Skip to main content

Privacy Policy

Last updated: October 2026

1. Information We Collect

We collect information you provide directly, including:

  • Contact information (name, email, phone number)
  • Company information (business name, size, industry)
  • Inquiry details submitted through our forms

2. How We Use Your Information

Your information is used to:

  • Respond to your inquiries and requests
  • Provide information about UAE e-invoicing compliance
  • Connect you with accredited service providers
  • Send relevant updates about regulatory changes (if subscribed)

3. Data Sharing

We share your personal information only in these limited ways:

  • With the provider(s) you choose to be introduced to, and only those providers
  • With service providers who help us operate the site (e.g., form processing, hosting)
  • With authorities when required by law

When you ask to be introduced to a provider, we may receive a referral fee from that provider (see section 4). We never sell your details to data brokers or to any third party you have not chosen, and we never broadcast them to providers you did not select.

If you ask us for help, we may ask providers about their process and price before you have chosen any of them. That message contains your requirements only: no name, company, email address, phone number or website, and no detail unusual enough to point to one company. Your details go to a provider only if you then agree to be introduced to it.

4. Assessments, Introduction Requests & Lead Routing

When you complete our readiness assessment, we record the details you provide (your name, email and company, and your answers, such as revenue band, compliance phase, ERP, invoice volume, integration channel, timeline, IT capability and number of entities) so we can produce your report and, only if you ask us to, introduce you to providers. This record is stored in our database (Cloudflare D1) and retained for up to 24 months, after which it is deleted or anonymised. Completing the assessment does not share your details with any provider, that only happens when you explicitly opt in and choose which providers to be introduced to.

When you request an introduction to a specific provider, we record that request, the provider you chose, the page you came from, a tracking reference, and the contact and company details you submit, so we can route it and follow up. These records are stored in the same database and retained for up to 24 months, after which they are deleted or anonymised. This applies equally when you request an introduction to a company listed in our Ecosystem Directory (ERP implementers, tax/VAT advisors), a self-listed directory distinct from our MoF Accredited ASP registry.

Messages and submissions sent through our other forms (the contact form, service requests, partner applications, provider profile claims and Ecosystem Directory listings) are stored in the same database, so that none is lost if our form-email service is unavailable, and are retained for up to 24 months, after which they are deleted or anonymised.

Each introduction request is shared only with the provider you selected for that request. You may request introductions to more than one provider; each goes solely to the provider you chose. We never broadcast your details to providers you did not select, and we never sell them to anyone else.

If an introduction leads to an engagement, we may receive a referral fee or a margin from the provider. This is never charged to you and never affects which providers are listed or the order in which they appear. In the registry, ordering depends only on whether a provider has added a full profile, then alphabetical order. In your own assessment report, the shortlist is ordered by what you told us matters most to you and what each provider has stated about itself, and by nothing else. See our Terms of Service for details.

5. Cookies

We use essential cookies to ensure website functionality. We do not use tracking cookies for advertising purposes.

With your permission we use Google Analytics 4 to understand how the site is used. The cookie banner asks first. If you choose Essential Only, we do not set analytics cookies or record your visit. If you choose Accept All, Google Analytics sets cookies and receives usage data: the pages you view, the options you choose in our tools (for example an ERP or an invoice volume band), which providers you shortlist, compare or click through to, and technical details such as your browser, device and approximate location. We do not send your name, email address, phone number or company name to Google Analytics, and advertising storage stays switched off. Google may process this data outside the UAE.

The Google tag is loaded on every page so that your choice can take effect. Until you accept, it is set to deny analytics storage and we do not configure it to record visits, but fetching the script means your browser contacts Google's servers. You can change your choice at any time with Cookie Settings in the footer.

Some tools keep your progress in your own browser's storage: the compliance checklist, the readiness planner, and on the directory the needs you describe and the providers on your shortlist. That stays on your device and reaches us only if you send an enquiry.

6. Data Security

We implement appropriate security measures to protect your information. However, no internet transmission is completely secure.

7. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Opt-out of marketing communications

8. Contact Us

For privacy-related inquiries, please contact us through the form on our About page.