Privacy Policy & Data Protection Notice · MY Global

1. Executive Overview & Scope

MY Global Finance & IT Consultants ("MY Global", "we", "us", or "our") operates as a licensed multidisciplinary corporate advisory practice in the United Arab Emirates. This Privacy Policy governs the collection, storage, processing, and transfer of personal and corporate data collected through our website, client portals, and advisory engagements.

2. Categories of Information We Collect

In the course of providing corporate tax, regulatory conformity, and IT services, we collect:

• Identity & Contact Data: Full name, professional title, corporate email address, telephone numbers, and corporate entity name.
• Corporate Statutory Records: Trade licenses, memorandum of association (MOA), passport/Emirates ID copies of beneficial owners (UBO), and VAT/Corporate Tax Registration Numbers (TRN).
• Financial & Transactional Data: General ledgers, trial balances, invoices, and customs shipping documents provided for advisory audits.
• Technical & Telemetry Data: IP address, browser type, operating system, session timestamps, and encrypted authentication tokens.

3. Lawful Basis & Purposes of Processing

We process personal data strictly under the following lawful bases established by Article 4 of UAE Federal Decree-Law No. 45/2021:

• Contractual Performance: Fulfilling client advisory engagements, tax return filings, and software engineering deliverables.
• Statutory & Legal Obligations: Complying with UAE Anti-Money Laundering (AML/CFT) mandates, Federal Tax Authority filing records, and municipal product safety submissions.
• Legitimate Commercial Interests: Safeguarding our digital infrastructure against cybersecurity threats and fraud.

4. Data Retention & Security Standards

All client records are encrypted in transit via TLS 1.3 and at rest using AES-256 encryption. In accordance with UAE tax laws, financial and statutory engagement files are securely retained for a minimum of 5 years (or 15 years for real estate transactions) following the conclusion of the relevant tax period, after which they are securely expunged.

5. Data Subject Rights & Contact

Under the UAE PDPL, you have the right to request access, rectification, restriction of processing, or erasure of your personal data. To exercise your rights, contact our Data Protection Officer at: dpo@mycaglobal.com.