Back to Home
Data Protection & Privacy

Privacy Policy

Effective Date: January 1, 2024 • Last Updated: September 2024

Plutozz Financial Services (“Plutozz”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of our clients’ personal and corporate information in strict adherence to UAE Federal Decree-Law No. 45/2021 on the Protection of Personal Data (PDPL), the General Data Protection Regulation (GDPR - EU 2016/679), and applicable Federal Tax Authority (FTA) confidentiality mandates.

1. Scope & Data Controller Identification

This Privacy Policy applies to all personal data collected through the Plutozz website (plutozz.com), consultation forms, client onboarding portals, client communication channels (email, phone, WhatsApp), and offline accounting engagements.

Data Controller: Plutozz Financial Services LLC
Registered Office: Business Bay, Dubai, United Arab Emirates
FTA Registration Status: Certified UAE Tax Agents & Financial Advisory Practice
Data Protection Officer (DPO) Contact: privacy@plutozz.com

2. Data We Collect & Collection Mechanisms

We practice data minimization and strictly collect only information necessary to deliver accounting, tax advisory, and compliance services:

  • Contact & Identification Data: Full name, corporate email address, telephone/WhatsApp number, designation, and company legal name.
  • Corporate & Statutory Data: UAE Trade License details, Tax Registration Number (TRN), Corporate Tax Registration Number (CTRN), Memorandum of Association (MOA), and certificate of incorporation.
  • Financial & Accounting Records: Sales ledgers, purchase receipts, bank statements, payroll data for WPS SIF file compilation, and previous tax returns submitted for professional review.
  • Technical & Usage Information: Anonymized IP addresses, browser types, device operating systems, and page interaction timestamps recorded via privacy-compliant analytics.

3. Legal Basis for Processing Under UAE PDPL & GDPR

We process your personal and business data strictly on the following lawful grounds:

Contractual Necessity (Art. 6(1)(b))
To prepare formal proposals, execute professional engagement agreements, file VAT201 / Corporate Tax returns, and provide bookkeeping.
Statutory & Legal Compliance (Art. 6(1)(c))
To satisfy mandatory records retention under UAE Tax Procedures Law (Federal Decree-Law No. 28/2022) and Anti-Money Laundering (AML) mandates.
Explicit Consent (Art. 6(1)(a))
Freely given, specific opt-in consent captured via our online consultation forms and cookie preferences banner.
Legitimate Business Interests
To maintain website security, prevent fraudulent submissions, and optimize our digital financial advisory calculators.

4. Data Security, Confidentiality & Non-Disclosure

All financial data and commercial documentation shared with Plutozz are protected by stringent technical and organizational safeguards:

  • Encryption: End-to-end TLS 1.3 encryption in transit and AES-256 encryption at rest for all database repositories.
  • Access Controls: Role-based access control (RBAC) ensuring only designated Senior Chartered Accountants assigned to your file access sensitive ledgers.
  • Strict Non-Disclosure: All Plutozz employees, consultants, and tax practitioners are bound by enforceable Non-Disclosure Agreements (NDAs).
  • Zero Sale of Data: Plutozz does not sell, rent, monetize, or trade client contact details or accounting ledgers to any third party under any circumstance.

5. Data Retention Periods

We retain personal and commercial accounting records in accordance with UAE statutory requirements:

  • Tax & Accounting Records: Retained for a minimum of 5 years (or 7 years for real estate entities) as mandated under UAE Federal Tax Procedures Law and VAT regulations.
  • Consultation Inquiries & Leads: Unconverted lead records are archived or securely expunged after 24 months unless continued dialogue is requested.
  • Client Identification & KYC Files: Retained for the duration of the engagement plus 5 years to comply with UAE AML/CFT statutory obligations.

6. Your Statutory Rights as a Data Subject

Under UAE PDPL Articles 13–18 and GDPR Articles 15–22, you possess the following actionable rights regarding your personal information:

Right to Access: Request a copy of all personal records we hold regarding you or your entity.
Right to Rectification: Request prompt correction of inaccurate or incomplete financial contact details.
Right to Erasure (“To Be Forgotten”): Request deletion of your personal data, subject to mandatory FTA statutory record-retention requirements.
Right to Withdraw Consent: Revoke consent for communications or non-essential cookies at any time without penalty.

To exercise any of these statutory rights, submit a written request to privacy@plutozz.com. We respond to all verified requests within 30 calendar days.

7. Contact Our Data Protection Officer

For any questions, concerns, or formal compliance inquiries regarding our privacy standards and data handling practices:

Plutozz Financial Services LLC, Business Bay, Dubai, UAE
Email: privacy@plutozz.com
Compliance Hotline: +971 50 617 9946