Privacy policy

Last update: September 2026 · DRAFT – to be reviewed by a lawyer before go-live

We know, privacy policies are as exciting as a spreadsheet of withholding tax rates. Here’s the short version: this website sets no cookies, runs no analytics and loads nothing from third parties while you browse. We only process personal data when you send us something – and then only to answer you.

1. Who is responsible

BeNerdy Consultancy FZE
Sheikh Rashid Tower
Dubai World Trade Centre
Dubai, United Arab Emirates
Trade licence no. L-4906

For privacy questions, write to us via the contact page.

2. Hosting and server logs

This website is a static site hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Pages. When you visit a page, Cloudflare processes technical data such as your IP address, the requested URL, date and time, browser type and referrer in order to deliver the page and protect it against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU–US Data Privacy Framework; we have concluded a data processing agreement with Cloudflare.

3. No cookies, no tracking

We do not use cookies, analytics, advertising pixels, social media plugins, embedded videos or external fonts. Fonts, images and videos are served from our own domain. Some tools on this site (the 183-day tracker, checklists, your theme choice) save your entries only in your own browser (localStorage). They never leave your device and you can delete them at any time by clearing your browser data.

4. Contact, match requests and waitlists

When you use one of our forms (contact, “get matched”, waitlists for guides, membership or podcast), we process the data you enter – typically name, e-mail address and the details you choose to share about your plans – to answer your request. Legal basis: pre-contractual measures and your request (Art. 6(1)(b) GDPR) and, where you tick the consent box, your consent (Art. 6(1)(a) GDPR).

Partners: when you order a service, we pass the details needed for it to the licensed partner who performs it for us in the relevant jurisdiction (for example a corporate service provider, law firm or tax advisor). If you contract a partner directly, we only share your details after asking you and naming the partner. Partners are independent controllers for their own services and are subject to their own anti-money-laundering (KYC) obligations.

Form submissions are delivered to our mailbox by e-mail via Resend (Resend, Inc., USA) and our e-mail provider Google Workspace (Google Ireland Ltd.). Resend also sends you a short confirmation of your request. To keep bots out we use a hidden honeypot field and, where enabled, Cloudflare Turnstile, which is only loaded when you start filling in a form.

We delete enquiries when they are no longer needed to answer you, unless statutory retention periods apply.

If you subscribe to our newsletter, we first send you a confirmation e-mail (double opt-in). Only when you click the link do we store your e-mail address, first name (if given), the source of the sign-up and the time of your confirmation with our e-mail provider Resend (Resend, Inc., USA), which sends the newsletter and a short welcome series on our behalf. Legal basis: your consent (Art. 6(1)(a) GDPR). Open and click tracking is switched off. You can unsubscribe at any time via the link in every e-mail.

Waitlists: if you ask us to notify you about something (for example the client portal, a guide or the podcast), we store your e-mail address and the topic with Resend and send you e-mails about that topic only. Unsubscribe any time via the link in every e-mail.

6. Client portal

The planned client portal at clients.nerdy.money is a separate application with its own privacy notice. This policy only covers the website nerdy.money.

7. Transfers outside the EU

BeNerdy Consultancy FZE is based in the United Arab Emirates. If you contact us from the EU, your data is therefore processed outside the EU, for the purpose of answering your request and performing the contract you asked for (Art. 49(1)(b) GDPR). Some of our service providers (Cloudflare, Resend) are based in the USA and are certified under the EU–US Data Privacy Framework.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

9. Changes

We update this policy when our website or the law changes. The current version is always available on this page.

Privacy policy.