Terms of Service

1. Acceptance of Terms & Scope of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client", "User", or "you") and FyrahPrivacy ("FyrahPrivacy", "we", "us", or "our"), having its operating base in Dubai Silicon Oasis, Dubai, UAE.

By accessing our website (fyrahprivacy.com), using our self-guided UAE PDPL Readiness Diagnostic Tool, downloading our blueprints, or engaging in a productized compliance sprint (such as the Rapid Baseline Sprint, Enterprise & Procurement Shield Sprint, or Modular Vendor DPA Packs), you acknowledge that you have read, understood, and agree to be bound by these Terms.

2. Nature of Advisory & Statutory Legal Disclaimer

3. Sprint Engagements & Fixed-Fee Deliverables

All professional advisory engagements are executed under standardized, fixed-price Master Services Agreements (MSAs) or Statements of Work (SOWs):

• Sprint Scope & Timeline: Implementation sprints (such as the 14-day Rapid Baseline or 30-day Enterprise Shield) commence upon receipt of the agreed deposit and completed data flow discovery intake questionnaire.
• Client Cooperation: Timely completion depends on the Client providing reasonable access to system administrators, third-party vendor rosters, and current data asset inventories. Delays caused by internal Client withholding of essential information will extend delivery timelines proportionally.
• Final Deliverables: Deliverables (Article 7/8 RoPA registers, bilingual notices, breach playbooks) are transferred to the Client in editable and standardized formats upon receipt of final invoice settlement.

4. Intellectual Property Rights & Artifact Licensing

FyrahPrivacy Core IP: FyrahPrivacy retains all ownership, copyright, and proprietary rights in our underlying methodologies, proprietary audit questionnaires, risk-scoring algorithms, website content, and standard boilerplate contract modules.

Client Deliverables License: Upon full settlement of fees for a specific sprint, FyrahPrivacy grants the Client a perpetual, irrevocable, worldwide, non-exclusive license to use, modify, adapt, and internalize the custom-drafted RoPA registers, vendor DPAs, privacy notices, and runbooks exclusively for the Client's internal business operations. Reselling, sub-licensing, or commercially redistributing FyrahPrivacy's templates to third-party clients without written permission is strictly prohibited.

5. Confidentiality & Data Security (MNDA by Default)

We treat all information regarding your business operations, software architecture, technical vendors, employee records, and client data flows with the highest degree of professional confidentiality:

• Neither party will disclose any confidential proprietary or operational technical data shared during discovery or sprint delivery to any unauthorized third party.
• FyrahPrivacy enforces strict zero-trust access controls, multi-factor authentication, and encrypted communications across all operational systems.
• Upon request, we execute standardized bilateral Mutual Non-Disclosure Agreements (MNDAs) prior to commencing any technical discovery session.

6. Invoicing, Payment Terms & Value Added Tax (VAT)

Fixed sprint fees and Fractional DPO retainers are billed in United Arab Emirates Dirhams (AED) unless explicitly quoted otherwise in writing:

• Sprint Invoicing: Standard sprints are invoiced on a milestone basis (typically 50% upon contract execution and 50% upon final deliverable handover).
• Fractional DPOaaS: Retainers are billed monthly in advance and require a six (6) month initial commitment, renewing quarterly thereafter.
• UAE VAT: All published fees are exclusive of UAE Value Added Tax (VAT) where applicable, which will be itemized on official tax invoices in compliance with UAE Federal Tax Authority (FTA) regulations.

7. Limitation of Liability & Warranty Disclaimers

To the maximum extent permitted under applicable UAE laws:

• FyrahPrivacy provides its advisory services, website diagnostic tools, and templates on an "as-is" and "as-available" basis without warranties of absolute regulatory immunity. While our deliverables are designed to align strictly with Federal Decree-Law No. 45 of 2021, regulatory enforcement decisions and official audits remain within the sovereign discretion of the UAE Data Office and relevant supervisory authorities.
• In no event shall FyrahPrivacy, its directors, or its specialists be liable for indirect, consequential, punitive, or special damages, including loss of business revenue, missed enterprise contracts, or business interruption.
• FyrahPrivacy's aggregate financial liability arising out of or related to any sprint engagement shall be strictly capped at the total amount paid by the Client to FyrahPrivacy for the specific service engagement giving rise to the claim.

8. Governing Law & Dispute Jurisdiction

These Terms and any non-contractual obligations arising out of them shall be governed by and construed in accordance with the commercial laws of the United Arab Emirates as applied in the Emirate of Dubai.

Any dispute, controversy, or claim arising out of or in connection with these Terms or the services provided by FyrahPrivacy shall first be submitted to good-faith commercial mediation. If unresolved within thirty (30) business days, the dispute shall be subject to the exclusive jurisdiction of the competent civil courts of Dubai, United Arab Emirates.

9. Contact & Legal Notices

All formal notices, commercial inquiries, or contract questions regarding these Terms of Service should be directed to: