Privacy Policy

Who is responsible for your data

Rupasya Circle FZE of Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates is the controller of the personal data described in this policy. Questions, or requests to exercise your rights, go to hello@gethatched.co. [If a Data Protection Officer is appointed, give their contact details here.]

This policy covers this website and the services we provide. Depending on where you are located, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the EU and UK General Data Protection Regulation, or other local data protection law may apply to our processing of your data.

What we collect

When you enquire. Your name, email address, telephone number, the jurisdiction and services you are interested in, and anything else you choose to tell us in the message field.

When you become a client. Because we are a regulated service provider, we must collect substantially more, including:

• identity documents - passport, national identity card, proof of address;
• details of directors, shareholders and ultimate beneficial owners, including ownership percentages;
• information about your source of funds and source of wealth, and supporting evidence;
• the nature and purpose of your business activity and expected transaction patterns;
• the results of sanctions, politically-exposed-person and adverse-media screening;
• financial records necessary to deliver bookkeeping, accounting and filing services.

Automatically, when you visit. IP address, device and browser type, pages viewed, referring page and approximate location, collected through server logs and analytics.

Why we process it, and on what basis

• To respond to your enquiry and prepare a quotation - because you asked us to, and to take steps at your request before entering a contract.
• To deliver the services - performance of our contract with you.
• To meet anti-money-laundering, counter-terrorist-financing, sanctions, tax and corporate filing obligations - compliance with a legal obligation. This basis is important: it means we must process and retain certain data whether or not you consent, and it limits your ability to require deletion.
• To operate, secure and improve our business and this website - our legitimate interests, balanced against your rights.
• To send marketing, where we do - your consent, which you may withdraw at any time.

We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

Who we share it with

• Registries and authorities - company registries, free zone authorities, licensing bodies and tax authorities, where filing requires it.
• Banks and payment providers - where you ask us to make an introduction or prepare an application.
• Local counsel, registered agents, notaries, translators and auditors - where needed to deliver your engagement.
• Service providers who help us operate - hosting, email, document storage, customer relationship management, screening tools and analytics, each acting on our instructions under contract.
• Regulators, law enforcement and courts - where required by law. This includes suspicious activity reporting, which we may be prohibited from disclosing to you.
• A purchaser - if our business or part of it is sold or reorganised.

International transfers

We operate across the UAE, Singapore, the United States, the British Virgin Islands and the Cayman Islands, so delivering a structure normally requires transferring data between those jurisdictions. Data protection standards differ between them. Where we transfer personal data internationally we rely on an applicable legal mechanism - including your explicit consent, necessity for performance of a contract, necessity for the establishment or defence of legal claims, or contractual safeguards with the recipient.

How long we keep it

• Enquiries that do not become engagements - retained for a limited period and then deleted or anonymised.
• Client and due-diligence records - retained for the period applicable law requires, commonly at least five years from the end of the relationship or the completion of the transaction, and longer where a specific jurisdiction, an audit or an investigation requires it.
• Accounting records - retained for the statutory period in the relevant jurisdiction.

Because these retention periods are legal obligations, we cannot delete such records on request before they expire.

Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including access controls, encryption in transit, and restricting access to personnel who need it. No system is completely secure, and we cannot guarantee the security of information transmitted to us over the internet. Please do not send identity documents by unsecured email; ask us for a secure upload link.

Your rights

Subject to the law that applies to you, you may have the right to: access the personal data we hold about you; have inaccurate data corrected; request erasure; restrict or object to processing; receive your data in a portable format; and withdraw consent where processing is based on consent.

These rights are not absolute. Where we hold data to meet a legal obligation - in particular anti-money-laundering records - we will normally be required to refuse erasure and to continue processing. We will explain our reasoning when we respond, which we aim to do within one month.

If you are not satisfied with our response you may complain to the relevant supervisory authority in your jurisdiction.

Cookies and analytics

This site uses a small number of cookies and similar technologies: those strictly necessary for the site to function, and, where enabled, analytics that help us understand how the site is used. [Confirm which analytics provider is in use and whether a consent banner is required for your visitors - it generally is for visitors in the EU and UK.] You can block or delete cookies in your browser settings, though parts of the site may then not work as intended.

Children

Our services are provided to businesses and their principals. This site is not directed at children and we do not knowingly collect data from them.

Changes and contact

We may update this policy from time to time and will publish the current version here. Contact hello@gethatched.co with any question about it. Last updated August 2026.