This Privacy Policy (the “Policy”) explains how MS Compliance and Legal FZ LLC (referred to in this Policy as “MSL”, “we”, “us” or “our”) collects, uses, processes, stores, discloses and protects personal data in connection with:
- the operation of our website and related digital platforms (the “Website”);
- enquiries and communications received through the Website, email, telephone, social media or other channels;
- the provision of legal, corporate, regulatory, compliance and related professional services; and
- our recruitment, business development, administration and other legitimate business activities.
MSL is a UAE-based legal and compliance advisory firm providing professional services to businesses, entrepreneurs, investors, family offices and other clients, subject to the scope of services offered by MSL from time to time.
Where this Policy refers to “you” or “your”, it means any individual whose personal data is collected or processed by MSL, including prospective and existing clients, directors, shareholders, beneficial owners, authorised representatives, officers, employees, consultants, professional contacts, website visitors, job applicants and other individuals whose information is provided to us in connection with our activities.
This Policy applies to personal data processed by MSL through the Website and in connection with our business and professional activities, subject to any additional privacy notices, contractual terms or specific notices that may apply to particular services or engagements.
This Policy should be read together with any applicable engagement letter, terms of business, contractual documentation, cookie notice or other privacy notice issued by MSL.
For the purposes of this Policy:
2.1 Personal Data
“Personal Data” means any information relating to an identified or identifiable natural person, whether directly or indirectly, including information such as a person's name, identification information, contact details, professional information, financial information, location information or other information relating to that individual.
2.2 Processing
“Processing” means any operation performed on Personal Data, including collection, recording, organisation, storage, use, retrieval, disclosure, transmission, restriction, modification, anonymisation or deletion.
2.3 Data Controller
“Data Controller” means the person or entity that determines the purposes and means of processing Personal Data. For the purposes of this Policy, MSL may act as the Data Controller in respect of Personal Data processed by it.
2.4 Data Processor
“Data Processor” means a third party that processes Personal Data on behalf of MSL and in accordance with MSL's documented instructions.
2.5 Cookies
“Cookies” means small files or similar technologies placed on your device when you access a website. Cookies may be used for website functionality, security, analytics, preferences and, where applicable, marketing.
2.6 UAE PDPL
“UAE PDPL” means Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data, together with any applicable implementing legislation, regulations, decisions, guidance or amendments.
2.7 Consent
“Consent” means a freely given, specific, informed and unambiguous indication of an individual's agreement to the processing of their Personal Data for a specified purpose, where consent is relied upon as the applicable lawful basis.
2.8 Website
“Website” means the website operated by MSL and any associated webpages, forms, portals or digital tools operated by or on behalf of MSL.
MS Compliance and Legal FZ LLC is responsible for the processing of Personal Data described in this Policy where MSL determines the purposes and means of such processing.
For privacy-related enquiries, requests, complaints, data-subject rights requests or notifications concerning a suspected Personal Data breach, you may contact us using the following details:
MS Compliance and Legal FZ LLC
Email:anas@ms-ca.com
Address:Fujairah Creative City Free Zone (20560/2026) in Twin Towers, PO Box 4422, United Arab Emirate
Phone:+971 23093344
Where appropriate, MSL may request reasonable information to verify your identity before responding to a Personal Data request.
MSL will endeavour to acknowledge privacy-related communications within five (5) business days and respond to verified requests within the period required by applicable law, taking into account the nature and complexity of the request.
The categories of Personal Data collected by MSL depend on the nature of your relationship and interaction with us.
4.1 Identity and Contact Information
We may collect:
- full name;
- nationality and date of birth, where relevant;
- residential or business address;
- email address;
- telephone or mobile number;
- Emirates ID, passport or other identification information where required;
- job title, designation and professional role;
- company or organisation details; and
- other contact information provided to us.
4.2 Professional and Corporate Information
In connection with our professional services, we may collect information concerning:
- companies and other legal entities;
- directors, shareholders and beneficial owners;
- authorised representatives and signatories;
- corporate structures and ownership information;
- business activities;
- licences and registration information;
- corporate documents and constitutional documents;
- commercial and contractual information; and
- information reasonably necessary to provide our legal or compliance services.
4.3 Legal, Regulatory and Compliance Information
Depending on the nature of an engagement, MSL may process information relating to:
- legal or regulatory matters;
- contractual arrangements;
- disputes or potential disputes;
- regulatory applications and filings;
- compliance requirements;
- corporate transactions;
- due diligence and verification;
- KYC and AML requirements;
- sanctions screening;
- source-of-funds or source-of-wealth information where legally or contractually required;
- beneficial ownership;
- regulatory correspondence; and
- other information necessary for providing professional services.
4.4 Website and Technical Information
When you access our Website, we may automatically collect certain technical information, including:
- IP address;
- approximate geographical location;
- browser type and version;
- operating system;
- device type and identifiers;
- date and time of access;
- pages visited;
- navigation and interaction information;
- referring website or traffic source;
- cookie identifiers; and
- other technical information generated through your use of the Website.
4.5 Enquiry and Correspondence Information
When you contact MSL by website form, email, telephone, social media or other communication channels, we may collect:
- your name and contact details;
- your organisation and professional position;
- the nature of your enquiry;
- information concerning the legal or compliance services you require;
- documents or information you voluntarily provide; and
- the content and records of communications with you.
4.6 Recruitment Information
If you apply for employment, consultancy, internship or other opportunities with MSL, we may collect:
- CV/resume;
- cover letter;
- educational qualifications;
- professional qualifications and certifications;
- employment history;
- references;
- contact information;
- information provided during interviews or assessments; and
- other information reasonably necessary for recruitment and employment purposes.
4.7 Marketing and Subscription Information
Where you subscribe to our publications, newsletters, legal updates, regulatory insights or other communications, we may collect:
- name;
- email address;
- professional interests;
- communication preferences; and
- records of consent, subscription and withdrawal.
MSL may collect Personal Data through:
5.1 Website Forms
When you submit an enquiry, contact form, service request, subscription form or other information through the Website.
5.2 Email and Telephone
When you communicate with MSL through email, telephone or other electronic or voice communication channels.
5.3 Professional Engagements
When you or an organisation you represent engages MSL for legal, compliance, regulatory or other professional services.
5.4 Documents and Information Provided by Clients
We may receive Personal Data contained in documents, contracts, corporate records, identification documents, transaction documents, regulatory filings and other materials provided to us in connection with an engagement.
5.5 Third-Party Sources
Where legally permitted and appropriate, we may receive information from:
- clients or prospective clients;
- authorised representatives;
- professional advisers;
- counterparties;
- publicly available sources;
- government or regulatory authorities;
- corporate registries;
- service providers; and
- other legitimate business or professional sources.
5.6 Social Media
Where you interact with MSL through social media platforms, we may process information that you voluntarily make available or provide through those platforms, subject to the privacy policies of the relevant platform.
5.7 Website Analytics and Cookies
We may collect technical information through cookies, analytics tools, server logs and similar technologies, as further described in Section 12.
MSL will process Personal Data only where there is a lawful basis for doing so under applicable data protection law.
Depending on the circumstances, the applicable lawful basis may include:
6.1 Performance of a Contract
Processing may be necessary to enter into, administer or perform a professional services engagement, including responding to enquiries and providing agreed services.
6.2 Compliance with Legal or Regulatory Obligations
MSL may process Personal Data where necessary to comply with applicable laws, regulations, court orders, regulatory requirements, AML/KYC obligations, record-keeping requirements or other legal obligations applicable to MSL.
6.3 Consent
Where required, MSL may rely on your consent for a specific processing activity, including certain marketing or non-essential cookie activities.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law and without affecting the lawfulness of processing carried out before withdrawal.
6.4 Legitimate Interests
MSL may process Personal Data where necessary for legitimate business or professional interests, provided that such processing is not overridden by applicable legal requirements or the rights and interests of the relevant individual.
This may include:
- managing client and professional relationships;
- maintaining professional records;
- improving our services and Website;
- protecting our systems and information;
- preventing fraud and misuse;
- managing business operations;
- conducting appropriate due diligence;
- maintaining business continuity; and
- protecting or enforcing MSL's legal rights.
6.5 Protection of Vital Interests
In exceptional circumstances, MSL may process Personal Data where necessary to protect the vital interests of an individual or another person.
MSL may process Personal Data for the following purposes:
7.1 Provision of Professional Services
To:
- assess and respond to enquiries;
- provide legal, corporate, regulatory and compliance services;
- establish and administer client relationships;
- prepare legal and commercial documentation;
- conduct legal and regulatory analysis;
- perform due diligence;
- manage transactions and engagements;
- communicate with clients and counterparties;
- undertake KYC and AML checks where applicable;
- maintain client and matter records; and
- otherwise perform activities necessary for the provision of our services.
7.2 Legal, Regulatory and Compliance Purposes
To:
- comply with applicable laws and regulations;
- satisfy KYC and AML requirements;
- conduct sanctions and other regulatory screening;
- respond to lawful requests from competent authorities;
- maintain records required by law;
- prevent fraud and other unlawful activities; and
- establish, exercise or defend legal claims.
7.3 Website and Operational Management
To:
- operate and maintain the Website;
- maintain website security;
- monitor technical performance;
- improve functionality and user experience;
- respond to website enquiries; and
- analyse website usage where appropriate.
7.4 Business Development and Marketing
Where legally permitted and where the applicable lawful basis exists, we may use Personal Data to:
- send legal and regulatory updates;
- distribute publications and insights;
- inform you about relevant MSL services;
- invite you to events or webinars;
- conduct business development activities;
- understand professional and market trends.
You may opt out of marketing communications at any time.
7.5 Recruitment
To:
- assess job applications;
- conduct recruitment processes;
- verify qualifications and references;
- communicate with applicants; and
- administer employment or engagement processes.
MSL does not sell, rent or trade Personal Data to third parties for their independent commercial purposes.
Personal Data may, however, be disclosed where reasonably necessary and lawful for the purposes described in this Policy.
8.1 Clients, Counterparties and Transaction Participants
Where necessary for an engagement, Personal Data may be shared with clients, counterparties, transaction participants or persons authorised by the client, subject to applicable confidentiality and legal obligations.
8.2 Government and Regulatory Authorities
MSL may disclose Personal Data where necessary or legally required to comply with applicable law, court orders, regulatory requirements, lawful government requests or other binding legal processes.
8.3 Service Providers and Data Processors
MSL may engage third-party service providers supporting our operations, including providers of:
- website hosting;
- cloud storage;
- information technology;
- email and communications;
- document management;
- cybersecurity;
- customer relationship management;
- accounting and administration;
- analytics; and
- other business support services.
Such providers will be required, where applicable, to process Personal Data in accordance with contractual and legal requirements and to implement appropriate security measures.
8.4 Professional Advisers
Where appropriate, Personal Data may be disclosed to MSL's professional advisers, including accountants, auditors, consultants, technology providers, insurers and other advisers, where necessary for legitimate professional or business purposes and subject to applicable confidentiality obligations.
8.5 Group or Affiliated Entities
Where applicable, MSL may share Personal Data with entities within its corporate group or affiliated entities where reasonably necessary for group governance, administrative support, service delivery, referrals or compliance purposes, subject to applicable law and appropriate confidentiality and data protection safeguards.
8.6 Legal Claims and Protection of Rights
MSL may disclose Personal Data where reasonably necessary to establish, exercise or defend legal claims, protect its rights or interests, investigate suspected fraud or misconduct, or protect the security of its systems and operations.
MSL recognises the importance of confidentiality in the provision of legal and professional services.
Personal Data and information provided to MSL in connection with a client engagement will be handled in accordance with applicable confidentiality obligations, professional standards, contractual obligations and applicable law.
Where applicable, certain communications or documents may be subject to legal professional privilege or other protections recognised under applicable law. However, the existence, scope and applicability of legal professional privilege may depend on the circumstances and applicable legal framework.
Nothing in this Privacy Policy is intended to waive, limit or override any applicable confidentiality obligation, privilege or professional duty.
The privacy protections described in this Policy apply to Personal Data processed by MSL. Specific client engagements may also be subject to additional confidentiality, data protection and information-security provisions contained in the applicable engagement documentation.
As an international legal and compliance practice, MSL may use service providers, professional advisers, technology platforms or other recipients located outside the United Arab Emirates.
Accordingly, Personal Data may be transferred to or processed in jurisdictions outside the UAE where necessary for legitimate business, professional, contractual or legal purposes.
Where applicable, MSL will implement appropriate safeguards for cross-border transfers in accordance with applicable data protection law.
Such safeguards may include:
- transferring Personal Data to jurisdictions recognised as providing an adequate level of protection;
- entering into appropriate contractual data protection arrangements;
- implementing appropriate technical and organisational measures; and
- relying on another lawful transfer mechanism available under applicable law.
You may contact MSL using the details in Section 3 if you require further information regarding safeguards applicable to a particular international transfer.
MSL retains Personal Data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by applicable law, regulation, professional obligations, contractual requirements or legitimate business requirements.
Retention periods may vary depending on the nature and purpose of the Personal Data.
As a general guideline:
- Enquiry and contact information: may be retained for a reasonable period following the last interaction, unless an ongoing relationship is established.
- Client and matter records: may be retained for the duration of the engagement and thereafter for the period required by applicable law, professional obligations, regulatory requirements, limitation periods and MSL's document-retention policies.
- KYC/AML and compliance records: may be retained for the period required by applicable law and regulatory requirements.
- Website technical data: may be retained for periods reasonably necessary for security, analytics and operational purposes.
- Marketing records: may be retained while the relevant relationship or subscription continues and for a reasonable period thereafter.
- Recruitment records: may be retained for the duration of the recruitment process and thereafter for a reasonable period, unless a longer period is required or permitted by law or the applicant has consented to longer retention.
When Personal Data is no longer required, MSL will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements and our internal retention procedures.
The Website may use cookies and similar technologies for functionality, security, analytics and, where applicable, marketing purposes.
12.1 Types of Cookies
These may include:
- Strictly Necessary Cookies:
These cookies are necessary for the operation, security and functionality of the Website. - Performance and Analytics Cookies:
These cookies may help us understand how visitors use the Website, including pages viewed, traffic sources and general website interaction. - Functional Cookies:
These may allow the Website to remember preferences and improve functionality. - Marketing Cookies:
Where used, these technologies may support marketing, audience measurement or remarketing activities, subject to applicable consent requirements.
12.2 Managing Cookie Preferences
You may manage or disable certain cookies through your browser settings or through any cookie preference mechanism provided on the Website.
Disabling certain cookies may affect the functionality or performance of the Website.
Where required, MSL will seek consent for non-essential cookies before deploying them.
MSL takes reasonable technical, organisational and administrative measures designed to protect Personal Data against unauthorised access, alteration, disclosure, loss, misuse or destruction.
These measures may include:
- access controls and authentication mechanisms;
- role-based access to information;
- encryption where appropriate;
- secure storage systems;
- data minimisation;
- confidentiality obligations for personnel and service providers;
- information-security procedures;
- secure handling of client and identification documents;
- monitoring and security assessments;
- incident-response procedures.
However, no method of electronic transmission, storage or processing can be guaranteed to be completely secure.
Accordingly, while MSL takes reasonable precautions to protect Personal Data, we cannot guarantee absolute security of information transmitted through the internet.
If you become aware of an actual or suspected security incident involving Personal Data provided to MSL, please contact us immediately using the contact details set out in Section 3.
Where required by applicable law, MSL will notify the relevant authority and/or affected individuals of a Personal Data breach within the applicable statutory timeframe.
Where legally permitted, MSL may send you:
- legal and regulatory updates;
- newsletters;
- legal insights;
- publications;
- invitations to seminars, webinars and events;
- information regarding MSL's services; and
- other professional communications.
Where consent is required, MSL will obtain the relevant consent before sending such communications.
You may unsubscribe from marketing communications at any time by:
- using the unsubscribe mechanism included in the communication;
- contacting MSL using the email address specified in Section 3; or
- otherwise notifying us that you no longer wish to receive marketing communications.
Opting out of marketing communications will not affect service-related or legally required communications.
Subject to applicable law and any applicable exemptions or limitations, you may have rights in relation to your Personal Data, including:
15.1 Right of Access
You may request information regarding whether MSL processes your Personal Data and, where applicable, request access to such Personal Data.
15.2 Right to Rectification
You may request correction or updating of Personal Data that is inaccurate, incomplete or outdated.
15.3 Right to Erasure
You may request deletion of Personal Data where the applicable legal requirements for erasure are satisfied.
This right may be restricted where MSL is required or permitted by law, regulation, professional obligation, contractual requirement or legal proceedings to retain the relevant information.
15.4 Right to Restriction
Where applicable, you may request restriction of certain processing activities in circumstances permitted by applicable law.
15.5 Right to Data Portability
Where applicable under the relevant data protection framework, you may request Personal Data in a structured and commonly used format and, where technically feasible and legally required, request its transfer to another controller.
15.6 Right to Object
Where applicable, you may object to certain processing activities, including processing based on legitimate interests or direct marketing.
15.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.
15.8 Automated Decision-Making
MSL does not currently make decisions producing significant legal or similarly significant effects concerning individuals solely through automated decision-making.
If our practices materially change, this Policy will be updated as appropriate.
To exercise any applicable rights, please submit a written request using the contact details set out in Section 3.
MSL may require reasonable evidence of identity before processing a request in order to protect Personal Data from unauthorised disclosure.
The Website may contain links to third-party websites, platforms or services.
These third-party websites are not controlled by MSL, and this Policy does not apply to their processing of Personal Data.
MSL is not responsible for the privacy practices, security, content or data-processing activities of third-party websites.
You should review the applicable privacy policy and terms of use of any third-party website before providing Personal Data to that website.
MSL's Website and professional services are primarily directed towards adults, businesses and professional users.
MSL does not knowingly seek to collect Personal Data from individuals under eighteen (18) years of age through the Website unless such collection is necessary and lawful in the particular circumstances.
If you believe that Personal Data relating to a minor has been provided to MSL without appropriate authority or legal basis, please contact us using the details in Section 3.
MSL is committed to processing Personal Data in accordance with applicable data protection and privacy laws.
The principal federal framework applicable to MSL's UAE operations is Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data, subject to its scope, exemptions and any applicable implementing legislation. The UAE Government identifies the law as the federal framework governing the protection and processing of Personal Data in the UAE.
Depending on the location of the relevant processing activity, the nature of the services and the applicable legal framework, additional data protection requirements may apply.
Where MSL processes Personal Data subject to a separate data protection regime, MSL will seek to comply with the applicable requirements of that regime.
If you have a concern regarding MSL's processing of your Personal Data, we encourage you to contact us first using the details provided in Section 3.
We will review and address privacy complaints in accordance with applicable law and our internal procedures.
Where applicable, you may also have the right to raise a complaint with the competent data protection or regulatory authority.
MSL may amend or update this Policy from time to time to reflect:
- changes in our business activities;
- changes to the Website;
- changes in technology;
- changes in applicable laws or regulations;
- regulatory guidance; or
- changes to our data-processing practices.
Where material changes are made, MSL may provide an appropriate notice, including by publishing the updated Policy on the Website and updating the “Last Updated” date.
You are encouraged to review this Policy periodically to remain informed about how we process Personal Data.
If you have any questions, requests, complaints or concerns regarding this Policy or the processing of your Personal Data, please contact:
MS Compliance and Legal FZ LLC
Email:anas@ms-ca.com
Address:Fujairah Creative City Free Zone (20560/2026) in Twin Towers, PO Box 4422, United Arab Emirate
Telephone:+971 23093344
Please include sufficient information in your request to allow us to identify the nature of your enquiry and, where relevant, verify your identity.
MSL is committed to handling privacy-related enquiries professionally, transparently and in accordance with applicable data protection and confidentiality obligations.