Privacy Notice

Effective date: 23 August 2026

Last updated: 23 August 2026

Crimson Ridge Partners L.L.C.-FZ ("we", "us", "our") respects your privacy and is committed to protecting the personal data processed when you use our website www.crimsonridgepartners.com (the "Website"), contact us, or engage with our services.

This Privacy Notice explains how we collect, use, disclose, store, and otherwise process your personal data in accordance with applicable data protection laws, including the UAE Federal Decree-Law No. 45 of 2021 (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

Our Website is hosted and operated using Squarespace, and cookie preferences are managed through Usercentrics.


1. Who We Are

Company name: Crimson Ridge Partners L.L.C.-FZ (Meydan Free Zone — License number: 2643610.01)

Registered address: Meydan Grandstand, 6th floor, Meydan Road - Nad Al Sheba, Dubai, UAE

Email: info@crimsonridgepartners.com

For the purposes of applicable data protection laws, including the UAE Federal Decree-Law No. 45 of 2021 (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR), we act as the data controller, meaning we determine how and why your personal data is processed.


2. How We Collect Personal Data

We collect personal data in the following ways:

  • When you contact us by email or other communications (including telephone or messaging platforms)

  • When you engage with us in a pre-contractual or business development context

  • From publicly available professional sources (such as company websites or professional networking platforms) where relevant to our business activities

  • Automatically through your use of our Website (via cookies, analytics, and server logs)

Squarespace processes certain technical data automatically to host, operate, and secure the Website.


3. What Data We Collect

We collect the following categories of personal data:

  • Information you provide: Name, email address, telephone number, company name, job title, message content, and any other information you submit via email or messaging platforms.

  • Technical and usage data: IP address, device and browser information, operating system, pages visited and interactions, referring pages or sources, and cookies. Where analytics are enabled and you have provided consent where required, additional information about your interactions with the Website may be collected. This data is processed through Squarespace’s analytics functionality to help us understand Website usage and improve performance. Squarespace may also process limited technical, pageview, performance and diagnostic information as part of operating, securing and improving its platform, including where optional cookies are not enabled.

  • Communications and service-related data: Enquiry and support correspondence, communications with us in the context of potential or actual engagements, and system and access logs.


4. Why We Use Personal Data (Legal Basis)

We process personal data for the following purposes and on the following legal bases:

Purpose // Legal basis

  • Respond to enquiries and requests // Legitimate interests and, where applicable, performance of a contract or steps prior to entering into a contract

  • Manage prospective client, client, and business relationships // Legitimate interests and, where applicable, performance of a contract or steps prior to entering into a contract

  • Provide and manage our advisory services // Performance of a contract, where applicable

  • Operate, maintain, secure and technically monitor the Website // Legitimate interests

  • Improve Website performance and analytics // Consent, where required

  • Comply with legal and regulatory obligations // Legal obligation

  • Establish, exercise, or defend legal claims and enforce our rights // Legitimate interests

Where we rely on legitimate interests as our legal basis, we consider and balance our interests against your rights and interests.

We do not rely on your acceptance of our Terms and Conditions as a basis for processing personal data.


5. Squarespace as a Service Provider

Squarespace provides website hosting, infrastructure, analytics, and security services. In doing so, Squarespace may act in the following capacities:

  1. As a data processor on our behalf, processing personal data in accordance with our instructions and subject to applicable data processing terms; and

  2. As an independent data controller for its own business purposes, including platform security, fraud prevention, and product improvement, in which case Squarespace’s own Privacy Policy applies.

Please refer to Squarespace’s Privacy Policy at https://www.squarespace.com/privacy for further information on how Squarespace processes personal data in its capacity as an independent controller.


6. Who We Share Data With

We may share personal data, where applicable, with the following categories of recipients, which may act as our service providers or independent controllers, depending on the context.

  • Squarespace — website hosting, infrastructure, security, and analytics

  • Usercentrics — consent management platform (processes consent records on our behalf)

  • Cloud and IT service providers — for operational, infrastructure, communications, and secure data storage purposes

  • Professional advisors — legal, accounting, and tax advisors, subject to confidentiality obligations

  • Potential transaction counterparties, partners, or co-advisors — strictly for transaction purposes and subject to confidentiality obligations

  • Public authorities — where required by law, regulation, or court order

We do not sell or rent your personal data to third parties.


7. International Data Transfers

Personal data may be transferred to and processed in jurisdictions outside your country of residence or establishment where our service providers operate internationally, including countries within the European Union and the United States of America.

Where required by applicable data protection laws, we take appropriate steps to ensure that personal data is protected, including through the contractual safeguards implemented by our service providers, Standard Contractual Clauses, or equivalent mechanisms.


8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined above or as required by applicable law.

Retention periods may vary depending on the type of data, the nature of our relationship with you, and applicable legal or regulatory requirements. For example, we may retain:

  • communications and business enquiries for a limited period to manage follow-up and potential engagements;

  • client-related data for the duration of an engagement and for such further period as required by applicable law, which may be up to 7 years, or longer where required by specific legal or regulatory obligations; and

  • technical and usage data in accordance with our operational and security needs.

Upon expiry of the applicable retention period, personal data will be deleted or anonymized in accordance with our internal processes.


9. Your Rights

Depending on your location and applicable data protection laws, you may have rights in respect of your personal data, including the following. This list is not exhaustive and additional rights may apply under the laws of your jurisdiction.

  • Access — the right to request a copy of the personal data we hold about you

  • Rectification — the right to request correction of inaccurate or incomplete personal data

  • Erasure — the right to request deletion of your personal data, subject to applicable legal obligations

  • Restriction — the right to request that we restrict processing of your personal data in certain circumstances

  • Portability — the right to receive your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means

  • Objection — the right to object to processing based on legitimate interests, or to processing for direct marketing purposes

  • Withdrawal of consent — the right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal

  • Automated decision-making — the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, where applicable

  • Right to lodge a complaint — If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection supervisory authority. If you are located in the UAE, you may contact the UAE Data Office. We encourage you to contact us first so that we can address your concerns directly before you contact a supervisory authority

To exercise any of your rights, please contact us at info@crimsonridgepartners.com. We may require verification of your identity before processing your request. We will respond within the timeframe required by applicable law.


10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience and analyze Website traffic.

Cookie preferences are managed through our Usercentrics consent management platform. You may review, withdraw, or change your cookie preferences at any time using the cookie settings tool available on the Website. You may also manage cookies through your browser settings, although disabling certain cookies may affect Website functionality.

Analytics and performance cookies, such as Squarespace Analytics, are used only with your prior consent, which you may withdraw at any time.

Full details of the cookies we use, their purposes, and how to manage them are set out in our Cookie Policy, which is available on our Website.


11. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These measures include internal access controls, data minimization practices, and encryption where appropriate.

We also require our service providers to implement appropriate technical and organizational security measures in accordance with applicable data protection laws.

No method of transmission over the internet is completely secure. While we take appropriate steps to protect personal data, we cannot guarantee absolute security.


12. Children

Our Website and services are not directed at or intended for individuals under the age of 18. We do not knowingly collect personal data from such individuals.

If we become aware that personal data of an individual under the age of 18 has been submitted to us, we will take appropriate steps to delete such data. If you believe we may have inadvertently collected such data, please contact us at info@crimsonridgepartners.com.


13. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our data processing activities, applicable laws, or our services. Where a change materially affects your rights or the processing of your personal data, we will provide reasonable prior notice, where practicable, by prominent notice on the Website, unless such change is required to be implemented immediately for legal, regulatory, operational or security reasons.

The updated Privacy Notice will always be available on our Website. The effective date at the top of this Notice indicates when it was last revised. Continued use of the Website following any such update constitutes acknowledgement of the revised Notice.


14. Contact

For any privacy-related questions, requests, or concerns, including requests relating to your personal data or the exercise of your rights:

Email: info@crimsonridgepartners.com

Address: Crimson Ridge Partners L.L.C.-FZ, Meydan Grandstand, 6th floor, Meydan Road - Nad Al Sheba, Dubai, UAE