Privacy Policy
Last updated: 1 January 2026
Arab First Business Setup Services LLC ("Arab First", "we", "us", or "our") is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and applicable international standards.
Table of Contents
Information We Collect
Information you provide directly
When you use our services, request a consultation, or contact us, we may collect: your full name, email address, phone number, nationality, passport details (where required for visa or licensing services), company name and registration details, and any other information you choose to share with us.
Information collected automatically
When you visit our website, we automatically collect certain technical data including your IP address, browser type and version, operating system, referring URLs, pages visited, and the date and time of your visit. This data is collected through cookies and similar tracking technologies.
Information from third parties
We may receive information about you from third parties such as business partners, government authorities (in connection with licensing or visa processing), or public databases, where permitted by applicable law.
How We Use Your Information
Service delivery
We use your personal data primarily to provide the services you have requested, including business setup, licensing, visa processing, accounting, and workspace services. This includes submitting applications to UAE government authorities on your behalf.
Communication
We use your contact details to respond to your enquiries, send service updates, provide reminders about renewal deadlines (license, visa), and share relevant information about our services. You may opt out of marketing communications at any time.
Legal and compliance
We process certain data to comply with our legal obligations under UAE law, including anti-money laundering (AML) requirements, Know Your Customer (KYC) procedures, and reporting obligations to regulatory authorities.
Service improvement
We analyse usage patterns on our website and service interactions to improve our offerings, website functionality, and customer experience. This analysis is conducted on aggregated or anonymised data where possible.
Legal Basis for Processing
Contractual necessity
Most of our data processing is necessary to perform the services you have contracted with us. Without this data, we cannot deliver business setup, visa, licensing, or other professional services.
Legal obligation
Certain processing is required by UAE federal law, including the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), AML regulations, and requirements from authorities such as DED, GDRFA, and relevant free zone authorities.
Legitimate interests
We may process your data for our legitimate business interests, such as improving our services, preventing fraud, and maintaining the security of our systems, provided these interests are not overridden by your rights and freedoms.
Consent
Where we rely on your consent — for example, for marketing emails or non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Data Sharing and Disclosure
UAE government authorities
In the course of processing your business setup, visa, or licensing applications, we share required data with relevant UAE authorities including the Department of Economic Development (DED), General Directorate of Residency and Foreigners Affairs (GDRFA), free zone authorities, Ministry of Human Resources, and other regulatory bodies.
Service partners
We work with trusted third-party service providers (such as medical fitness centres, typing centres, and document attestation services) who may process your data on our behalf. All such partners are bound by confidentiality agreements.
No sale of data
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes under any circumstances.
Data Retention
Retention periods
We retain your personal data for as long as necessary to provide our services and comply with our legal obligations. Client records are typically retained for a minimum of 5 years following the end of our engagement, in accordance with UAE commercial law requirements. Transaction records may be kept for up to 7 years for tax and audit purposes.
Deletion
Upon the expiry of the applicable retention period, or upon a valid deletion request, we will securely delete or anonymise your personal data. Please note that we may be unable to delete data that we are legally required to retain.
Your Rights
Access and portability
You have the right to request a copy of the personal data we hold about you, and in certain circumstances to receive it in a structured, machine-readable format.
Correction
If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Restriction and objection
In certain circumstances you have the right to restrict our processing of your data, or to object to processing where we rely on legitimate interests as the legal basis.
Deletion
You may request erasure of your personal data where there is no compelling reason for us to continue processing it, subject to our legal retention obligations.
Exercising your rights
To exercise any of these rights, please contact our Data Protection Officer at privacy@arabfirst.ae. We will respond to all verified requests within 30 days.
Data Security
Technical and organisational measures
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL), access controls, secure document handling procedures, and regular security reviews.
Breach notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by applicable law.
Contact Us
Data Protection Officer
For any privacy-related queries, requests, or complaints, please contact: Data Protection Officer, Arab First Business Setup Services, Dubai, United Arab Emirates. Email: privacy@arabfirst.ae | Phone: +971 4 XXX XXXX
Complaints
If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office (the supervisory authority for data protection in the UAE) at uaedataoffice.gov.ae.
Questions about this policy?
Contact Our Privacy Team