Privacy Policy
Introduction
MondayCorp Services LLC - FZ ("Company", "we", "us", or "our") is a professional business consultancy firm incorporated as a free zone limited liability company in the United Arab Emirates, providing services in the areas of accounting, auditing, company formation, and tax advisory.
We are committed to protecting the privacy, confidentiality, and security of the personal and financial information entrusted to us by our clients, website visitors, and business contacts. This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect your personal data when you interact with our website or engage our professional services.
By accessing our website or using our services, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please refrain from using our website or services.
Legal Framework and Compliance
As a UAE-based free zone entity handling sensitive financial and corporate data, we operate in compliance with the following legal frameworks:
-
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations;
-
UAE Federal Law No. 8 of 2004 on Financial Free Zones (as applicable);
-
Federal Decree-Law No. 28 of 2022 on Tax Procedures, which sets out the rules for tax registration, record-keeping, filing, audits, and disputes;
-
UAE Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses (Corporate Tax Law);
-
Federal Decree by Law No. (10) of 2025 Regarding Anti-Money Laundering, and Combating the Financing of Terrorism and Proliferation Financing;
-
Regulations and guidelines issued by the applicable free zone authority;
-
International professional standards applicable to accounting and auditing practices (e.g., IFRS, ISA).
Where our services involve clients subject to additional regulatory requirements, we may be required to apply supplementary data handling obligations in accordance with those frameworks.
Information We Collect
Given the nature of our professional services in accounting, auditing, company formation, and tax advisory, we collect a broad range of personal and business-related information. The categories of information we may collect include:
3.1 Identity and Contact Information
-
Full legal name, date of birth, nationality, and gender;
-
Passport copies, Emirates ID, or other government-issued identification documents;
-
Residential and business addresses;
-
Email addresses, telephone numbers, and other contact details;
-
Signatures (electronic or physical) required for engagement letters or regulatory filings.
3.2 Financial and Accounting Information
-
Bank account details, financial statements, and transaction records;
-
Income and expenditure data, payroll information, and asset records;
-
Tax registration numbers (TRN), VAT records, and corporate tax information;
-
Audit-related documents including internal controls, general ledgers, and management accounts;
-
Any other financial data necessary for the preparation or review of accounts.
3.3 Corporate and Business Information
-
Trade licence details, memoranda and articles of association;
-
Shareholder structures, ownership information, and ultimate beneficial owner (UBO) declarations;
-
Director and officer information required for regulatory filings;
-
Correspondence with government authorities and free zone regulators;
-
Business plans, feasibility studies, and commercial contracts where submitted to us.
3.4 Website and Technical Information
-
IP address, browser type, operating system, and device identifiers;
-
Pages visited, time spent on the website, and referral URLs;
-
Cookie data and similar tracking technologies (see Section 11 on Cookies);
-
Information submitted via contact forms, enquiry requests, or newsletter subscriptions.
3.5 Sensitive Information
In certain circumstances, particularly in relation to AML/CFT compliance, regulatory due diligence, and Know Your Customer (KYC) obligations, we may be required to collect sensitive personal information, including criminal background checks or politically exposed person (PEP) status. We collect such information only to the extent required by applicable UAE law and professional regulations.
How We Collect Your Information
We collect your personal information through the following means:
-
Directly from you when you engage our services, complete onboarding forms, or correspond with us via email, phone, or in person;
-
Through our website when you submit enquiry forms, subscribe to updates, or interact with our digital content;
-
From third parties, including government databases, regulatory authorities, licensed credit reference agencies, or public company registries, where permitted by law;
-
From your authorised representatives, legal advisers, or other professionals acting on your behalf;
-
Through automated technologies such as cookies and web analytics tools when you visit our website.
Purpose of Processing and Legal Basis
We process your personal data for specific, explicit, and legitimate purposes. The table below outlines the primary purposes for which we use your information and the corresponding legal basis under applicable UAE data protection law:
Purpose of Processing
-
Providing accounting, bookkeeping, and financial reporting services — contractual necessity and legal obligation;
-
Conducting statutory or voluntary audits and assurance engagements — contractual necessity and legal obligation;
-
Facilitating company formation, licence applications, and corporate secretarial services — contractual necessity and legitimate interest;
-
Providing VAT, corporate tax, and other tax advisory or compliance services — contractual necessity and legal obligation;
-
Performing KYC, AML/CFT due diligence checks as required by UAE law — legal obligation;
-
Communicating with regulatory authorities, free zone bodies, or government agencies on your behalf — contractual necessity and legal obligation;
-
Sending service updates, regulatory alerts, or professional newsletters — legitimate interest (with opt-out option);
-
Responding to enquiries, complaints, or requests submitted via the website — legitimate interest;
-
Improving the functionality and security of our website — legitimate interest;
-
Complying with legal hold obligations, court orders, or regulatory investigations — legal obligation.
Disclosure and Sharing of Your Information
MondayCorp Services LLC - FZ treats all client information with the highest degree of professional confidentiality, consistent with our obligations under applicable UAE law and international professional standards. We do not sell, rent, or trade your personal data to third parties for marketing purposes.
We may, however, disclose your information in the following circumstances:
6.1 Regulatory and Legal Authorities
We are obligated under UAE law to disclose certain information to regulatory authorities, including but not limited to the Federal Tax Authority (FTA), the relevant free zone authority, the UAE Ministry of Economy, and law enforcement agencies, where required by law, court order, or regulatory direction.
6.2 Service Providers and Professional Partners
We may share your information with trusted third-party service providers who assist us in delivering our professional services, including cloud storage providers, IT support vendors, licensed legal counsel, and banking institutions. All such parties are bound by contractual obligations of confidentiality and are prohibited from using your data for any other purpose.
6.3 Affiliated Entities
Where MondayCorp Services LLC - FZ operates as part of a group of companies or professional network, your information may be shared with affiliated entities solely for the purpose of providing the services you have requested, subject to the same data protection standards set out in this Policy.
6.4 With Your Consent
We may share your information with third parties where you have provided your explicit prior consent for such disclosure.
6.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of our business, your personal data may be transferred as part of that transaction, subject to applicable data protection obligations.
International Data Transfers
Where we transfer your personal data outside of the United Arab Emirates, we will ensure that such transfers are carried out in compliance with the requirements of UAE Federal Decree-Law No. 45 of 2021 and any applicable implementing regulations. This may include transferring data to jurisdictions deemed to provide an adequate level of data protection, or implementing appropriate contractual safeguards such as standard data protection clauses.
Given the cross-border nature of certain accounting, auditing, and tax engagements, some of your data may be processed or stored outside the UAE. We will always take reasonable steps to ensure that your data remains protected in accordance with this Policy regardless of where it is processed.
Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law and professional regulations. Our specific retention periods are guided by the following:
-
Accounting and financial records: a minimum of five (5) years from the end of the relevant financial year, in accordance with UAE Commercial Transactions Law;
-
Tax-related records (VAT and Corporate Tax): a minimum of seven (7) years as required by the Federal Tax Authority;
-
AML/CFT and KYC records: a minimum of five (5) years following the end of the business relationship, or as otherwise required by applicable AML legislation;
-
Audit documentation: as required by the applicable auditing standards and relevant regulatory frameworks;
-
Company formation records: for the duration of the engagement and a minimum of five (5) years thereafter;
-
Website and marketing data: until you withdraw your consent or a maximum of two (2) years from the date of last interaction.
Upon expiry of the applicable retention period, we will securely delete or anonymise your personal data in a manner consistent with applicable UAE law and our professional obligations.
Data Security
We implement robust technical, administrative, and physical security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
-
Encryption of data in transit and at rest using industry-standard protocols;
-
Access controls and role-based permissions ensuring that only authorised personnel access client data;
-
Secure document management systems and encrypted client portals;
-
Regular staff training on data protection and professional confidentiality obligations;
-
Periodic security assessments, vulnerability testing, and IT audits;
-
Physical security controls at our office premises.
Notwithstanding the above, no method of electronic transmission or storage is entirely secure. In the event of a data breach that is likely to result in a risk to your rights and interests, we will notify you and the relevant UAE regulatory authorities in accordance with our obligations under applicable law.
Your Rights as a Data Subject
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you have the following rights in relation to your personal data, subject to applicable exceptions and limitations:
-
Right of Access: You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data;
-
Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
-
Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and professional retention obligations;
-
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances;
-
Right to Data Portability: Where technically feasible and legally applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format;
-
Right to Object: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests;
-
Right to Withdraw Consent: Where we process your data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please submit a written request to us using the contact details set out in Section 14 of this Policy. We will respond to your request within the timeframes prescribed by applicable UAE law. Please note that certain rights may be subject to limitations where we have overriding legal or regulatory obligations to retain or process your data.
Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and improve our services. Cookies are small text files stored on your device by your web browser.
11.1 Types of Cookies We Use
-
Essential Cookies: Necessary for the basic functioning of the website and cannot be disabled;
-
Analytics Cookies: Used to collect aggregate information about how visitors interact with our website, helping us improve its performance and content;
-
Functional Cookies: Allow the website to remember your preferences and provide enhanced features;
-
Marketing Cookies: Used to track visitors across websites for the purpose of displaying relevant advertisements, where applicable.
11.2 Managing Cookies
You may manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website. For more information about cookies and how to manage them, please refer to your browser's help documentation.
Professional Confidentiality Obligations
As a business consultancy firm providing accounting, auditing, and tax services, our staff are bound by professional ethical obligations of confidentiality in addition to the data protection requirements set out in this Policy. These obligations arise from applicable professional standards, including those established by internationally recognised accounting and auditing bodies, as well as from our contractual commitments to clients.
All employees, contractors, and associates of MondayCorp Services LLC - FZ are required to maintain strict confidentiality with respect to client information and are prohibited from disclosing any such information without authorisation, except where required by law or with the client's explicit consent.
Children's Privacy
Our website and professional services are intended exclusively for adults and business entities. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has provided us with personal data without appropriate parental or guardian consent, please contact us immediately and we will take prompt steps to delete such information from our records.
Changes to This Privacy Policy
We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. Any material changes will be communicated by updating the Effective Date at the top of this Policy and, where appropriate, by providing notice on our website or by email.
We encourage you to review this Policy periodically. Your continued use of our website or services following any update constitutes your acceptance of the revised Policy.
Contact Us and Data Protection Enquiries
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights as a data subject, please contact us at:
MondayCorp Services LLC - FZ
Data Protection Officer / Compliance Team
United Arab Emirates
Email: sherin@mondaycorp.com
Phone: +971 58 887 8351
Website: mondaycorp.com
We are committed to addressing your enquiries promptly and in accordance with our obligations under UAE data protection law. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant UAE data protection supervisory authority.