Privacy Policy

This Privacy Policy (the “Policy”) sets forth the principles and rules governing the collection, recording, organization, storage, adaptation, retrieval, use, disclosure, and erasure of personal data obtained from users of uaecompany.biz (the “Website”).

The Data Controller is UAE Company Registration (“Company”, “we”, “us”, “our”), a professional corporate advisory firm specializing in mainland licensing, free zone incorporation, and corporate banking consultancy across the United Arab Emirates.

Personal data processing is carried out in strict conformity with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (“PDPL”), alongside applicable directives issued by the Central Bank of the UAE (CBUAE) and corporate registries (DET, ADDED, Freezone Authorities).

Depending on your interaction with the Website and our advisory channels, we may collect and process the following categories of data:

• Identity & Contact Details: Full name, corporate email address, telephone number, mobile messenger handle (WhatsApp, Telegram).
• Business Setup Specifications: Preferred jurisdiction (Mainland vs. specific Free Zone), selected commercial/professional activities, required visa allocation, office facility parameters, and banking preferences.
• Onboarding & Pre-Screening Documents (voluntarily submitted): Passport scans of shareholders and managers, Emirates ID copies, UAE entry stamps, proof of residence (Utility Bills), and professional CVs for banking pre-assessment.
• Technical & Network Data: IP address, device type, browser metadata, operating system, timestamps, referral URLs, and interaction patterns gathered via technical cookies.

We do not collect sensitive personal data concerning biometric templates, genetic information, or political/religious beliefs, except where statutory UAE residency procedures (such as ICP biometric registration for Emirates ID cards) specifically mandate direct compliance.

All processing of personal data is bound to specific, explicit, and legitimate corporate consulting purposes:

The legal grounds for processing include: explicit user consent, performance of pre-contractual steps upon the user's request, compliance with statutory obligations imposed by UAE corporate authorities, and legitimate interests in maintaining network security.

We maintain strict confidentiality standards. We do not sell, rent, or trade your personal information to any third party for commercial or advertising gain.

Data disclosure is strictly confined to entities directly engaged in the company formation workflow:

• Official Licensing Authorities: Department of Economy and Tourism (DET Dubai), Abu Dhabi Department of Economic Development (ADDED), and Free Zone authorities (such as DMCC, IFZA, Meydan, RAKEZ, DAFZA, JAFZA).
• Immigration & Residency Bodies: The Federal Authority for Identity, Citizenship, Customs and Port Security (ICP) and the General Directorate of Residency and Foreigners Affairs (GDRFA).
• Licensed Financial Institutions: Commercial banks authorized by the Central Bank of the UAE (CBUAE) upon direct client engagement for corporate account onboarding.
• Technical Infrastructure Partners: Enterprise hosting and edge routing providers (Cloudflare) operating under encrypted data processing terms.

Given that our clients frequently include international founders, expatriate investors, and foreign corporate shareholders, information may be transferred across borders during pre-incorporation correspondence.

Any cross-border transfer of personal data outside the United Arab Emirates strictly complies with Articles 22 and 23 of the UAE PDPL, ensuring recipient countries offer an adequate level of data protection or that legally binding contractual safeguards are executed.

Personal data is retained only for the duration necessary to satisfy the purposes for which it was gathered:

• Advisory Inquiries & Calculations: Stored for up to 12 months from the latest interaction, following which they are anonymized or permanently erased.
• Company Incorporation & KYC Records: Pursuant to UAE Anti-Money Laundering legislation (Federal Decree-Law No. 20 of 2018), corporate records, UBO registers, and identification files must be preserved for a minimum of 5 (five) years following the dissolution of the legal entity or conclusion of the business relationship.

Upon expiration of statutory retention mandates or valid withdrawal of consent, files are permanently purged using secure deletion procedures.

Under UAE Federal Decree-Law No. 45 of 2021, data subjects are endowed with substantive statutory rights:

To exercise your rights, please submit a written notice to info@uaecompany.biz. Statutory response turnaround is completed within 30 days.

We implement robust technical and operational controls to prevent unauthorized access, exposure, or tampering of sensitive corporate and personal files:

• High-grade TLS 1.3 encryption protocol enforced across all web interactions on uaecompany.biz.
• Role-based access limitation (RBAC) ensuring only authorized compliance managers access sensitive client identification data.
• Two-factor authentication (2FA) enforced on all administrative systems housing corporate files and documents.
• Continuous vulnerability monitoring and automated DDoS mitigation provided through enterprise CDN edge layers.

Our Website utilizes essential and performance cookies to maintain language preferences, preserve state during setup calculations, and safeguard against automated form abuse.

For exhaustive information concerning individual cookies, durations, and opt-out controls, please refer to our dedicated Cookie Policy.

For any questions or compliance inquiries regarding this Privacy Policy or UAE PDPL enforcement, please contact our data governance office: