PRIVACY NOTICE

Altus Compliance is committed to protecting the privacy and security of your personal data. This notice explains the type of personal data that we process by accessing our website or by enquiring and how we use that information.

Our role

We are a data controller, meaning we are responsible for determining how we hold and use personal information about you. If we are processing your personal information on the instructions of one of our customers (such as in our capacity as an outsourced provider), we are likely working with it as a data processor in line with a written contract. In this case, the data controller will be our customer and your personal data will be processed as set out in their Privacy Notice.

Personal data we collect if you contact us

If you contact us by phone or using our website, email, or social media, we collect the personal information you provide to us. This typically includes the following personal data about you:

• Name
• Email
• Phone number or your preferred contact method
• Job title
• Represented company
• Service details

We use the personal information you provide to us to respond to your inquiry. It is in our legitimate interests to communicate with you in response to your message.

If we provide services to you

If we provide services to you, you will be provided with a detailed privacy notice dependent on our engagement. However, this typically includes the following personal data about you:

• Name
• Email
• Marital title
• Phone number or your preferred contact method
• Job title
• Represented company
• Service details
• Time-zones
• Office locations
• Photograph
• ID documentation

In addition, for legal and compliance services we may also collect:

• Financial documentation such as bank statements
• Beneficial owner’s details such as registry records
• Shareholder’s details such as share interest
• Director’s details such as background details

Why do we collect this personal data?

We process your personal data to meet our legitimate interests, or to meet our legal, statutory, and contractual obligations. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice. Where you do not wish to provide us with the information we have requested, we will advise you of the repercussions of such omission including any legal effect.

How we collect your data

We collect data when you:

• Enter details online
• Through our communications throughout our relationships
• For limited-service offerings, we may also collect data provided publicly on your LinkedIn profile or other social media

We may also receive your data indirectly from the following sources:

• Through conversations with your colleagues
• Through conversations with referees where you have provided their contact
• Where you do not wish to provide us with the information we have requested, we will advise you of the repercussions of such omission including any legal effect.

Sharing your data

We share your data with:

• Our cloud service provider. We use Zoho Corporation for email hosting. Our Email servers are located in the US. We also use Microsoft OneDrive for storing documents. Our OneDrive server is located primarily in the US.
• Our auditors. We use local auditors based in the UAE.
• Regulators or other authorities including government entities. We will only share where the requirement is absolutely necessary in line with a legal requirement or a valid government request in line with the relevant data-sharing legislation. Where possible data will be anonymized or pseudonymized

How long we keep your data?

We retain your personal information for as long as it is reasonably necessary for the purpose of our relationship, for as long as we are legally obliged, or until you object to us processing your data or withdraw your consent to us doing so.

Automated Decision Making: we do not use personal data for automated decision-making.

Marketing: we will not use your information for marketing purposes.

Your Rights: you have the right to request access to any personal information that the we process about you and to request information about: 

• What personal data we hold about you and a copy of the same where technically possible
• The purposes of the processing 
• The categories of personal data concerned
• The recipients to whom the personal data has/will be disclosed
• How long we intend to store your personal data for
• If we did not collect the data directly from you, information about the source

You also have the right to request erasure of your personal data, or to restrict or object to the processing of your data in accordance with the data protection laws. Where applicable, you have the right to data portability of your information. Where we rely on consent to process your personal data, you may withdraw your consent at any time to prevent further processing. 

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

Contact us for more: if you have any outstanding queries we would be happy to help. You can contact us via our enquiry form or reach out to us using our email dataprotection@altus-compliance.com.

If you are not satisfied with the outcome of your request, you have the right to escalate your request to the UAE Data Office. If you wish to exercise your rights, please contact us at dataprotection@altus-compliance.com.