Legal · updated May 11, 2026

Privacy policy

This document explains what personal data Bright Global Tax Consulting and Accounting — FZCO ("BGA", "we") collects, on what basis, how we protect it, and your rights. Effective from May 11, 2026.

1. Data controller

Bright Global Tax Consulting and Accounting — FZCO, commercial Free Zone licence, Office 1534, Tamani Arts Office Tower, Business Bay, Dubai, UAE. Data-protection contact: office@bga.ae.

2. What data we collect

  • Contact data: name, phone, email, Telegram/WhatsApp, company name or line of business — from website forms and correspondence.
  • Service-delivery data: incorporation documents, bank statements, tax and HR information for your company — only to the extent required by the engagement.
  • Technical data: server logs (IP, request time, user agent) for abuse protection. We use only functional cookies; no behavioural tracking or ad pixels.

3. Legal basis and purposes

Processing is performed on grounds set out in UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL):

  • your consent given by submitting a form — for responding to your enquiry;
  • performance of a service contract — for bookkeeping, tax and HR work;
  • compliance with UAE law — for reporting to FTA, MOHRE, DED, auditors.

4. Who we share data with

  • UAE authorities (FTA, MOHRE, DED, Free Zone regulators) — only the mandatory reporting scope.
  • Partner auditors and banks — on your instruction and within the engagement.
  • Cloud providers (QuickBooks Online / Intuit — for bookkeeping). Data-protection agreements are in place with providers.

We do not sell data to third parties and do not use it for marketing without your separate consent.

5. Retention

Client data is retained for the term of the engagement and a further 5 years — the statutory retention period for primary accounting records in the UAE. Contact data from enquiries that do not result in a contract is deleted within 12 months.

6. Data protection

  • All staff sign NDAs. Document access is limited to the assigned accountant and the practice lead.
  • Data is transferred over secure channels (HTTPS, end-to-end encryption in messengers).
  • Backups are stored encrypted.

7. Your rights under PDPL

  • Obtain a copy of the data we hold about you.
  • Request correction of inaccurate data.
  • Withdraw consent and request erasure (subject to statutory retention periods).
  • Lodge a complaint with the UAE Data Office.

To exercise these rights, write to office@bga.ae. We respond within 30 days.

8. Changes to this policy

We may update this policy. The latest update date is shown at the top. We notify active clients of material changes by email.