Privacy policy

Who is responsible for your information?

This website is operated under the brand name Company Dubai. Company Dubai decides what information is collected through this website and how it is used.

Still to be confirmed: the registered legal name of the entity or person operating Company Dubai, its place of establishment, its licence or registration details, and a dedicated privacy contact address. We have not published those details here because they have not yet been verified. Until they are, you can reach us through our contact page.

Information we collect

Information you give us

When you send an enquiry through a form on this website, we receive:

• your full name;
• your email address;
• where you are in the process (for example, starting a new company, already have a company in Dubai, or exploring your options);
• the service you are interested in, if you select one;
• your message, if you choose to write one (optional, up to 1,500 characters);
• your confirmation that we may contact you by email about your enquiry, stored together with the exact wording you agreed to, a version label for that wording, and the date and time you agreed.

The forms do not ask for a phone number, an address, identity documents or file uploads, and there is no way to upload documents on this website. Please do not send passport scans, Emirates ID details or other sensitive documents in the message field.

Information recorded automatically with your enquiry

• the date and time your enquiry was received;
• which page of this website you sent it from (for example /company-formation-dubai);
• a short technical marker built from your email address and your answers, used to recognise the same enquiry being submitted twice by accident;
• technical error messages in our server logs if a submission fails.

Information we add after your enquiry

When we work on your enquiry in our private admin area, we add and keep: a status (new, in progress, awaiting client, closed), a record of each status change with the date and the admin email address that made it, internal notes written by us about your enquiry, and the date an enquiry was archived.

Our replies to you are sent by email, so the email correspondence itself is stored in our email account and in yours.

How we use your information

• to read and understand your enquiry;
• to reply to you by email and ask any follow-up questions;
• to explain the support we propose and what it would cost;
• to coordinate work you agree to, with the specialist providers involved;
• to keep track of enquiries we are working on, using statuses and internal notes;
• to protect the website from spam and automated abuse — we check a hidden field that only automated tools fill in, how quickly the form was completed, whether an identical enquiry arrived minutes earlier, and how many enquiries have come from the same email address in the past hour.

We do not use your information for advertising, we do not add you to a newsletter or marketing list, and we do not profile you automatically. Ticking the consent box on an enquiry form means we may reply to that enquiry by email — nothing more.

Still to be confirmed: which legal grounds for processing apply depends on the framework that applies to the operating entity (see “Your choices and rights”). We have not stated legal grounds here because that would be guesswork.

Who we share information with

Providers that run this website for us

Some technology providers necessarily handle your information because they operate the website and store the enquiries:

• our website hosting and application platform, which serves the pages and runs the code that receives your enquiry;
• a managed database and authentication service, where enquiries, notes and status history are stored;
• Google Fonts, which serves the two typefaces used on this website. Your browser requests those font files from Google, so Google receives your IP address and browser details when a page loads;
• Google, for signing in to our private admin area. This applies to our own admin account, not to visitors.

These providers process information for us; they are not given it for their own marketing.

Specialist service providers

Company Dubai coordinates setups with specialist providers such as formation agents and accounting specialists. Where an introduction is useful, we explain who is involved, what they would do, what it costs and any referral fee before we pass your details on, and we only pass them on with your agreement. No part of this website sends your enquiry to a third party automatically.

Still to be confirmed: the list of specialist providers, the exact information shared with each of them, and how your agreement is recorded. Those are business decisions that have not been documented yet, so this section describes our stated intention rather than a documented procedure.

We may also disclose information where we are legally required to do so, or to establish or defend a legal claim.

Where information is stored

Enquiries, internal notes and status history are stored in a managed database hosted on Amazon Web Services infrastructure in Ireland (the eu-west-1region). That means your information is stored in the European Union, not in the UAE, even though our services concern Dubai.

The website itself is served from a globally distributed hosting platform, so the request that carries your enquiry may be handled in a location closer to you before the enquiry is saved in Ireland. Our email replies are handled by the email provider of the account we reply from.

Still to be confirmed: we have not verified the data-transfer terms in place with each provider, so we make no claim here about specific contractual transfer safeguards.

How long we keep information

Enquiries are kept in our database so we can follow up and understand the history of a conversation. Our admin area lets us mark an enquiry as closed and archive it. Archiving hides an enquiry from our working list; it does not delete it.

There is currently no automatic deletion or purge running on this website, and email correspondence stays in the email account it was sent from.

Still to be confirmed: no retention period has been decided yet for enquiries that do not lead to work, for records of completed work, or for internal notes. We will state the periods here once they are set. In the meantime, you can ask us to delete your enquiry (see below).

Cookies and similar technologies

This website does not use analytics, advertising pixels, social media trackers, chat widgets, video embeds or a third-party spam-protection service. Our spam checks run on our own server, as described above.

As a visitor browsing the public pages and sending an enquiry, this website does not set cookies on your device and does not store your enquiry in your browser’s local or session storage.

Signing in to our private admin area does store a login session in that administrator’s own browser. That storage is necessary for the login to work and does not apply to visitors.

Because there is no non-essential tracking, this website does not show a cookie consent banner. Loading the Google Fonts files, described above, still involves a request to Google that reveals your IP address; that request is part of displaying the page rather than tracking you across websites.

Your choices and rights

The United Arab Emirates has a federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), in force since 2 January 2022. Its Executive Regulations, which would set out the procedures and time limits for handling requests, have not been issued. Separate regimes apply to businesses established in certain financial free zones, such as the DIFC and ADGM, and a business storing data in the European Union may also have obligations there.

Still to be confirmed: which of these frameworks applies to Company Dubai depends on where the operating entity is established, and that has not been verified. For that reason this page does not claim full compliance with a particular law, and does not promise a fixed response deadline.

Regardless of which framework applies, you can always ask us to:

• tell you what information we hold about you;
• correct information that is wrong or out of date;
• delete your enquiry and the notes attached to it;
• stop contacting you about your enquiry;
• send you a copy of what you submitted.

We will act on such a request unless we are required to keep something — for example to comply with a legal obligation or to deal with a legal claim. If we cannot do what you ask, we will explain why.

You agreed only that we may contact you by email about your enquiry. To withdraw that, reply to any email from us and ask us to stop, or send us a request through the contact page. Withdrawing it means we stop emailing you about your enquiry.

How we protect your information

• Traffic between your browser and this website is encrypted.
• Your enquiry is checked and cleaned on our server before it is stored, and oversized or malformed submissions are rejected.
• Enquiries, notes and status history are not readable from the public website. Access rules on the database restrict them to an authorised administrator account.
• The admin area requires signing in with a Google account, and only one pre-authorised account is allowed to reach it. Nobody can register for access.
• Internal notes and status changes are recorded with the administrator who made them, so changes are traceable.

No website can promise absolute security, and we make no certification claims. If you believe your information has been exposed, please tell us.

Contact us about privacy

To ask a privacy question or make a request about your information, use our contact page. Write “privacy request” in the message so we can recognise it quickly.

You do not need to be a customer, and you do not need to be interested in setting up a company, to make a privacy request. The form asks you to confirm that we may reply by email — that is how we answer you, and it is not permission for marketing.

Still to be confirmed: a dedicated, monitored privacy email address has not been set up yet, so we have not published one here rather than publish an address that nobody reads.

Updates to this policy

We will update this page when the way we handle information changes — for example when the responsible legal entity, the privacy contact address or our retention periods are confirmed, or when we add a new tool to the website.

This draft was last revised on 8 September 2026. It has not been given a production effective date, because it is not finished.