Last Updated: October 1, 2025
BYD Corporate Services FZE ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable UAE regulations.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Register for our services or request consultations
- Fill out forms on our website
- Contact us via email, phone, or through our contact forms
- Subscribe to our newsletters or marketing communications
- Participate in surveys or provide feedback
The personal information we collect may include:
- Full name and contact details (email address, phone number, mailing address)
- Company name and business information
- Emirates ID or passport details (for business setup services)
- Financial information (for CFO and accounting services)
- Banking details (when required for our services)
- Professional background and business requirements
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including:
- IP address and browser type
- Operating system and device information
- Pages visited and time spent on our website
- Referring website addresses
- Cookies and similar tracking technologies
2. How We Use Your Information
We use the collected information for the following purposes:
2.1 Service Delivery
- To provide and deliver our corporate services (business setup, Virtual CFO, banking assistance)
- To process your applications and documentation
- To communicate with you regarding your service requests
- To manage your account and maintain our client relationship
2.2 Legal and Regulatory Compliance
- To comply with UAE laws and regulations
- To fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements
- To maintain proper business records as required by UAE authorities
- To respond to legal requests and prevent fraudulent activities
2.3 Business Operations
- To improve our services and website functionality
- To send you updates, newsletters, and marketing communications (with your consent)
- To conduct market research and analyze business trends
- To protect our business interests and enforce our terms of service
3. Legal Basis for Processing (UAE Data Protection Law)
Under UAE Federal Decree-Law No. 45 of 2021, we process your personal data based on:
- Consent: Where you have given explicit consent for specific purposes
- Contractual Necessity: To perform our services under a contract with you
- Legal Obligation: To comply with UAE legal and regulatory requirements
- Legitimate Interests: For our business operations, provided your rights are not overridden
4. Information Sharing and Disclosure
4.1 We May Share Your Information With:
- Government Authorities: UAE regulatory bodies, immigration departments, and licensing authorities as required for business setup and compliance
- Banking Institutions: When facilitating account opening and banking services
- Service Providers: Third-party vendors who assist in delivering our services (document processors, legal advisors, auditors)
- Professional Partners: Accountants, lawyers, and consultants working on your behalf
- Business Transfers: In the event of a merger, acquisition, or sale of our business assets
4.2 We Do Not:
- Sell your personal information to third parties
- Share your information for marketing purposes without your consent
- Transfer data outside the UAE without appropriate safeguards
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of sensitive data during transmission and storage
- Secure servers with firewall protection
- Regular security assessments and vulnerability testing
- Access controls and authentication protocols
- Employee training on data protection and confidentiality
- Secure document management systems
Important: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain industry-standard protections.
6. Data Retention
We retain your personal information for as long as necessary to:
- Fulfill the purposes outlined in this Privacy Policy
- Comply with legal, regulatory, and accounting requirements in the UAE
- Resolve disputes and enforce our agreements
Specifically:
- Client Records: Maintained for 5-7 years after service completion (as per UAE Commercial Companies Law)
- Financial Records: Retained for 5 years (as per UAE Federal Tax Authority requirements)
- Marketing Communications: Until you unsubscribe or request deletion
- Website Analytics: Typically 26 months or less
7. Your Rights Under UAE Data Protection Law
Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights:
7.1 Right to Access
You may request access to your personal data we hold and receive a copy of it.
7.2 Right to Rectification
You can request correction of inaccurate or incomplete personal information.
7.3 Right to Erasure
You may request deletion of your personal data, subject to legal retention requirements.
7.4 Right to Restrict Processing
You can request that we limit how we use your personal information.
7.5 Right to Data Portability
You may request transfer of your data to another service provider in a structured format.
7.6 Right to Object
You can object to processing of your personal data for direct marketing or other purposes.
7.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time.
To Exercise Your Rights: Contact our Data Protection Officer at info@bydcsuae.com. We will respond to your request within 15 business days as required by UAE law.
8. Cookies and Tracking Technologies
8.1 Types of Cookies We Use:
- Essential Cookies: Required for website functionality and security
- Performance Cookies: Help us understand how visitors use our website
- Functionality Cookies: Remember your preferences and settings
- Marketing Cookies: Track your activity for advertising purposes (with consent)
8.2 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality. Most browsers allow you to:
- View what cookies are stored and delete them individually
- Block third-party cookies
- Block all cookies from specific websites
- Delete all cookies when you close your browser
9. International Data Transfers
Your personal data is primarily stored and processed within the United Arab Emirates. If we transfer data internationally, we ensure:
- Transfers are necessary for service delivery
- Adequate protection measures are in place
- Compliance with UAE data transfer regulations
- Standard contractual clauses or other approved mechanisms are used
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
11. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website with a new "Last Updated" date
- Sending email notifications to registered clients
- Displaying prominent notices on our website
Your continued use of our services after changes take effect constitutes acceptance of the updated Privacy Policy.
13. Complaints and Regulatory Authority
If you believe we have not handled your personal data in accordance with UAE law, you have the right to file a complaint with:
UAE Data Protection Office
Email: DPO@tdra.gov.ae
Website: tdra.gov.ae
We encourage you to contact us first so we can address your concerns directly.