Privacy Policy

1. Who this policy applies to

This policy applies to applicants, team members, participants, finalists, parents or guardians, mentors, judges, university contacts, delivery partners, website visitors, event attendees and any other person whose personal data is processed in connection with IMR.

2. Personal data we collect

3. How we use personal data

• to operate the registration process and administer applicant accounts or submissions;
• to assess eligibility, completeness, originality, commercial viability, feasibility, risk and suitability for the programme;
• to run scoring, shortlisting, assessment centre, mentoring, finalist selection, prototype development and showcase activities;
• to communicate decisions, deadlines, logistics, updates, programme requirements and support information;
• to manage safeguarding, conduct, participant welfare, incident response and emergency arrangements;
• to manage conflicts of interest, audit trails, quality control, legal compliance and defensible selection decisions;
• to organise events, venues, assessment rooms, travel-readiness checks and Dubai Showcase logistics;
• to manage optional media, PR or documentary activity only where a separate and valid consent or release route applies;
• to maintain website security, analytics, cookie preferences and platform performance;
• to protect the legal rights, reputation, confidentiality, intellectual property and legitimate interests of AG, IMR, applicants, participants and partners.

4. Applicant ideas and intellectual property

The applicant retains ownership of their idea, concept, invention, materials, pitch content and related intellectual property, subject to any third-party rights, team ownership arrangements or separate written agreement. Submission to IMR does not transfer ownership of the applicant’s idea to AG, IMR, sponsors, judges, mentors, production organisations, universities or partners.

AG and IMR will analyse applicant ideas only for eligibility, originality checks, risk assessment, feasibility, selection, commercial viability, mentoring suitability and programme delivery purposes. AG and IMR will not commercially exploit, sell, license, develop, publish, copy, reproduce or market an applicant’s idea as their own.

AG and IMR will not refer to, describe, publish, identify, promote, film or use an applicant’s idea in marketing, PR, social media, sponsor materials, documentary materials, website content or public communications without a separate written consent and, where appropriate, a specific media release.

5. Lawful basis for processing

Depending on the jurisdiction and activity, AG may rely on one or more lawful bases, including consent, performance of a contract or pre-contractual steps, legitimate interests, legal obligations, vital interests, safeguarding obligations, claims management and, where appropriate, explicit consent for sensitive data or media use.

6. Sensitive data and minors

IMR is intended for young founders aged 19-23. Where any participant is below the age of majority in their country of residence or where local law requires guardian involvement, AG may require parent or guardian consent before mentorship, travel, media, documentary, prototype, showcase or other activity proceeds.

AG will process safeguarding, health, accessibility, incident or sensitive data only where necessary, proportionate and subject to restricted access.

7. Who we share data with

Personal data may be shared only where necessary with authorised programme staff, assessors, reviewers, judges, mentors, safeguarding personnel, delivery partners, universities, venue operators, technology providers, professional advisers, insurers, public authorities, media partners or production organisations. Access is role-based and limited to what the recipient needs for the approved purpose.

Sponsor and Founder reporting will use anonymised or aggregated information wherever possible. Personal identifiers, application content or idea-specific information will not be shared publicly or with sponsors unless a lawful basis and appropriate consent route exists.

8. International transfers

IMR operates across the GCC and may involve processing in or transfer to the UAE and other countries where programme delivery requires it. AG will use appropriate administrative, contractual, technical and organisational safeguards for cross-border data movement, including country transfer registers, restricted access, approved storage locations and transfer controls.

9. Retention

AG will retain applicant and selection records only for as long as reasonably necessary for programme delivery, auditability, safeguarding, dispute management, legal compliance and legitimate programme purposes. Selection records, including applications, scoring records and conflict-of-interest records, may normally be retained for up to 24 months unless a longer period is required by law, claim, audit, safeguarding, insurance or regulatory need.

10. Security

• role-based access controls and restricted download permissions;
• approved cloud storage and controlled programme workspaces;
• separate handling of IDs, consent records and safeguarding records where practical;
• audit trails for scoring and selection decisions;
• confidentiality obligations for staff, mentors, judges, assessors, partners and production teams;
• incident escalation for suspected data, confidentiality, safeguarding or media breaches.

11. Your rights

Subject to applicable law, you may request access to your personal data, correction, deletion, restriction, objection, portability, withdrawal of consent, information about processing, or review of a decision where permitted. Some rights are limited where AG must retain records for audit, safeguarding, legal, dispute, selection integrity or legitimate operational purposes.

Privacy requests should be sent to privacy@avelaglobal.com. AG may ask for evidence of identity before acting on a request.

12. Media, PR and documentary use

Participation in filming, interviews, documentary activity, photography, PR or public storytelling is subject to a separate consent and release route. Refusal to participate in documentary or media activity will not, by itself, prevent an applicant from joining IMR, being assessed, becoming a finalist or being selected as a winner.

13. Automated decision-making

AG does not intend to make final selection, finalist or winner decisions solely by automated means. Human review, documented scoring, moderation and governance controls are applied in the selection pathway.

14. Third-party websites

The IMR website may link to third-party websites or platforms. AG is not responsible for the privacy practices, security or content of third-party websites that it does not control.

15. Changes to this policy

AG may update this policy to reflect changes in law, technology, programme delivery, website functionality, media activity or operational controls. The latest version will be made available through the IMR website or registration portal.

16. Governing law and contact

This policy is governed by laws of the United Arab Emirates as applied in the Emirate of Dubai, with exclusive jurisdiction of the Dubai Courts, unless mandatory data-protection law gives an individual additional rights in another jurisdiction.