Privacy Notice
How Threshold handles your data.
Last updated 27 August 2026
Threshold collects only what is necessary to engage with you about AI governance and handles it in confidence. This notice explains what is collected, why it is used, where it is stored, and how to exercise rights available under applicable data protection law.
Who we are
Threshold is an AI governance firm registered in the Dubai International Financial Centre. The data controller for this website and its enquiry process is Threshold AI Governance Ltd. For all data-related queries, contact hello@thresholdfirm.com.
What we collect
Threshold collects personal data when you complete the enquiry form on this website. The data is provided directly by you.
Contact form. Your name, institution, your role, your institutional email address, the purpose you select, and the message you write describing what you are trying to establish.
Beyond the information you provide directly, we use a limited set of analytics tools that set cookies and collect usage data about how visitors use this website. These are described in the Analytics and cookies section below. We do not otherwise collect technical information about your device beyond what our hosting provider automatically logs for security purposes.
Analytics and cookies
We use a small number of third-party tools to understand how visitors use this website and to measure the reach of our communications. These tools set cookies and collect limited usage data.
Google Analytics. We use Google Analytics 4 to see how many people visit the site, which pages they view, and how they arrive. It collects information such as pages visited, time on site, approximate geographic location, and device and browser type. Google Analytics 4 processes technical and usage information such as pages viewed, approximate geographic location, and device and browser type. Threshold uses this information for aggregate website analytics and does not use it to identify individual visitors.
Your choices. You can refuse or delete cookies through your browser settings. You can opt out of Google Analytics using Google's browser add-on. Refusing analytics cookies does not affect your ability to use the site or to contact us.
Why we collect it
We collect this data so that we can respond to your enquiry, prepare for a conversation if you choose to proceed, and remain in correspondence with you about AI governance matters relevant to your institution. As a DIFC-incorporated entity, Threshold is subject to DIFC Data Protection Law No. 5 of 2020 for processing within its scope. Depending on the context, the lawful basis for processing may include consent or legitimate interests. Other data protection laws may also apply where relevant.
Where it is stored
Form submissions are stored by Netlify Forms, the managed form-submission service Threshold uses to receive enquiries. Email correspondence is held in Threshold's Microsoft 365 mailbox. Website analytics are processed through Google Analytics as described above. Personal data is not sold or rented, and Threshold does not use enquiry data for third-party advertising.
How long we keep it
Contact form submissions are retained for up to 24 months from the date of last meaningful correspondence, then permanently deleted. You can request earlier deletion at any time.
Your rights
Under the DIFC Data Protection Law, and other applicable data protection laws where relevant, you may have rights including access, correction, deletion, objection to certain processing, and withdrawal of consent where consent is the lawful basis. To exercise a right, write to hello@thresholdfirm.com. Threshold will respond within the period required by applicable law.
Cross-border transfers
Threshold operates from the DIFC, Dubai. Netlify and other service providers may process data in international jurisdictions, and Microsoft 365 mail data is held according to its configured service and regional data-residency arrangements. Cross-border processing is handled subject to applicable data-transfer requirements. This website is an enquiry surface only and should not be used to transmit patient-identifying medical data or other sensitive institutional records.
Changes to this notice
If we make material changes to how we handle your data, we will update this notice and change the "Last updated" date above.
Questions
For any question about this notice, your data, or how Threshold operates, write to hello@thresholdfirm.com.