SAS Partners – Ahmed Mahfoudh Chartered Accountants & Auditors
Privacy Policy | Effective Date: June 2026
1. Introduction
SAS Partners – Ahmed Mahfoudh Chartered Accountants & Auditors (“the Firm”, “we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of personal and business data. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our website www.amcauae.com or engage our professional services.
By using our website or engaging our services, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal and business information that you voluntarily provide, including:
- Full name, job title, and company name
- Contact details: email address, phone number, WhatsApp number, and mailing address
- Financial information necessary to deliver professional services (e.g., financial statements, tax records, payroll data)
- Business registration details, trade license, and corporate documents
- Information submitted via contact forms, consultation booking requests, or email inquiries
- Identification documents required for KYC/AML compliance (e.g., Emirates ID, passport copies)
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address and browser type
- Pages visited, time spent on site, and referring URL
- Device type and operating system
- Cookies and similar tracking technologies (see Section 8)
2.3 Information From Third Parties
We may receive information about you from regulatory authorities (e.g., Federal Tax Authority, Ministry of Economy), courts, or other parties as part of service delivery.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide, manage, and deliver professional services as described in your Engagement Letter
- To communicate with you regarding your engagement, invoices, service updates, and queries
- To comply with UAE legal and regulatory obligations, including AML/KYC requirements
- To verify your identity and carry out client due diligence
- To send you relevant industry updates, newsletters, or service notifications (with your consent)
- To improve our website functionality, user experience, and service offerings
- To respond to legal proceedings, regulatory inquiries, or court orders
- To fulfill our obligations under professional standards and ethics codes
4. Legal Basis for Processing
We process your personal data under one or more of the following legal grounds:
- Contractual Necessity: Processing is required to perform services under our engagement agreement.
- Legal Obligation: Processing is required to comply with UAE laws and regulatory requirements.
- Legitimate Interests: Processing is in our legitimate interest to operate our business responsibly and professionally.
- Consent: Where required, we will obtain your explicit consent before processing certain data.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:
5.1 Regulatory and Legal Requirements
We may disclose information to:
- UAE Federal Tax Authority (FTA) for VAT and corporate tax compliance
- UAE Ministry of Economy, Department of Economic Development (DED), or other government authorities
- Financial Intelligence Unit (FIU) in case of AML/CTF reporting obligations
- Courts, arbitration bodies, or judicial authorities when required by law
5.2 Service Partners and Subcontractors
We may share data with trusted third-party service providers (e.g., IT systems, cloud storage, legal advisors) who assist in service delivery, provided they are bound by confidentiality obligations.
5.3 Group and Affiliated Entities
Where applicable, information may be shared with affiliated entities within our group for internal administrative purposes, subject to the same confidentiality standards.
6. International Data Transfers
As a firm serving clients across the UAE, KSA, Qatar, the UK, and the USA, certain data may need to be processed or accessed from outside the UAE. We ensure that any international transfers comply with applicable data protection laws and that appropriate safeguards are in place.
7. Data Retention
We retain your personal and business information for as long as is necessary to fulfill the purposes outlined in this Policy, comply with our legal obligations, and resolve any disputes. Specifically:
- Client engagement files are retained for a minimum of 7 years in accordance with UAE regulatory requirements.
- AML/KYC records are retained for a minimum of 5 years after the end of the business relationship.
- Website inquiry data is retained for up to 2 years.
Upon expiry of the retention period, data is securely deleted or anonymized.
8. Cookies Policy
Our website may use cookies and similar technologies to enhance your browsing experience. Cookies help us:
- Remember your preferences and settings
- Analyze website traffic and user behavior through analytics tools
- Improve website performance and content relevance
You can control or disable cookies through your browser settings. However, disabling cookies may affect the functionality of certain parts of our website. By continuing to use our website without changing your cookie settings, you consent to our use of cookies.
9. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
- Secure encrypted communication channels (SSL/TLS)
- Role-based access controls for internal systems
- Regular security assessments and staff training
- Physical security measures at our office premises
While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to ongoing vigilance.
10. Your Rights
Subject to applicable UAE law, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right of Correction: Request correction of inaccurate or incomplete data.
- Right of Erasure: Request deletion of your data where it is no longer necessary for the purpose for which it was collected (subject to legal retention obligations).
- Right to Object: Object to processing of your data for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to your request within 30 days.
11. Children’s Privacy
Our services are directed at businesses and adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.
12. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or regulatory portals. We are not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any external websites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The updated Policy will be posted on www.amcauae.com with the revised effective date. We encourage you to review this Policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Privacy Officer:
SAS Partners – Ahmed Mahfoudh Chartered Accountants & Auditors
Email: info@amcauae.com
Phone: +971 52 544 6773
Landline: 04 339 4199
WhatsApp: +971 52 544 6773
Website: www.amcauae.com
