Privacy Policy
Corvat Tax & Accounting Services Dubai — Last updated: January 2025
This Privacy Policy governs the collection, use, storage, and protection of personal and financial data by Corvat Tax & Accounting Services Dubai, in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable FTA data governance requirements.
1. Information We Collect
Personal Identification Data
Full name, Emirates ID / Passport number, trade license number, TRN (Tax Registration Number), company name, and designation — collected during client onboarding and FTA registration engagements.
Contact & Communication Data
Email address, UAE mobile number, WhatsApp number, and office address — used for advisory correspondence, document delivery, and deadline reminders.
Financial & Tax Data
Bank statements, VAT returns, Corporate Tax computations, audited financial statements, payroll records, and UBO (Ultimate Beneficial Owner) declarations — collected solely for the purpose of delivering contracted accounting and tax advisory services.
Website Usage Data
IP address, browser type, pages visited, and session duration — collected through anonymized analytics to improve website performance. No personally identifiable tracking cookies are used without consent.
2. How We Use Your Information
Service Delivery
To prepare and file UAE Corporate Tax returns, VAT returns (Form 201), statutory audit reports, and Virtual CFO board packs on your behalf.
Regulatory Compliance
To fulfill mandatory reporting obligations to the UAE Federal Tax Authority (FTA), Ministry of Economy, and other competent authorities under UAE law.
Client Communication
To send engagement letters, fee proposals, deadline notifications, UAE FTA clarification updates, and service confirmation documents.
Legal Obligations
To comply with UAE Anti-Money Laundering (AML) regulations under Federal Decree-Law No. 20 of 2018, KYC (Know Your Customer) requirements, and Economic Substance Regulations (ESR) reporting.
3. Data Security & Confidentiality
NDA & Confidentiality Agreement
All client engagements are governed by a signed Non-Disclosure Agreement (NDA). Every member of our team is contractually bound to maintain strict confidentiality of client financial and tax data.
Encrypted Storage
Client data is stored on encrypted, access-controlled cloud servers compliant with ISO 27001 standards. Physical documents are stored in locked, restricted-access premises in Dubai.
Access Controls
Only the qualified tax agents and audit partners directly assigned to your engagement have access to your financial data. No unauthorized sharing or sub-contracting of data occurs.
4. Data Sharing & Third Parties
Regulatory Authorities
We share data exclusively with the UAE Federal Tax Authority (FTA), Ministry of Economy, DIFC/DMCC registrars, and other regulators strictly as required by your engagement scope and applicable UAE law.
No Commercial Sale of Data
We do not sell, rent, or commercially exploit your personal or financial data to any third party under any circumstances.
Service Providers
FTA-accredited accounting software platforms (such as Zoho Books, Xero) may process your data as part of cloud accounting integrations, governed by their own data processing agreements.
5. Your Rights Under UAE Data Protection Law
Right to Access
You may request a copy of the personal data we hold about you at any time by contacting us in writing.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold.
Right to Erasure
Subject to our legal retention obligations under UAE tax law (minimum 5 years per FTA requirements), you may request deletion of your personal data upon engagement termination.
Right to Object
You may object to the processing of your data for marketing purposes at any time by emailing us. We will action your request within 5 working days.
6. Data Retention
In accordance with UAE Federal Tax Law, all tax-related records, VAT returns, and Corporate Tax filings must be retained for a minimum of 5 years from the end of the relevant tax period.
Statutory audit working papers and financial statements are retained for a minimum of 7 years in line with UAE Commercial Companies Law No. 32 of 2021.
Upon expiry of mandatory retention periods, data is securely and permanently deleted from all systems.
7. Contact Our Data Protection Officer
For any privacy-related queries, data access requests, or complaints, please contact us:
We will respond to all data protection requests within 5 UAE working days.