Introduction
DMDE LLC (“DMDE,” “we,” “us” or “our”) respects your privacy and is committed to protecting the personal data of visitors to DMDE.LLC. This Privacy Policy explains how we collect, use, disclose and safeguard personal information when you access our website, contact us or use our services. DMDE is a Qatar‑based defence‑sector consultancy offering programme and capability development, supply‑chain advisory, digital transformation, AI and cyber services. We operate in accordance with the Qatar Personal Data Privacy Protection Law (Law No. 13 of 2016) and its amendments, including Law No. 11 of 2025, as well as other applicable data‑protection regulations.
Transparency and clarity are core principles of effective privacy policies. Guidance from privacy‑compliance authorities stresses that a privacy policy should inform individuals about the information collected and why it is collected, how it is used and disclosed, and the rights individuals have over their personal data[1]. The Qatar law further requires organisations to establish policies for data collection, retention, processing, sharing and deletion; ensure individuals are informed through clear privacy notices; obtain explicit consent when required; and implement processes to support data‑subject rights[2]. In addition, organisations must implement technical and organisational measures to protect personal data[2] and may face penalties for publishing or circulating images or videos of individuals without consent[3]. Our Privacy Policy reflects these best‑practice requirements and may be updated periodically to remain compliant.
By using DMDE.LLC, submitting information via our forms, engaging with our marketing communications or otherwise providing personal data to us, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or services.
Definitions
Personal Data – information that identifies or can reasonably be used to identify a living individual. Examples include names, email addresses, phone numbers and job titles. DMDE may also collect “Usage Data” such as IP addresses, browser types, device identifiers and pages visited[4].
Sensitive Personal Data – certain categories of personal data (e.g., health, financial or biometric information) that require heightened safeguards and explicit consent under Qatari law[5].
Usage Data – information collected automatically through your device when you access our website, such as your IP address, browser type, the pages you view and the time spent on those pages[4].
Cookies – small text files placed on your device that allow us to recognise your browser or device, maintain session information, understand how our website is used and improve your browsing experience. For more information on our use of cookies, see the Cookies and Tracking section.
Data Controller – DMDE LLC, which determines the purposes and means of processing personal data.
Data Subject – any natural person whose personal data is being processed by DMDE.
Information We Collect
- Information you provide directly
- Contact details: When you contact us via our enquiry forms or engage our services, we collect personal identifiers such as your first and last name, company name, job title, email address and phone number. Collecting this information helps us understand your requirements and respond appropriately.
- Communications: If you correspond with us by email or other channels, we may retain the content of your communications and our responses in order to handle your enquiry, deliver services or manage our relationship with you.
- Business information: When requesting proposals, job applications or other services, you may provide information about your organisation, project requirements or supply‑chain details. We collect only the information necessary to provide our consulting or advisory services.
- Consent: In situations where law requires explicit consent (e.g., subscribing to marketing newsletters or providing sensitive personal data), we will clearly ask for your affirmative consent and you may withdraw that consent at any time.
- Information collected automatically
- Usage data: Our systems collect certain technical data automatically when you access our website, including your IP address, browser type, operating system, referring pages, pages viewed and the dates/times of your visits[4]. This data is used to administer and improve our website and is aggregated or pseudonymised wherever possible.
- Cookies and similar technologies: We use cookies and similar tracking technologies to operate our website, analyse traffic and provide features such as remembering your preferences. You can choose which cookies to allow through our cookie‑consent tool.
- Analytics: We may use analytics providers (e.g., Google Analytics or similar services hosted in Qatar) to understand how visitors interact with our website. These services collect aggregated statistics but do not identify you personally unless you consent to analytics cookies.
- Information from third parties
- Service providers: We may receive information about you from service providers that help us operate our business (e.g., hosting providers, marketing platforms, analytics services). These third parties may collect or process data on our behalf under contractual confidentiality and security obligations.
- Public sources: We may obtain publicly available information about your business (e.g., corporate contact details) in order to offer or deliver our advisory services.
We do not knowingly collect personal data from minors or persons under the age of 18. If you believe that a child has provided us with personal information, please contact us and we will delete the data promptly.
How We Use Personal Data
We use personal data only for legitimate business purposes and in accordance with applicable law. Our primary uses include:
- Providing and improving our services: To respond to your enquiries, deliver consulting or advisory services, assess project requirements and tailor our solutions to your needs. This includes sharing your contact details with relevant DMDE team members to coordinate engagement.
- Business administration: To manage client relationships, invoice clients, comply with contractual obligations and maintain records of services provided.
- Communications: To send you information about our services, insights and events that may interest you. We will obtain your consent for marketing communications where required and you may opt out at any time.
- Website operation and analytics: To operate and secure our website, analyse usage patterns, improve user experience, monitor performance and detect fraudulent activities. This may involve aggregated or pseudonymised analytics data.
- Compliance with legal obligations: To comply with applicable laws and regulations, including the Personal Data Privacy Protection Law, and to respond to lawful requests from regulators or law‑enforcement authorities. Under the Qatari data‑protection framework, organisations must obtain explicit consent for sensitive personal data, inform individuals about data processing, and support access, correction, deletion and objection rights[2][5].
- Protection of rights: To protect the rights, safety or property of DMDE, our clients, our employees or others; this may include investigating or preventing fraudulent transactions and ensuring compliance with law. Article 8 (bis) of Law No. 11 of 2025 imposes criminal penalties for publishing or circulating images of individuals without their consent[3]; DMDE does not publish photographs or video clips of identifiable individuals without prior written permission.
We will never sell personal data to third parties, and we will only process personal data for the purposes disclosed in this Privacy Policy or for compatible purposes for which you have given consent.
Legal Bases for Processing
Under the Qatar Personal Data Privacy Protection Law and other applicable regulations, we rely on the following legal bases to collect and process personal data:
- Consent: When you voluntarily provide personal data through our contact forms or subscribe to marketing communications, you consent to our processing of that data. Consent is required for sensitive personal data and optional cookies. You may withdraw your consent at any time by contacting us.
- Contractual necessity: We process personal data as necessary to perform our contractual obligations to you or take steps at your request prior to entering into a contract, such as providing proposals or consulting services.
- Legitimate interests: We may process personal data for our legitimate business interests (e.g., operating and improving our website, communicating with clients, ensuring cybersecurity) provided these interests are not overridden by your data‑protection rights. We conduct balancing assessments to ensure your rights are respected.
- Legal obligations: We process personal data as required by law, such as record‑keeping, tax and accounting obligations, or responding to lawful requests from governmental authorities.
Sharing and Disclosure of Personal Data
We may share personal data with trusted third parties under confidentiality agreements for the following purposes:
- Service providers: We use third‑party service providers for website hosting, email communication, analytics, customer relationship management and cybersecurity. These providers process personal data on our behalf and are contractually obligated to implement appropriate security measures.
- Professional advisers: We may share personal data with legal counsel, auditors, insurers or other professional advisers when necessary for the establishment, exercise or defence of legal claims or to obtain professional advice.
- Business transfers: In the event of a merger, acquisition or other corporate transaction, personal data may be transferred to the acquiring entity under strict confidentiality and security obligations.
- Authorities: We may disclose personal data to competent authorities or other third parties when required by law or to protect the rights, safety or property of DMDE or others.
We do not rent, sell or otherwise disclose personal data for commercial exploitation. If we ever intend to share personal data with a third party for purposes not described in this policy, we will notify you and obtain your consent where required.
International Data Transfers
DMDE is based in Qatar and stores most data within the State of Qatar. However, some of our service providers or affiliates may be located in other jurisdictions. When personal data is transferred outside Qatar, we ensure that appropriate safeguards are in place to protect your data, such as:
- Obtaining your explicit consent before transferring data to jurisdictions without an adequate level of protection[5].
- Entering into contractual agreements with the recipient that require compliance with Qatari data‑protection standards.
- Transferring data only to countries recognised as having adequate data‑protection frameworks or to organisations certified under internationally recognised schemes.
You have the right to request information about international transfers of your personal data and the safeguards applied.
Cookies and Tracking
We use cookies and similar technologies to operate our website, remember your preferences and understand how visitors interact with our content. Cookies can be necessary (essential for website functionality), functional (supporting features like language preferences), analytical (providing aggregated statistics about traffic and usage) or advertising (delivering personalised content). Our cookie‑consent tool allows you to choose which categories of cookies to enable or disable. Necessary cookies do not require your consent; non‑essential cookies will only be activated with your explicit consent[1].
You can manage cookie settings via our website’s cookie‑consent banner or through your browser settings. Disabling some cookies may affect the functionality of certain parts of the site.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including satisfying legal, accounting or reporting requirements. Factors that influence our retention periods include:
- The nature and sensitivity of the personal data.
- The purpose for which we collected the data and whether we can achieve those purposes through other means.
- Legal or regulatory obligations requiring us to retain data for specific periods (e.g., financial records and contract documentation).
When personal data is no longer needed, we securely erase or anonymise it in accordance with our data‑retention and deletion policies[2].
Data Security
Protecting your personal data is a priority for DMDE. We implement appropriate technical and organisational measures to safeguard personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:
- Encrypting sensitive data during transmission and at rest.
- Implementing access controls and authentication mechanisms to ensure only authorised personnel can access personal data.
- Conducting regular risk assessments and data‑protection impact evaluations[2].
- Monitoring systems for vulnerabilities, breaches and unauthorised activities.
- Maintaining incident‑response procedures and breach‑notification protocols in line with Qatari law.
In the event of a personal data breach likely to result in high risk to your rights and freedoms, we will notify you and the relevant authorities without undue delay, as required by law[5].
Your Rights
Under Qatari data‑protection law and other applicable regulations, individuals have several rights regarding their personal data. These include:
- Right of access: You may request confirmation that we hold personal data about you and obtain a copy of such data.
- Right to rectification: You can request correction of inaccurate or incomplete personal data.
- Right to erasure (right to be forgotten): You may request that we delete your personal data where it is no longer necessary, when you withdraw consent, or when required by law.
- Right to object: You can object to the processing of your personal data for direct marketing or other purposes based on legitimate interests. We will cease processing unless we have compelling legitimate grounds or a legal obligation to continue.
- Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Right to data portability: You can request that we provide your personal data in a structured, commonly used and machine‑readable format or transmit it to another controller, where technically feasible.
- Right to restrict processing: You may request that we suspend processing of your data (e.g., while we verify its accuracy or pending resolution of an objection).
- Right to lodge a complaint: You have the right to lodge a complaint with the Qatar National Cyber Security Agency (or other relevant authority) if you believe your data has been processed in violation of applicable law.
To exercise any of these rights, please contact us using the details in the Contact Us section. We will respond to your request within the timeframe required by law and may need to verify your identity before processing your request.
Third‑Party Links
Our website may contain links to third‑party websites, plugins or services that are not operated or controlled by DMDE. We do not control and are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of every site you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data‑processing practices, regulatory requirements or technological developments. When we make changes, we will revise the “Last Updated” date at the beginning of the policy and, where appropriate, notify you by posting a prominent notice on our website. Continued use of our services after such modifications constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data‑subject rights or wish to make a complaint, please contact:
DMDE LLC
West Bay, Doha, State of Qatar
Email: info@dmde.llc
Telephone: +974 0000 0000
When contacting us, please provide sufficient information to allow us to identify you and respond to your request. We will treat any request or complaint confidentially and will respond as soon as practicable.
Last updated: 2 February 2026
[1] Privacy Policy Template: Best Practices and Examples
[2] Qatar Personal Data Privacy Protection Law – Centraleyes
[3] Qatar Introduces New Penalties for Privacy Violations – Sultan Al-Abdulla & Partners
[4] Privacy Policy
[5] Qatar Data Protection Law Compliance Explained | VComply
