Privacy Policy
Meydan Company Setup is a service run by DSK (a registration agent) for setting up companies in the Meydan free zone (UAE) and handling the visa and compliance steps that follow. This page explains which personal data we collect through this app, why, who we share it with, and how long we keep it.
Draft — pending legal review
This text was drafted by the engineering team from the app's actual data-handling logic and the product spec. Before it can be relied on as a legal document, it must be reviewed and approved by DSK's legal counsel. Wording may change before approval.
1. What data we collect
- Contact data — email, phone, interface language, sign-in history (passwordless, one-time-code login).
- Identity data — full name in Latin script, date and place of birth, citizenships, passport details (country, number, issue and expiry dates), UAE residence status, marital status, education.
- Financial data — source of wealth and source of funds, share capital amount, invoice and payment records, a 6-month bank statement (if requested).
- Business data — company name and activity, shareholder ownership structure.
- Sensitive data — a visa applicant's religion; collected only with a separate explicit consent, and only because UAE immigration forms require it.
- Documents — passport scans, Emirates ID, photos, bank statements, signed incorporation documents and licences; kept in private storage, accessible only via a short-lived signed link.
- Technical data — IP address, user agent, session/CSRF token, an audit trail of who changed the application and when.
2. Why we process it
- Company registration with Meydan FZ — preparing and filing documents, liaising with the free zone.
- Identity verification and compliance (KYC/AML) — including sanctions, PEP and adverse-media screening before registration.
- Visa processing — resident visas for shareholders and employees through UAE immigration procedures.
- Invoicing and payment — bank transfer (SWIFT) with manual reconciliation of the incoming payment.
- Communication — email and push notifications, and for selected events WhatsApp/Telegram, about your application status.
- Meeting DSK's and Meydan FZ's legal obligations, including responding to regulator requests.
3. Who we share it with
We do not sell personal data and do not share it for third-party marketing. Data is shared only where the service genuinely requires it:
- Meydan FZ — the free-zone registration authority, the ultimate recipient of the registration document package.
- UAE immigration authorities — when processing shareholder and employee visas.
- The national KYC platform — if that verification channel is enabled (not in use at the time of publishing).
- DSK staff — managers and compliance specialists, with role-based access (for example, bank statements and screening results are visible only to the compliance role).
- Infrastructure providers — hosting and backups in the UAE region, acting strictly as our technical processors.
4. Where and how long we keep it
Infrastructure and backups are located in the UAE region, and data is encrypted at rest and in transit. Documents are never kept in a public folder — only in private storage, released through a one-time signed link valid for 5 minutes; every view and download is logged in the audit trail.
We keep an application's file for at least 5 years after the relationship with the client ends — this is a regulatory requirement. During that period we cannot delete data on request, even if you withdraw consent or close your application — see the honest caveat about this in "Your rights" below.
5. Your rights
- Request a copy of the data we hold about you.
- Ask us to correct inaccurate data.
- Object to processing that isn't directly needed to provide the service (for example, marketing messages).
- Withdraw your consent to processing — new processing stops after withdrawal, but this does not override the mandatory retention period for data already collected (see section 4).
- Lodge a complaint with the competent UAE personal data protection authority.
6. Security
We use protections proportionate to the sensitivity of the data: encryption at rest and in transit, private file storage instead of public links, role-based access to sensitive sections (bank statements and screening results are visible only to compliance), and an immutable (append-only) audit log of every action taken on an application and its documents.
7. Contact us
For questions about how we process personal data, write to [privacy@dsk.ae — contact to be confirmed with DSK] or use the "Talk to a manager" form in the app.
8. Changes to this document
We may update this document as the service evolves. The version of the text you agreed to is recorded together with the consent date. We will announce material changes separately.