This section explains how CompassPoint Consulting obtains, records, and manages consent for personal data processing when someone contacts the business through the website. It reflects the standards described under the UK GDPR and the UAE Personal Data Protection Law.
I consent to CompassPoint Consulting processing the personal data I submit through this form for the purpose of responding to my enquiry, in accordance with the Consent Policy and Privacy Policy. I understand I can withdraw this consent at any time.
1. Our Commitment to Your Choice
CompassPoint operates on a “Consent by Choice” basis. The policy explains how permission is collected, how users can manage that permission later, and clarifies that consent is only one lawful basis among others such as contractual necessity, legal obligation, and legitimate interests in the UK.
2. How Consent Is Obtained
- Active: users must take a clear action such as checking a box or clicking accept.
- Granular: different activities require separate permissions.
- Informed: the purpose of data use is explained before consent is given.
3. Your Rights of Control
- The right to withdraw consent at any time.
- The right to object to direct marketing.
- The right to review a record of when and how consent was provided.
4. Age of Consent
By interacting with consent prompts, the visitor confirms they are at least 18 years old. The policy states that CompassPoint does not intentionally collect or process data from individuals under 18 without verified parental or legal guardian consent.
5. Categories of Consent
- Strictly Necessary: essential for website functionality and does not require consent.
- Functional / Preferences: stores settings such as language or region.
- Performance / Analytics: helps improve the website by understanding usage patterns.
- Marketing & Tracking: supports personalized offers and advertising measurement.
- Session Recording: records site interactions to identify usability issues and improve the experience.
6. Cross-Border Data Processing
The policy states that data may be processed in both the United Kingdom and the United Arab Emirates. It also notes that international transfers are handled through the mechanisms described in the Privacy Policy, including contractual safeguards and adequacy-based approaches, rather than relying on consent alone.
7. How to Change Your Mind
- Use the “Cookie Settings” or “Privacy Preferences” link in the website footer.
- Use the unsubscribe link in any email.
- Contact the team through the website contact form using the subject line “Consent Withdrawal.”
8. Evidence of Consent
CompassPoint maintains a secure, time-stamped log of consent actions. The record includes the identity of the individual, when consent was given, what information they were shown at the time, the method used to capture consent, and whether that consent was later withdrawn. Those records are retained for at least three years after consent is withdrawn or the relationship ends.
9. Changes to This Policy
The policy may be updated to reflect legal, regulatory, or business changes. Where changes are material, CompassPoint will give notice at least 30 days in advance, and where a change affects processing that previously depended on consent, fresh consent will be requested before implementation.
