Privacy Policy

This Privacy Policy describes how Braveheart L.L.C-FZ, trading as Indexed ("we", "us", or "our"), collects, uses, and protects personal data in connection with our website at joinindexed.com (the "Site") and our services.

Braveheart L.L.C-FZ is the data controller for personal data collected through the Site. Our registered address is 6th Floor, Meydan Grandstand, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

We collect the following categories of personal data:

We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately.

We collect personal data through the following means:

• Directly from you — when you fill in a contact or enquiry form, book a strategy call, subscribe to our newsletter, or correspond with us by email.
• Automatically — when you browse the Site, we collect technical and usage data via cookies and similar tracking technologies.
• From third parties — including analytics providers (e.g. Google Analytics), advertising platforms (e.g. Meta, LinkedIn), and CRM tools we use to manage client relationships.

We use your personal data for the following purposes:

We use cookies and similar technologies to enhance your experience on the Site, analyse traffic, and support our marketing activities. Cookies are small text files stored on your device.

We use the following types of cookies:

• Strictly necessary cookies — required for the Site to function and cannot be switched off.
• Analytics cookies — help us understand how visitors interact with the Site (e.g. Google Analytics).
• Marketing cookies — used to track visitors across websites and display relevant advertising.

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Site.

We do not sell your personal data. We may share your data with trusted third parties in the following circumstances:

• Service providers — including cloud hosting, CRM, email marketing, analytics, and payment processing providers who process data on our behalf under data processing agreements.
• Professional advisers — lawyers, accountants, and auditors who require access to fulfil their professional obligations.
• Regulatory authorities — where required by law or court order.
• Business transfers — in the event of a merger, acquisition, or sale of all or part of our business.

As a UAE-based company serving a global client base, your personal data may be transferred to and processed in countries outside the UAE, including countries in the European Economic Area (EEA), the United Kingdom, and the United States. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Typically:

• Client records are retained for 7 years after the end of an engagement.
• Marketing contact data is retained until you unsubscribe or request deletion.
• Website analytics data is retained for up to 26 months.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data in certain circumstances.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Portability — request transfer of your data to another organisation in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at admin@joinindexed.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit (TLS), access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Site may contain links to third-party websites. This Privacy Policy applies only to our Site. We encourage you to review the privacy policies of any third-party sites you visit, as we have no control over their data practices.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: