Privacy Policy

How We Protect
Your Data

As a trusted accounting firm in Dubai, your privacy is fundamental to how we operate. This policy explains how Velmont Crest collects, uses, and safeguards your information.

Effective Date: 15 March 2026
01

Information We Collect

What personal and business data we gather

Velmont Crest Accounting collects personal and business information necessary to deliver our accounting, bookkeeping, VAT, corporate tax, audit, AML compliance, and business setup advisory services. The types of information we collect include:

  • Full name, company name, email address, and phone number
  • Emirates ID number, trade license details, and Tax Registration Number (TRN)
  • Financial data including bank statements, invoices, receipts, and ledger records
  • Documents submitted for tax filing, audit preparation, licensing, or compliance purposes
  • Website usage data automatically collected via cookies — including IP address, browser type, and pages visited

We only collect information that is directly necessary for delivering our services or fulfilling a legal obligation. We never collect more data than what is required for the specific purpose.

02

How We Use Your Information

Purpose of data processing

Your information is processed solely for lawful purposes in accordance with the UAE Personal Data Protection Law (PDPL) — Federal Decree-Law No. 45 of 2021:

  • To provide and manage accounting, taxation, bookkeeping, and PRO services
  • To prepare and file VAT returns, corporate tax returns, and financial statements
  • To respond to your inquiries, service requests, and consultation bookings
  • To process payments and issue invoices for services rendered
  • To comply with UAE financial, tax, and legal obligations including FTA requirements
  • To improve our website, user experience, and service delivery

We do not use your personal data for marketing purposes without your explicit consent. You may withdraw consent at any time by contacting us.

03

Legal Basis for Processing

Why we are permitted to process your data

Under the UAE PDPL (Federal Decree-Law No. 45 of 2021), we process your personal data based on one or more of the following legal grounds:

  • Your explicit consent provided at the time of engagement
  • Contractual necessity — to fulfill our obligations under a signed service agreement
  • Legal obligation — to comply with UAE tax laws, FTA regulations, AML requirements, and other applicable legislation
  • Legitimate interest — to improve our services and protect the security of our systems
04

Sharing of Information

Who we may share your data with

Velmont Crest does not sell, rent, or trade your personal data to any third party. We may share your data only in the following limited circumstances:

  • UAE government or regulatory authorities (FTA, Ministry of Finance, goAML) when legally required
  • Licensed external auditors engaged for your audit preparation or statutory audit
  • Banking institutions for account opening assistance or financial verification — with your consent
  • Authorized software partners (Zoho, Tally, QuickBooks) solely for service delivery under strict confidentiality
  • Legal or professional advisors where required to protect the rights of Velmont Crest or comply with legal proceedings

All third parties who receive your data are bound by confidentiality agreements and are required to handle your information in compliance with UAE data protection regulations.

05

Data Security

How we protect your information

We implement industry-standard technical and organizational security measures to protect your personal and business data from unauthorized access, alteration, disclosure, or destruction:

  • Encrypted data storage and secure file transfer protocols
  • Role-based access control — only authorized personnel can access sensitive data
  • Regular security reviews and software updates
  • Secure cloud-based accounting systems with multi-factor authentication
  • Physical security measures for any paper-based records

In the event of a data breach that may compromise your privacy or security, we will notify the UAE Data Office and affected individuals as required by law.

06

Data Retention

How long we keep your data

We retain your personal and financial data for the duration required to fulfill the purposes for which it was collected, and in accordance with UAE legal requirements:

Record TypeRetention PeriodLegal Basis
Financial Records & Tax DocumentsMinimum 5 yearsUAE Commercial Companies Law & FTA Regulations
AML & KYC RecordsMinimum 5 years after relationship endsFederal Decree-Law No. 20 of 2018
Corporate Tax RecordsMinimum 7 yearsUAE Corporate Tax Law
General CorrespondenceUp to 2 yearsBusiness necessity
Website Analytics Data26 monthsGoogle Analytics default

Once the retention period expires and data is no longer needed, it will be securely deleted or anonymized in accordance with UAE data protection standards.

07

Cookies & Tracking

How we use cookies on our website

Our website (velmontcrest.ae) uses cookies and similar tracking technologies to improve user experience, analyze traffic, and understand visitor behavior:

Cookie TypePurposeRequired?
EssentialRequired for website to function properlyYes
AnalyticsUnderstand how visitors interact with our site (Google Analytics)No
MarketingDeliver relevant information about our services — with consent onlyNo

You can manage or disable cookies through your browser settings at any time. Disabling non-essential cookies will not affect the core functionality of our website.

08

Your Rights

Data protection rights under UAE law

Under the UAE Personal Data Protection Law (PDPL), you have the following rights regarding your personal data:

📄
Right to Access
Request a copy of the personal data we hold about you
✏️
Right to Correction
Request correction of any inaccurate or incomplete data
🗑️
Right to Deletion
Request deletion of data no longer necessary for its purpose
⏸️
Right to Restrict
Request that we limit how we use your data
↩️
Right to Withdraw
Withdraw consent at any time for consent-based processing
📦
Right to Portability
Request transfer of data in a structured, machine-readable format
🚫
Right to Object
Object to data processing based on legitimate interest
⚖️
Right to Complaint
Lodge a complaint with the UAE Data Office if unsatisfied

To exercise any of these rights, contact us using the details below. We will respond to your request within 30 days as required by UAE law.

09

Updates to This Policy

How and when we update this privacy policy

Velmont Crest may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. All updates will be posted on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your data.

Material changes to this policy — such as changes in the types of data collected or the purposes of processing — will be communicated to active clients via email prior to taking effect.

Questions About Your Data?

If you have any questions about this privacy policy or how we handle your data, reach out to us.

Dubai Based UAE Licensed PDPL Compliant 100% Confidential