Privacy Policy

Effective date: 17 October 2026 | Version 2.2

This Privacy Policy explains how Tajnes Business Management Est. (“Tajnes”, “we”, “us”), licensed by the Dubai Department of Economy and Tourism (DET), licence no. 1219274, Al Saqr Business Tower, Dubai, collects, uses, shares and protects personal data when you use our website, contact us or use our services. We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its regulations as issued.

1. Personal data we collect

  • Contact details: name, email address, phone or WhatsApp number, country and company name.
  • Identity and due diligence data: passport, Emirates ID and visa copies, photographs, date of birth, nationality, address, proof of address, source of funds and wealth, and details of shareholders, directors and beneficial owners.
  • Service data: business activities, quotations, applications, licences, visas, contracts, invoices and payment records (we do not store full card numbers).
  • Communications: emails, WhatsApp messages, call notes and form submissions.
  • Website data: pages visited, device and browser type, approximate location and referral source, collected through first-party statistics.

Sensitive data. For visa and residency services we may handle health data (medical fitness results), biometric data (fingerprints and Emirates ID) and police clearance certificates. We process this only to complete the service you asked for or because the law requires it, and only authorised staff can access it.

If you give us data about other people (for example shareholders, family members or employees), you confirm that you may share it and that you have told them about this policy.

2. Why we use your data and our legal bases

  • To prepare quotations, deliver our services and issue invoices: performing a contract with you, or steps you ask for before a contract.
  • To carry out anti-money laundering, sanctions and identity checks, keep records and report to authorities: our legal obligations.
  • To submit licence, visa and other applications to authorities and banks: performing our contract with you and our legal obligations.
  • To answer enquiries sent through our forms, WhatsApp, email or phone: steps you ask for, or your consent.
  • To send newsletters and offers: your consent, which you can withdraw at any time.
  • To understand how our website is used and improve it: your consent where required, otherwise our legitimate interest in running a secure, useful website.
  • To establish, exercise or defend legal claims: as permitted by law.

3. Who we share data with

We share personal data only as needed for the purposes above, with:

  • Government authorities, free zones and registries (for licences, visas, Emirates ID and registrations).
  • Banks and payment providers, on your instruction.
  • Our website host (Hostinger) and form tools that store submissions on our own server.
  • Email, office and messaging providers (including WhatsApp, operated by Meta).
  • Professional advisers, translators and couriers engaged for a specific task.
  • Authorities and regulators where the law requires it, including the UAE Financial Intelligence Unit.

We may also share data to prevent fraud, protect our legal rights, or as part of a merger, sale or restructuring of our business, in which case we will tell you. We do not sell personal data.

4. International transfers

Some providers (for example messaging, email or hosting services) may store data outside the UAE. We transfer data outside the UAE only as allowed by Articles 22 and 23 of the Personal Data Protection Law: to countries with adequate protection, with contractual safeguards, where the transfer is needed to perform our contract with you, or with your consent.

5. How long we keep data

  • Due diligence documents, identity copies, beneficial-ownership and transaction records: at least 5 years after the relationship ends, or longer if an authority requires.
  • Contracts, invoices, accounting and tax records: as long as UAE commercial and tax law requires, and at least 5 years.
  • Enquiries that did not become clients: 24 months from the last contact.
  • Marketing list: until you unsubscribe, after which we keep only a record that you opted out.
  • Website statistics: up to 25 months, in aggregated form.

After these periods we delete or anonymise the data, unless it is needed for a legal claim.

6. Security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), access controls, restricted staff access, secure hosting and regular updates. No system is completely secure. We are responsible for our own failures to protect your data, but not for risks under your control, such as your own devices or accounts.

We may scan emails and attachments for viruses and spam. If you receive a message from us in error, please delete it and tell us. If a breach affects your privacy, confidentiality or security, we will notify the UAE Data Office as the law requires and tell you without undue delay what happened, what data was involved and what you can do.

7. Your rights

Subject to UAE law and its exceptions, you may ask us to:

  • confirm whether we process your personal data and give you a copy, in a commonly used electronic format where the law provides;
  • correct inaccurate or incomplete data;
  • delete data we no longer need or have no lawful basis to keep;
  • restrict or stop processing, and object to direct marketing or profiling;
  • have a person review any decision made only by automated means (we do not make such decisions).

To exercise your rights, email info@tajnes.com. Requests are free of charge. We may need to verify your identity. We respond within 30 days and may extend this by another 30 days for complex requests, telling you why. We may refuse or limit a request where the law requires us to keep the data (for example anti-money laundering records), where it is needed for legal claims, or where a request is manifestly unfounded or excessive, and we will explain why. If you are not satisfied, you can complain to the UAE Data Office. Please contact us first so we can try to resolve it.

8. Cookies and similar technologies

Our website uses essential cookies to work and first-party statistics hosted on our own server. Before loading any third-party cookies or tools (for example maps, videos, advertising pixels or chat), we ask for your consent through our cookie banner, and you can change your choice at any time from the cookie settings link in the footer. Embedded content, such as reviews, may come from third parties and loads only after consent where it sets cookies.

9. Marketing messages

We send newsletters and promotions only with your consent. Every message offers an easy way to opt out, and replying “STOP” on WhatsApp works. We make marketing calls only within the hours permitted by UAE telemarketing rules, and we respect the Do Not Call Registry.

10. Children

Our website and services are for adults and businesses. We process children’s data only when a parent or guardian provides it for a family visa or similar service, and only for that purpose.

11. Links to other websites

Our website may link to third-party websites, such as government portals. We are not responsible for their content or privacy practices.

12. Changes to this policy

We may update this policy from time to time. The version and date are shown at the top. If we make material changes, we will notify active clients.

13. Contact us

Tajnes Business Management Est., Al Saqr Business Tower, Dubai, United Arab Emirates. DET licence no. 1219274. Email: info@tajnes.com. WhatsApp: +971 56 904 6666. Hours: Sunday to Friday, 9 AM to 8 PM.

General information. This policy is not legal advice.