescheduled, cancelled), and any notes from the call.
• Engagement records — where we work together, the contracts, deliverables, invoices, and related correspondence.
• Technical data — anonymous analytics about site usage (pages viewed, approximate location, device and browser type) collected by our hosting and analytics providers. We do not use this to identify you.

We do not knowingly collect sensitive personal data (health, religion, biometrics, etc.) and we ask that you do not send it to us unless we've agreed it's necessary for an engagement.

• To reply to enquiries and schedule discovery calls.
• To deliver, manage and invoice consulting engagements you have asked us to undertake.
• To send booking confirmations, reminders, follow-up notes and relevant case studies. You can unsubscribe from marketing emails at any time via the link in any email.
• To keep records required for tax, legal, or professional obligations.
• To detect and prevent fraud, abuse, or security issues.

We rely on one or more of the following lawful bases:

• Your consent — when you submit a form, book a call, or tick a consent checkbox.
• Contract — when processing is necessary to deliver an engagement you've commissioned.
• Legitimate interests — running and improving a professional services practice (responding to leads, following up on conversations you initiated, keeping relevant records). We balance this against your rights and only rely on it where the impact on you is minimal.
• Legal obligation — where we are required by UAE law to retain or disclose information.

This policy is designed to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and to respect the rights of visitors from jurisdictions with additional protections such as the EU/UK GDPR.

We do not sell your personal data. We share it only with service providers who help us run the practice, under contracts that require them to protect it:

• CRM and email platform — GoHighLevel (the CRM behind the contact and booking forms).
• Website hosting and analytics — Vercel (site hosting) and any privacy-friendly analytics tool we add.
• Video conferencing — Google Meet or Zoom for discovery calls, as you choose at booking.
• Email delivery — the email provider behind our booking confirmations, reminders, and reply messages.
• Accounting and invoicing — for invoices and tax records during an engagement.
• Regulators and authorities — where we are legally required to disclose.

Some of the providers above store and process data outside the UAE (typically in the US or EU). Where that happens we rely on the provider's own legal safeguards (such as standard contractual clauses or equivalent measures) to protect your data to a similar standard as UAE and EU law.

• Enquiries that don't become engagements — up to 24 months from your last interaction, then deleted or anonymised.
• Active engagements — for the duration of the engagement plus 7 years after, to meet UAE record keeping and tax obligations.
• Marketing email subscribers — until you unsubscribe or after 24 months of inactivity, whichever is sooner.
• Anonymous analytics — kept indefinitely in aggregated form (no identifying information).

Depending on where you live, you have some or all of the following rights regarding your personal data:

• Access — request a copy of what we hold.
• Correction — ask us to fix anything inaccurate.
• Deletion — ask us to delete your data where we no longer have a lawful reason to keep it.
• Restriction — ask us to pause processing.
• Portability — ask for a machine-readable copy of data you provided to us.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.
• Complain — to the UAE Data Office or, if you are in the EU/UK, to your local supervisory authority.

To exercise any of these rights, email warren@fcsza.com. We'll respond within 30 days.

This site uses only the cookies and similar technologies needed to run it (such as the booking widget) and basic, privacy-friendly analytics to understand which pages are useful. We do not use cross-site tracking or advertising cookies. You can disable cookies in your browser; the booking widget may not work fully without them.

We use industry-standard measures — encryption in transit, access controls, and reputable cloud providers — to protect the data we hold. No system is perfectly secure; if you believe your data has been exposed, contact us immediately at warren@fcsza.com.

This site and our services are aimed at businesses and professionals. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date at the top tells you when. If we make material changes that affect how we use your data, we'll let you know by email or a prominent notice on the site before they take effect.

Warren Thomas BI
Ras Al Khaimah, United Arab Emirates
Email: warren@fcsza.com