PRIVACY POLICY

Effective Date: 2026-09-24

EMP Accountax FZE ("EMPAccounTax", "we", "us", or "our") is committed to protecting the privacy of visitors to our website and the clients who engage us for finance, taxation, IT, and business consultancy services. This Privacy Policy explains what personal data we collect, how we use it, and the choices and rights available to you.

Table of Contents

• 1. Who We Are
• 2. Information We Collect
• 3. How We Use Your Information
• 4. Legal Basis for Processing
• 5. Cookies and Tracking Technologies
• 6. Third-Party Service Providers
• 7. Sharing and Disclosure of Information
• 8. International Data Transfers
• 9. Data Retention
• 10. Data Security
• 11. Your Rights
• 12. Children’s Privacy
• 13. Changes to This Policy
• 14. Contact Us

1. Who We Are

EMP Accountax FZE is a Free Zone Establishment registered in the Sharjah Publishing City Free Zone, United Arab Emirates (Licence No. 4422011.01), with a registered office at Business Centre, Sharjah Publishing City Free Zone, Sharjah, UAE, and an additional office at Mai Tower, Al Nahda, Dubai, UAE. We are the controller of the personal data described in this Policy for the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and any other applicable data protection law.

2. Information We Collect

We collect the following categories of information:

• Contact and identity data you provide through our website forms, WhatsApp, email, or phone — such as your name, company name, email address, and phone number.
• Engagement data you provide when you become a client — including financial statements, tax records, corporate documents, identification documents, and other information necessary to deliver accounting, tax, valuation, corporate governance, or company registration services.
• Communications — records of correspondence between you and EMPAccounTax, including emails and messages sent via our contact form or WhatsApp.
• Technical and usage data — IP address, browser type, device information, pages visited, and referring website, collected automatically through cookies and similar technologies (see Section 5).

3. How We Use Your Information

We use the information we collect to:

• Respond to enquiries and provide quotations for our services.
• Deliver accounting, taxation, valuation, corporate governance, company registration, and business or IT consultancy services under a signed engagement letter.
• Comply with legal and regulatory obligations, including anti-money-laundering (AML) and customer due-diligence (CDD) requirements applicable to UAE professional service providers, and UAE Federal Tax Authority (FTA) record-keeping requirements.
• Communicate with you about your engagement, invoices, and service updates.
• Improve our website and understand how visitors use it, using aggregated analytics.
• Send occasional updates about our services, where you have consented to receive them; you may opt out at any time.

4. Legal Basis for Processing

Where the UAE PDPL or another applicable data protection law requires a legal basis, we rely on one or more of the following: your consent; the necessity of processing to perform a contract with you (such as an engagement letter); compliance with a legal obligation (such as AML/CDD or tax record-keeping rules); and our legitimate interests in operating and improving our business and website, provided those interests do not override your rights.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for essential site functionality, analytics, and third-party tools such as Google reCAPTCHA. Full details of the cookies we use, their purpose, and how to manage them are set out in our Cookie Policy.

6. Third-Party Service Providers

We use a limited number of third-party service providers to operate our website and business, including:

• Google Analytics — website usage analytics.
• Google reCAPTCHA — spam and abuse protection on our contact form.
• WhatsApp Business (Meta Platforms, Inc.) — for client communication where you choose to contact us via WhatsApp.
• Our website hosting provider and email service, who store and transmit data on our behalf.

These providers process data as our processors or, in some cases, as independent controllers under their own privacy policies. We only work with providers who offer appropriate safeguards for the data they process.

7. Sharing and Disclosure of Information

We do not sell your personal data. We may share information with:

• The third-party service providers described in Section 6, solely to operate our website and deliver our services.
• Regulators, courts, or government authorities where required by UAE law (for example, the Federal Tax Authority or AML supervisory authorities).
• Professional advisors (such as our own auditors, bankers, or legal counsel) under a duty of confidentiality.
• A successor entity in the event of a merger, acquisition, or sale of business assets, subject to equivalent confidentiality protections.

8. International Data Transfers

Some of our third-party service providers (see Section 6) may process data on servers located outside the United Arab Emirates. Where this occurs, we take reasonable steps to ensure the provider offers an adequate level of protection consistent with the UAE PDPL, such as relying on providers with recognised international data protection certifications or standard contractual safeguards.

9. Data Retention

We retain engagement-related financial, tax, and corporate records for five (5) years from the end of the relevant engagement or financial year, consistent with UAE Federal Tax Authority record-keeping requirements and standard AML/CDD retention practice. Website enquiry and marketing data not connected to a signed engagement is retained only for as long as necessary for the purpose it was collected, and is deleted or anonymised thereafter unless a longer period is required by law.

10. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including access controls and secure transmission of data submitted through our website. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to the UAE PDPL and applicable law, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict certain processing, and to request a copy of your data in a portable format. These rights may be limited where we are required by law — for example, tax or AML record-keeping obligations — to retain certain records for the periods described in Section 9. To exercise any of these rights, contact us using the details in Section 14.

12. Children’s Privacy

Our website and services are directed at businesses and individuals of legal working age and are not intended for children. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective Date" at the top of this page indicates when it was last revised. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• EMP Accountax FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, UAE
• Dubai Office: Mai Tower, Al Nahda, Dubai, UAE
• Email: connect@empaccountax.com
• Phone: +971 52 520 4986