Privacy policy: UAE PDPL and Qatar PDPPL

Who is responsible for your data

The controller is the operator of this site. Operator details, including a contact address for privacy requests, are published here before this site launches.

Which laws apply

This policy is written to the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL) and, for readers in Qatar, Qatar's Law No. 13 of 2016 on Protecting Personal Data Privacy (the PDPPL). If the operator is established in a UAE financial free zone with its own data protection law, that law is named here instead before launch. Where the two laws give you different rights, we apply the one that protects you more.

What we collect

Browsing. Nothing that identifies you. The site sets no cookies, runs no analytics and embeds no advertising or tracking code. The calculators run in your browser and send nothing to us.
Server logs. The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical request data such as IP address, browser type and the page requested, to deliver the site and protect it from abuse.
Messages you send us. If you write to the contact address, we receive your email address, your name if you give it, and what you write.
Quote requests. When quote requests open, the form collects your country, emirate, licence type, revenue band, the services you need, your name, your email address and, if you choose, a mobile number. Today no form is live and none of this is collected.
Website plan enquiries. When bookings open, the enquiry form on the page for accounting firms collects your name, your firm's name, a work email, a phone number if you give one, and the country and area you work in. Today it is not live and none of this is collected.

If advertising is added later, this section and the cookie information below will be updated before any ad code goes on the site.

Why we use it, and on what basis

Server logs: to run and secure the site, which is necessary to provide it to you.
Messages: to reply to you and, for corrections, to re-check the figure you raised.
Quote requests: to pass your request to accounting firms that can quote for it. This relies on your consent, given through two separate tick boxes: one for sharing the request, one for being contacted. You can withdraw either at any time.
Website plan enquiries: to answer your enquiry, arrange a call and, if your firm takes the plan, to prepare and run the contract. This relies on the consent you give on the form and on the steps needed before a contract with your business. Plan enquiries are never passed to anyone else.

We do not sell personal data, build marketing lists or use your details for anything other than the purpose above.

Who receives it

Cloudflare, Inc. hosts the site and processes request logs on our behalf.
A form processor that receives quote requests and website plan enquiries and forwards them to us. None is connected today; its name and the country where it stores data are published here before requests open.
Accounting firms and tax agents licensed in the country you choose, which receive a quote request only when you have ticked the sharing box, and only the request you sent. A firm that receives your request becomes responsible for its own use of your details and must follow the same law.
Public authorities, if the law requires us to disclose data.

Transfers outside the UAE and Qatar

Cloudflare operates a global network and is based in the United States, so request data may be processed in the United States and other countries. A form processor may also store data outside the UAE and Qatar. We only use providers that bind themselves by contract to protect the data and to process it on our instructions, and we rely on those contractual safeguards, or on your consent where the law requires it, for these transfers.

How long we keep it

Quote requests: 12 months from the date you send them, then deleted from our systems and the form processor's.
Website plan enquiries: 12 months from the enquiry if it does not lead to an order. For a firm that takes the plan, for the life of the contract and then as long as UAE law requires business records to be kept.
Messages and correction requests: 24 months from our last reply, so a correction can be traced.
Server logs: kept by Cloudflare for the limited period set in its own policies; we do not export or store them.

If you withdraw consent or ask for deletion sooner, we delete the data within 30 days unless the law requires us to keep it.

Your rights

Depending on the law that applies to you, you can ask to see the personal data we hold about you, have it corrected, have it deleted, restrict or object to its use, and withdraw consent. Send requests to the contact address above. We answer within 30 days, and we will tell you if we need to confirm your identity first.

How to complain

Please raise a concern with us first, so we can put it right. You can also complain to the regulator:

UAE: the UAE Data Office, established by Federal Decree-Law No. 44 of 2021, which handles complaints under the PDPL. See the UAE Government portal's data protection laws page.
Qatar: the National Data Privacy Office at the National Cyber Security Agency, which supervises the PDPPL. See the NCSA's personal data privacy page.
Kuwait: firms in Kuwait that enquire about the website plan can raise a concern with us first, and with the authority responsible for personal data protection in Kuwait.

Cookies and similar technology

None today. The site stores nothing on your device. If that changes, for example if advertising is added, this page will list each cookie and its purpose first, and any cookie that needs consent will not be set until you give it.

Children

This site is written for businesses. It is not aimed at children and we do not knowingly collect their data.

Changes

We publish changes on this page with a new date. Last updated 16 September 2026. The Arabic version has the same content.