1. Scope & Privacy Commitment

Chartered Growth Consultants – FZCO(“CGC”, “we”, “us”, or “our”) is committed to upholding the highest standards of confidentiality, transparency, and data integrity. As a corporate advisory, tax consultancy, and company formation firm registered in the United Arab Emirates, we handle sensitive legal, financial, and personal information for domestic and multinational enterprises, institutional investors, and individual founders.

This Privacy Policy describes our practices regarding the collection, storage, utilization, disclosure, and safeguarding of personal data obtained via our website (charteredgrowth.ae), advisory consultations, engagement letters, and regulatory submissions.

2. Data Controller Information

The legally responsible Data Controller for personal and commercial data collected under this policy is:

3. Categories of Information We Collect

Depending on whether you visit our digital portals, inquire regarding corporate setup, or retain us for ongoing statutory compliance, we collect:

4. Legal Bases for Processing (UAE PDPL Article 4)

We process your data strictly under recognized legal bases defined in Article 4 of the UAE Personal Data Protection Law:

• Contractual Performance: Processing necessary to fulfill our Letters of Engagement, execute company incorporation, file VAT/Corporate Tax returns, and provide accounting advisory.
• Statutory & Legal Mandates: Compliance with UAE Federal Tax Authority rules, UAE Anti-Money Laundering (AML/CFT) laws, Economic Substance Regulations (ESR), and Free Zone authority requirements.
• Legitimate Corporate Interests: Protecting our infrastructure, preventing fraudulent submissions, and enhancing our advisory service delivery without overriding fundamental personal rights.
• Explicit Consent: Where you voluntarily opt-in to receive technical briefings, UAE tax legislative updates, or newsletter insights.

5. How We Use & Process Your Data

Your data is exclusively processed to deliver regulated advisory services:

6. Disclosures & Third-Party Sharing

We do not sell, rent, trade, or commercialize client information. Data is shared exclusively with authorized parties strictly as required for service execution:

• UAE Government & Regulatory Authorities: The UAE Federal Tax Authority (FTA), Ministry of Economy, Dubai Department of Economy and Tourism (DET), General Directorate of Residency and Foreigners Affairs (GDRFA), and respective Free Zone Registries (IFZA, DSOA, DMCC, DIFC, ADGM).
• Licensed Banking Partners: UAE Central Bank-regulated commercial banks solely for corporate account facilitation with your prior written approval.
• Enterprise Cloud Infrastructure: SOC-2 and ISO-27001 certified cloud hosting providers operating with military-grade 256-bit encryption.

7. International & Cross-Border Transfers

Where cross-border data transfer is necessary (for instance, when dealing with parent multinational entities, foreign tax authorities under OECD Common Reporting Standard [CRS], or international bank mandates), we ensure adequate safeguards are implemented in compliance with Articles 22 and 23 of the UAE PDPL, including Standard Contractual Clauses (SCCs) and binding corporate rules.

8. Data Retention & Mandatory Storage Periods

We retain client records strictly in accordance with statutory retention mandates imposed by UAE legislation:

Upon expiry of statutory retention limits, records are irreversibly deleted using DoD 5220.22-M compliant cryptographic sanitization protocols.

9. Technical & Operational Security Safeguards

CGC implements multi-layered security controls to protect client records against unauthorized disclosure, interception, or destruction:

10. Your Rights as a Data Subject

Under the UAE Personal Data Protection Law (PDPL), you hold specific enforceable rights concerning your personal records:

To exercise any of these rights, submit a written request to compliance@charteredgrowth.ae. Verification of identity will be required prior to releasing records.

11. Cookies & Tracking Technologies

Our digital platform uses essential cookies necessary for navigation, session security, and responsiveness. We do not employ intrusive behavioral tracking or third-party ad retargeting cookies. You may disable cookies through your browser preferences, though certain site features may have reduced functionality.