Privacy & Cookies Policies

Last updated: October 1, 2026

1. Who We Are

This Privacy Policy is issued jointly by Cedar Management Consulting International ME-FTZ LLC, registered in the United Arab Emirates, and Cedar Management Consulting Pvt. Ltd., registered in India (together, "Cedar", "we", "us", or "our").

Both entities are joint controllers of the personal data collected through this website (cedar-consulting.com). Which entity acts as the primary controller depends on the region you are accessing the site from and the context in which your data is processed.

For all privacy-related enquiries, email info@cedar-consulting.com with the subject line "Privacy Request".

2. Scope

This policy covers all personal data collected through cedar-consulting.com, including the "Get in Touch" contact form, cookies and analytics technologies, and any electronic communications with us. It applies to all visitors regardless of location.

Third-party websites linked from this site have their own privacy policies. We recommend reading those before sharing your personal data with them.

3. What We Collect

Data you provide directly. When you submit the "Get in Touch" form, we collect your name, designation, work email address, company name, phone number, industry, region, and message.

Data collected automatically. When you visit our website, we collect your IP address (anonymised where technically feasible), browser type and version, operating system, referring URL, pages visited, time on page, navigation path, device type, and screen resolution. This data is collected through cookies and similar technologies described in Section 9.

Data we do not collect. We do not knowingly collect personal data from anyone under the age of 18. We do not collect sensitive personal data such as biometric identifiers, genetic data, health information, religious or political affiliations, or financial account details.

4. How and Why We Use Your Data

We process your personal data on the basis of legitimate interest, except where consent is specifically required by applicable law (for example, for placing non-essential cookies). Our legitimate interests are: responding to business enquiries, improving our website, and reaching relevant professional audiences.

Specifically, we use your data for the following purposes:

• Responding to enquiries. When you submit the contact form, we use the information you provide to respond to your business enquiry. Legal basis: legitimate interest.
• Website analytics. We use analytics tools to understand how visitors use our site so we can improve content and user experience. This uses browsing data such as IP address, pages visited, and session duration. Legal basis: your consent, given through the cookie banner.
• Advertising and retargeting. We use tracking technologies to build audience segments and serve relevant advertisements to professionals interested in management consulting. This uses pseudonymised identifiers collected by our advertising partners. Legal basis: your consent, given through the cookie banner.
• Business communications. Where you have been in prior business contact with us, we may send you information about our services, publications, or events. Legal basis: legitimate interest (soft opt-in for existing contacts), or consent where required by local law.

We do not use any automated decision-making or profiling that produces legal or similarly significant effects on individuals. We do not use artificial intelligence tools on this website for visitor interaction, scoring, or personalisation.

5. Who We Share Your Data With

We share personal data only with service providers who need it to perform services on our behalf, and each is bound by contractual data-processing obligations. These include:

• CRM and email platform (Zoho Corporation, with servers in India): for managing enquiries and sending business communications. Receives contact form submissions.
• Web analytics (Google Analytics 4): for website usage analysis. Receives pseudonymised browsing data and IP address.
• Advertising and audience targeting (LinkedIn and Google): for retargeting and audience segmentation. Receives pseudonymised identifiers and browsing behaviour on our site.

We do not sell your personal data. We do not share your contact details with unrelated third parties for their own marketing purposes. We may disclose personal data where required by law, regulation, court order, or governmental authority.

6. International Data Transfers

Cedar operates globally and uses service providers in multiple countries. Your personal data may be transferred to, stored in, or processed in jurisdictions outside your country of residence.

When we transfer personal data across borders, we put appropriate safeguards in place. These may include standard contractual clauses approved by the relevant authority, adequacy decisions where available, or binding data-processing agreements that require our service providers to protect your data to a standard equivalent to the laws of your jurisdiction.

To request details of the safeguards we use for a specific transfer, contact us at info@cedar-consulting.com.

7. How Long We Keep Your Data

We keep your personal data only for as long as reasonably necessary to fulfil the business purpose for which it was collected, and then securely delete or anonymise it. What counts as "reasonably necessary" depends on the nature of the data and the purpose: for example, contact form submissions are retained for as long as there is an ongoing or potential business relationship, while analytics and advertising data is retained according to the default periods set by the respective platform providers.

When data is no longer needed for any legitimate business or legal purpose, it is deleted within 30 days. Where data is subject to a legal hold or regulatory requirement, we retain it for the mandated period and delete it thereafter.

8. Your Rights

Depending on your location, applicable data protection law gives you rights over your personal data. These typically include the right to access a copy of the data we hold about you, correct inaccurate or incomplete data, request deletion where there is no lawful reason for us to continue processing it, request that we suspend processing in certain circumstances, receive your data in a structured and machine-readable format and have it transferred to another controller where feasible, object to processing based on legitimate interest (including direct marketing, which we will stop immediately upon objection), and withdraw consent at any time where processing is consent-based (such as cookies). Withdrawal does not affect the lawfulness of processing carried out before you withdrew. You can change your cookie preferences at any time by clicking "Cookie Settings" in the website footer.

Where applicable law provides additional rights (such as the right to nominate someone to exercise your rights on your behalf), those rights also apply.

How to exercise your rights: Email info@cedar-consulting.com with the subject line "Privacy Rights Request". We will verify your identity and respond within 30 days. If your request is complex or we receive a high volume of requests, we may extend this by up to 60 days and will let you know within the initial window. There is no fee, though we may charge a reasonable administrative fee for requests that are manifestly unfounded or excessive.

9. Cookies

A cookie is a small text file placed on your device by a website. We use cookies and similar technologies (such as tracking pixels) for three purposes:

• Strictly necessary cookies enable basic site functionality like session management and security. These cannot be disabled and do not require your consent.
• Analytics cookies help us measure website traffic, page views, and user behaviour so we can improve the site. These require your consent.
• Marketing and advertising cookies allow us to build audience segments and serve relevant retargeted advertisements. These require your consent.

When you first visit our website, a consent banner will ask you to accept or reject non-essential cookies. Analytics and marketing cookies are not loaded until you actively accept them. If you reject them or ignore the banner, only strictly necessary cookies will be placed on your device.

You can change your cookie preferences at any time by clicking "Cookie Settings" in the website footer. You can also manage cookies through your browser settings; refer to your browser's help section for instructions. Disabling all cookies may affect your experience on our site.

10. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, access controls, and regular review of our security practices. No method of internet transmission or electronic storage is completely secure, so while we take commercially reasonable steps, we cannot guarantee absolute security.

11. Data Breach Notification

If a personal data breach occurs that is likely to pose a risk to your rights, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, where required by applicable law. We will also notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights. All breaches are documented along with the remedial actions taken.

12. Complaints

If you are unhappy with how we handle your personal data, please contact us first at info@cedar-consulting.com so we can try to resolve your concern. You also have the right to lodge a complaint with the data protection authority in your jurisdiction. We comply with the data protection laws and cooperate with the regulatory authorities of all jurisdictions in which we operate.

13. Links to Other Websites

This website contains links to third-party websites. We are not responsible for their privacy practices or content. We encourage you to read the privacy policy of every website you visit.

14. Social Media

Our website may allow you to connect with us through social media platforms. If you interact with us through any such platform, the platform operator may collect data about you in accordance with its own privacy policy. We are not responsible for the data practices of social media platforms and recommend reviewing the privacy settings and policies of each platform you use.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and make reasonable efforts to notify you, for example by placing a notice on our website. We encourage you to review this page periodically.

16. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, email info@cedar-consulting.com with the subject line "Privacy Request".