Privacy Policy

1. Who We Are

Simalaya Consulting (Simalaya SA) is an Oracle professional services firm incorporated in Switzerland. Registered office: Route du Lac 27, Saint-Saphorin, CH-1071, Switzerland. Operations office: Fortune Tower, Cluster C, Jumeirah Lake Towers (JLT), Dubai, United Arab Emirates. We are the data controller for personal data collected through this website and through our engagement processes. Contact for privacy enquiries: contactus@simalaya.ch

2. What Data We Collect

  • Contact and enquiry data: name, job title, organisation, work email, phone number, country, and the content of messages submitted through our contact form
  • Engagement data: information about your Oracle environment and requirements that you share with us in the course of a business engagement
  • Website usage data: IP address, browser type, pages visited, and session duration collected through analytics cookies (with your consent)
  • Marketing interaction data: email open and click data if you have opted in to communications from us

3. How We Use Your Data

  • To respond to consultation requests and business enquiries
  • To deliver Oracle professional services engagements
  • To send updates about Oracle topics relevant to your business (with consent)
  • To improve our website and service based on analytics data
  • To comply with our legal and contractual obligations

4. Legal Basis for Processing (GDPR)

Enquiry and engagement data

Legitimate interests (responding to a business enquiry) or contract performance

Marketing communications

Consent (opt-in required)

Analytics data

Consent (cookie consent required)

Legal and compliance obligations

Legal obligation

5. Data Retention

Enquiry data where no engagement follows

24 months from submission

Engagement data

Duration of engagement plus 7 years (contractual and legal obligation retention)

Marketing consent data

Until consent is withdrawn

Analytics data

As per cookie consent platform settings (typically 13 months)

6. Your Rights (GDPR / UAE PDPL)

Under GDPR and the UAE Personal Data Protection Law (PDPL), you have the right to access, correct, delete, or restrict processing of your personal data. You have the right to object to processing and the right to data portability. To exercise any of these rights, contact us at contactus@simalaya.ch. We will respond within 30 days.

7. Cookies

We use cookies for analytics (Google Analytics 4), functionality, and (in Phase 2) marketing purposes. You can manage your cookie preferences through the cookie consent banner when you first visit the website. See our Cookie Policy for full details.

8. Third-Party Services

Google Analytics 4

Website analytics. Data processed by Google. GA4 is configured with IP anonymisation.

WPForms / Gravity Forms

Form processing. Data hosted on our managed WordPress server.

Meeting scheduling platform

TBC – to be confirmed once booking platform decision is made (Outstanding Item 10).

Complianz / CookieYes

Cookie consent management platform. Stores your consent preferences.

9. International Data Transfers

Personal data collected through this website may be stored on servers in the European Union or UAE. Where data is transferred to third countries, we ensure appropriate safeguards are in place, including the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable

Data Controller
Simalaya SA / Simalaya Consulting

Registered Address
Route du Lac 27, Saint-Saphorin, CH-1071, Switzerland

Operating Address
Fortune Tower, Cluster C, JLT, Dubai, UAE

Last Updated
March 2026