Privacy Policy
Grey Gulf ("Grey Gulf", "we", "us") respects your privacy. This notice explains how we handle personal data collected through this website. It is written to meet the requirements of the data protection laws that may apply to visitors, including the UK General Data Protection Regulation and Data Protection Act 2018, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the ADGM Data Protection Regulations and the DIFC Data Protection Law.
Who we are
This website is operated by Grey Gulf, a private investment office and capital holding company based in the United Arab Emirates. Grey Gulf is the controller of any personal data collected through this site. For any privacy question, or to exercise your rights, contact enquire@greygulf.com.
What we collect
This is a brochure website. You are not required to register or submit personal data to view it, and it has no forms or accounts. We collect personal data in only two ways. If you contact us by email, we receive the information you choose to share, such as your name, email address and the contents of your message. Separately, our hosting provider automatically logs limited technical data (such as IP address, browser type and pages requested) to operate and secure the site.
The site loads its typefaces from Google Fonts. When it does, your browser requests the font files from Google's servers, which receive standard technical data such as your IP address. No other third-party content, tracking or analytics is used.
How we use it and why it is lawful
We use what you send us to respond to your enquiry and to keep a record of our correspondence, and we use technical log data to keep the site secure and functioning. Where the UK GDPR applies, our legal basis is our legitimate interests in responding to enquiries, maintaining business records and securing the site, or your consent where required. Where the UAE PDPL or the ADGM or DIFC regimes apply, we rely on the equivalent lawful grounds under those laws, including legitimate interest and your contact with us at your own initiative.
Sharing
We do not sell personal data, and we do not use it for marketing. We share it only with the service providers who host, deliver and secure this site and our email, acting on our instructions, and where disclosure is required by law or a competent authority.
International transfers
Because we operate from the United Arab Emirates and our service providers operate globally, personal data may be processed outside your country, including transfers between the UAE and the United Kingdom. Where a transfer is restricted by applicable law, we rely on appropriate safeguards, such as transfer mechanisms and contractual clauses recognised under the relevant regime.
Retention
We keep enquiry correspondence for as long as the matter and our legitimate business records require, then delete it. Technical logs are retained only for the short periods our providers need for security and operations.
Security
We take appropriate technical and organisational measures to protect personal data, proportionate to the limited data this site handles.
Your rights
Subject to the law that applies to you, you may have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable form, and to withdraw any consent you have given. To exercise any of these rights, contact enquire@greygulf.com. We will respond within the timeframes the applicable law requires.
You also have the right to complain to a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO). In the United Arab Emirates it is the UAE Data Office, or the ADGM Office of Data Protection or the DIFC Commissioner of Data Protection where those regimes apply.
Children
This site is not directed at children and we do not knowingly collect personal data from them.
Updates
We may update this notice from time to time; the current version is always posted here, with the date below.
Last updated July 2026