Last Updated: May 2026
A&T Aetos Co. (“the Company,” “we,” “us,” or “our”) understands the significance of your privacy and is deeply committed to protecting your Personally Identifiable Information (PII). This Privacy Notice describes our practices regarding the collection, use, structuring, storage, and disclosure of PII collected by us when you interact with our website, engage our Enterprise Architecture and Talent Advisory services, or visit our operational offices (opening soon).
1. TO WHOM DOES THIS PRIVACY NOTICE APPLY
This notice applies directly to the processing of PII collected by us when you:
- Visit or interact with our corporate digital domains.
- Inquire about or engage our Business Consulting, ERP Selection, or Active Project Oversight frameworks.
- Submit profiles, resumes, or background parameters for consideration under our Sovereign Placement and high-velocity recruitment pipelines.
- Visit our physical office premises.
2. CATEGORIES OF DATA WE COLLECT
We collect personal information within a strictly necessary scope to achieve the performance of our operations after obtaining your explicit consent.
A. Information You Provide Directly to Us
While using our services or communicating with our team, we may ask you to provide certain PII which can be used to contact or identify you, including but not limited to:
- Identity Data: First name, last name, corporate designation, and company name.
- Contact Data: Corporate email address, physical postal address, and telephone number.
- Executive Talent Data: Resumes, professional backgrounds, employment credentials, and compensation histories submitted for active headhunting engagements.
- Office Visitor Data: Name, phone number, and official government-issued identification numbers required for building security upon visiting our physical locations.
B. Automatic Usage Data & Cookie Technologies
We automatically collect technical data regarding how our digital services are accessed. This Usage Data includes:
- Your computer’s Internet Protocol (IP) address, browser type, browser version, and specific pages visited.
- The time and date of your visit, time spent on individual pages, and related diagnostic metrics.
- Cookies and tracking pixels utilized to optimize user navigation and analyze web traffic metrics.
C. Third-Party Information Sources
From time to time, we may receive PII about you from permissible third-party sources, such as public databases, business registries, and professional social media platforms. We verify that these entities are legally permitted or required to disclose your records before integration.
3. PURPOSES AND LEGAL BASES FOR PROCESSING DATA
A&T Aetos Co. processes your PII based on distinct legal bases in accordance with global data protection laws (including the UAE PDPL, EU GDPR, and US state frameworks):
- Performance of a Contract: To carry out our operational duties, oversee client-side deployments, and manage project lifecycles.
- Legitimate Business Interests: To monitor and analyze corporate website performance, gather analytical data to improve our service deployment, and protect our corporate property.
- Consent: Where you have granted explicit authorization, such as entering our executive search talent database or opting into corporate strategic briefings.
- Legal Obligation: To satisfy statutory compliance, protect the personal safety of our personnel, or defend against clear legal liability.
4. DISCLOSURE AND INDEPENDENCE OF DATA
A&T Aetos Co. maintains strict vendor neutrality. We never sell personal or corporate data to third parties for financial gain or commercial value.
We may share your PII exclusively under the following stringent conditions:
- Authorized Service Providers: We may share limited data with verified contractors who support our direct operations (e.g., secure cloud hosting, internal analytics). These entities are bound by rigid confidentiality obligations and are legally restricted from using your data for any separate objective.
- Corporate Restructuring: If involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide clear advance notification prior to any transfer taking effect.
- Legal Mandates: We will disclose data if required by law or in direct response to valid requests by public authorities, such as a court or regulatory agency.
5. INTERNATIONAL DATA TRANSFERS
A&T Aetos Co. is strategically anchored in Dubai, UAE, and operates across global markets. Your PII may be transferred to—and maintained on—cloud-based infrastructure located outside of your state, country, or jurisdiction where data governance laws may vary.
The Company takes all steps reasonably necessary to ensure that your data is handled securely and in accordance with this Privacy Notice. No transfer of your PII will occur unless adequate controls, corporate safeguards, and data processing agreements are thoroughly established.
6. RETENTION AND DATA MINIMIZATION
We practice deliberate data minimization. Your PII is retained only for as long as necessary to fulfill the operational, consulting, or talent advisory purposes explicitly outlined in this notice. We securely erase or anonymize records when they are no longer required for contractual deliverables, internal analytical integrity, or statutory compliance obligations.
7. MULTI-LAYERED SECURITY MEASURES
To safeguard your enterprise information from unauthorized access, alteration, disclosure, or accidental destruction, we implement robust technical and organizational security mechanisms, including:
- Full encryption of data during transit (HTTPS).
- Advanced encryption of data at rest across cloud assets.
- Restricted access protocols limited to authorized partners following multi-factor authentication.
- Enterprise-grade firewalls, anti-malware software, and continuous data loss prevention (DLP) monitoring.
8. YOUR STATUTORY PRIVACY RIGHTS
In accordance with international data protection laws, you hold clear entitlements regarding how we manage your information. You have the right to request:
- Access & Disclosure: The right to request disclosure of what personal records we hold about you.
- Correction: The right to request completion or immediate correction of inaccurate or incomplete details.
- Deletion (Right to be Forgotten): The right to request that we permanently delete your PII from our servers and prompt our subcontractors to do the same.
- Restriction & Objection: The right to object to or restrict specific processing activities or withdraw your consent at any time without impacting prior lawfulness.
To exercise any of your statutory privacy protections, please contact us directly at: info@at-aetos.com.