Privacy notice

Who is responsible for your data

DIFC Company Setup operates this website and is responsible for personal data submitted through it. You can reach us at hello@difccompanysetup.com or by post at Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates.

What we collect

We collect what you type into our forms: your name, email address, phone number, company name, job title and whatever you tell us about the entity you want to set up. Our licence finder and cost calculator also record the answers you select, so that the reply we send is relevant to what you asked.

We do not use advertising trackers or third party analytics cookies. We do not collect special categories of personal data through this site and ask that you do not submit any.

Why we use it

• To answer your enquiry and provide the information you asked for
• To prepare a proposal or scope of work where you ask for one
• To meet our own legal, regulatory and anti-money laundering obligations where we are engaged
• To keep a record of the enquiry so that a later conversation starts from the right place

Our lawful bases are your consent, where you submitted a form, the performance of a contract or steps taken at your request before entering one, and our legitimate interest in responding to enquiries about our services.

Who sees it

Enquiry data is stored in our customer relationship management system, which is operated on our behalf by a service provider under a written agreement. Access inside our business is limited to the people who need it to respond to you. We do not sell personal data and we do not share it with third parties for their own marketing.

Where we are engaged and need to work with banks, regulators, registries or professional advisers on your behalf, we share only what that task requires, and we tell you beforehand.

International transfers

Our systems and service providers may process data outside the United Arab Emirates. Where that happens we rely on the recipient jurisdiction having an adequate level of protection, or on contractual safeguards equivalent to standard contractual clauses.

How long we keep it

Enquiries that do not become engagements are kept for up to twenty four months and then deleted. Where we are engaged, records are kept for the period required by the applicable anti-money laundering and corporate record keeping rules, which is generally at least six years from the end of the relationship.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to our use of it or ask us to restrict it. Write to hello@difccompanysetup.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the relevant supervisory authority. For processing carried out in the DIFC, that is the Commissioner of Data Protection.

Changes

We update this notice when our processing changes. The date at the top reflects the current version.