Privacy Policy

thecontroller.ai is committed to protecting the privacy of individuals who visit our website at thecontroller.ai and those who engage our professional accounting and financial services. This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and your rights in relation to it.

By using this website or engaging our services, you agree to the collection and use of your information in accordance with this Privacy Policy.
 

Who We Are

thecontroller.ai is a professional outsourced accounting firm operating from Off# 217, Al Nasr Plaza, PO Box 172540, Dubai, United Arab Emirates. We provide accounting, bookkeeping, financial reporting, payroll, AML compliance, due diligence, and related financial services to businesses in the UAE and Saudi Arabia.
 

Information We Collect

We collect personal and business information in the following ways.

Information you provide directly:

• Name, email address, phone number, and company details when you contact us, request a callback, or book a consultation
• Business financial information, documents, and records provided in connection with accounting or compliance service engagements
• Information submitted through our newsletter subscription or contact forms

Information collected automatically:

• Website usage data including pages visited, time spent on the site, and referring URLs
• Device and browser information collected through cookies and similar technologies
• IP address and general location data

Information from third parties:

• Business information from publicly available sources where relevant to a service engagement
• Information provided by authorised representatives of client businesses
   

How We Use Your Information

We use the information we collect for the following purposes:

• To provide and manage the accounting, financial reporting, and compliance services you have engaged us for
• To respond to enquiries, consultation requests, and service-related communications
• To prepare and submit financial reports, tax filings, and regulatory submissions on behalf of clients
• To send service updates, industry information, and newsletters where you have consented to receive these
• To improve the functionality and content of our website based on usage data
• To comply with our own legal and regulatory obligations under UAE law
• To protect the security and integrity of our systems and services

We do not use your personal information for automated decision-making or profiling purposes.
 

Legal Basis for Processing

We process personal information on the following legal grounds:

• Contractual necessity — processing required to deliver the services you have engaged us for
• Legal obligation — processing required to meet our obligations under UAE law and regulatory requirements
• Legitimate interests — processing for improving our services, managing our business operations, and communicating with existing and prospective clients
• Consent — where you have explicitly consented to a specific use of your information, such as newsletter subscription
   

How We Share Your Information

We do not sell or rent personal information to third parties. We share information only in the following circumstances:

• Regulatory submissions — where required to submit VAT returns, Zakat filings, or other regulatory reports to the UAE Federal Tax Authority (FTA), ZATCA in Saudi Arabia, or other relevant regulatory bodies as part of our service delivery
• Technology service providers — cloud accounting platforms and other software tools used to deliver our services, which operate under strict data processing and confidentiality obligations
• Legal requirements — where we are required by law, court order, or regulatory authority to disclose information
• Client consent — where the client has explicitly authorised sharing with a named third party

All third parties with whom we share data are required to handle that information securely and only for the stated purpose.
 

Data Retention

We retain personal and business data for as long as is necessary to provide the agreed services and to meet our legal and regulatory obligations. For client financial records, retention periods are guided by UAE and Saudi Arabian regulatory requirements  typically a minimum of five to ten years depending on the nature of the records and the applicable regulatory framework.
Where data is no longer required for any legitimate purpose, we delete or securely destroy it.
 

Cookies

Our website uses cookies to improve your browsing experience and to collect usage data that helps us understand how visitors interact with the site. Cookies are small text files stored on your device when you visit a website.
We use the following types of cookies:

• Essential cookies — necessary for the website to function correctly
• Analytics cookies — used to collect anonymous data on how visitors use the site, helping us improve its content and functionality
• Preference cookies — used to remember your settings and preferences for future visits

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of this website.
 

Data Security

We take the security of personal and financial data seriously. thecontroller.ai uses encrypted cloud infrastructure, access-controlled systems, and secure data handling practices to protect the information entrusted to us.
While we implement appropriate technical and organisational measures to protect your data, no system is completely immune to security risks. We encourage clients to take steps to protect their own account credentials and access details.
In the event of a data breach that affects personal information, we will notify affected individuals and relevant authorities in accordance with applicable UAE law and our regulatory obligations.
 

Your Rights

Subject to applicable UAE privacy law, you have the following rights in relation to your personal information:

• Access — the right to request a copy of the personal information we hold about you
• Correction — the right to request correction of any inaccurate or incomplete personal information
• Deletion — the right to request deletion of your personal information where it is no longer required for a legitimate purpose
• Withdrawal of consent — where processing is based on your consent, the right to withdraw that consent at any time
• Objection — the right to object to processing based on legitimate interests in certain circumstances

To exercise any of these rights, please contact us using the details provided at the end of this policy. We will respond to all legitimate requests within a reasonable timeframe.
 

Children's Privacy

Our website and services are directed at businesses and business professionals. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to remove it promptly.
 

Links to Third-Party Websites

This website may contain links to third-party websites. This Privacy Policy applies only to thecontroller.ai. We are not responsible for the privacy practices of third-party websites and encourage you to review their privacy policies before providing any personal information.
 

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. Updated versions will be posted on this page with a revised effective date. We encourage you to review this policy periodically to stay informed about how we protect your information.
 

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us: