Privacy Policy

1. Corporate Entity & Scope of Policy

This Privacy Policy outlines how Finovision Business Solutions LLC (“Finovision”, “we”, “us”, or “our”), registered under Commercial Entity License #1804056 in Sharjah Media City (Shams), United Arab Emirates, collects, stores, processes, and protects corporate and personal data.

This policy applies to all visitors, clients, prospective businesses, and individuals interacting with our website (finovision.net), consulting services, accounting platforms, tax compliance portals, and direct advisory channels across the UAE, Oman, and India.

2. UAE Statutory & Regulatory Compliance

We govern our data collection and record processing operations in strict adherence to relevant United Arab Emirates federal and emirate laws, including without limitation:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
• Federal Decree-Law No. 14 of 2023 on the Regulation of the Accounting and Auditing Professions;
• Federal Decree-Law No. 8 of 2017 on Value Added Tax, and subsequent regulatory decisions by the Federal Tax Authority (FTA);
• Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses;
• Federal Law No. 34 of 2021 on Concerning the Fight Against Rumors and Cybercrime.

3. Categories of Information We Collect

In our capacity as certified corporate accountants, auditors, and tax support specialists, we collect only data necessary to execute contracted advisory engagements:

A. Corporate & Identification Data

Trade licenses, memoranda of association, passports, Emirates IDs of ultimate beneficial owners (UBOs) and directors, power of attorney documents, and authorized signatory registries required for statutory Know Your Customer (KYC) and Anti-Money Laundering (AML) diligence.

B. Accounting & Financial Records

Trial balances, general ledgers, sales and purchase invoices, bank account statements, credit card statements, payroll records, depreciation schedules, and inventory registers provided to perform bookkeeping or internal audit testing.

C. Tax & Regulatory Filing Documentation

Tax Registration Numbers (TRN), VAT return filings (Form VAT201), custom declarations, import/export certificates, zero-rated documentation, and corporate tax registration dossiers submitted to the FTA.

D. Digital & Communication Channels

Inquiry forms submitted through our website, contact emails sent to info@finovision.net, phone and WhatsApp logs via +971 50 301 0675, technical IP addresses, browser types, and standard server log metrics.

4. Purpose & Legal Basis of Processing

We process information strictly on lawful grounds recognized by UAE PDPL Article 4, specifically:

• Contractual Execution: Delivering agreed bookkeeping, VAT filings, statutory audits, or ERP accounting software implementations;
• Statutory Compliance: Satisfying mandatory obligations enforced by the Federal Tax Authority (FTA), Ministry of Economy, and Shams licensing authorities;
• Legitimate Professional Interests: Performing quality assurance reviews, defending client tax positions during FTA administrative audits, and mitigating financial reporting error risks;
• Client Consent: Processing direct inquiries, service proposal quotes, and appointment bookings submitted through our digital forms.

5. Client Confidentiality & Workpaper Protection

In accordance with professional accounting ethics established by CPA standards and UAE auditing statutes, all client records, commercial margins, supplier arrangements, and financial statements are deemed strictly confidential.

No member of our advisory personnel is permitted to disclose, duplicate, or disseminate proprietary financial metrics without explicit written authorization from the client’s authorized executive.

6. Third-Party Disclosures & Statutory Submissions

Finovision does not sell, license, or commercially trade client records to advertisers or external marketing organizations. Information may only be disclosed under the following controlled parameters:

• Governmental Tax Authorities: Direct submission of VAT return filings, corporate tax returns, and audit documentation to the Federal Tax Authority (FTA) upon client authorization;
• Accredited Technology Infrastructure: Secured cloud accounting partners (e.g. Zoho Books, Tally Prime) operating encrypted data hosting environments with regional GCC redundancy;
• Judicial & Regulatory Mandate: Compliance with binding court orders, public prosecution subpoenas, or regulatory investigations issued by competent UAE jurisdictions.

7. Mandatory Record Retention Periods

Under UAE Federal Tax Authority guidelines and the Commercial Companies Law, corporate accounting workpapers, tax invoices, and supporting financial vouchers must be retained for defined statutory periods:

• Commercial Books & Records: Minimum of five (5) years following the conclusion of the relevant fiscal period;
• Value Added Tax (VAT) Documentation: Minimum of five (5) years following the end of the tax period to which they relate;
• Real Estate Capital Assets: Minimum of fifteen (15) years from the date of asset acquisition under FTA capital asset guidelines;
• Inquiry & Marketing Records: Stored for no longer than eighteen (18) months unless a formal engagement contract is executed.

8. Data Subject Rights Under UAE PDPL

Clients and authorized corporate representatives retain distinct statutory rights regarding personal data held in our systems:

• Right to Access: Request verification and a readable copy of personal records maintained by our firm;
• Right to Rectification: Request prompt correction of inaccurate, outdated, or incomplete corporate records;
• Right to Restriction or Erasure: Request data erasure when processing is no longer required for statutory tax or commercial compliance;
• Right to Withdraw Consent: Revoke consent for digital marketing communications at any point without impacting contracted compliance services.

9. Information Security Safeguards

We employ enterprise-grade administrative, technical, and physical safeguards to defend client records against unauthorized interception, destruction, or exfiltration:

• SSL/TLS 256-bit encryption for all digital form submissions and server communications;
• Role-based access controls limiting client records strictly to assigned senior advisors and qualified CPAs;
• Multi-factor authentication (MFA) across our cloud accounting suites and corporate email infrastructure;
• Encrypted off-site disaster recovery backups scheduled daily to ensure high availability and business continuity.

10. Inquiries & Data Protection Officer Contact

For questions regarding this Privacy Policy, statutory record handling, or to exercise your rights under UAE Personal Data Protection Law, please contact our designated compliance team: