Privacy Policy

Astorts Group L.L.C-FZ (hereinafter referred to as “the Company,” “We,” “Us,” “Our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you use our website, www.astortsgroup.com (“Our Site”) or interact with us in connection with our accounting, corporate services, and project management services.

This Policy is issued in accordance with the laws of the United Arab Emirates (“UAE”), including but not limited to UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE Data Protection Law”) and the regulations of the Meydan Free Zone.

By using Our Site or providing your information to us, you acknowledge that you have read and understood the practices described in this Policy.

1. Definitions and Interpretation

In this Policy the following terms shall have the following meanings: 

2. Information About Us

Our Site is owned and operated by Astorts Group L.L.C-FZ, a company registered in the Meydan Free Zone, United Arab Emirates, under No. 2309536.01, with a registered office located at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.

For the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable data protection laws, the Data Controller responsible for your personal data is Astorts Group L.L.C-FZ. 

3. What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

4. What Is Personal Data?

Personal Data is defined by the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data as any data relating to an identified natural person, or a natural person who can be identified directly or indirectly by linking the data.

Personal Data is, in simpler terms, any information about you that enables you to be identified. It covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

5. What Are My Rights?

Under the Data Protection Legislation, you have the following rights, which we will always work to uphold:

• The right to be informed about our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Part 15.
  • The right to access the personal data we hold about you. Part 13 will tell you how to do this.
  • The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete. Please contact us using the details in Part 15 to find out more.
  • The right to erasure (“the right to be forgotten”), i.e., the right to ask us to delete or dispose of your Personal Data, subject to our legal obligations.
  • The right to restrict (i.e. prevent) the processing of your personal data.
  • The right to object to us using your personal data for a particular purpose or purposes.
  • The right to withdraw consent. This means that, if we are relying on your consent as the legal basis for using your personal data, you are free to withdraw that consent at any time.
  • The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to re-use with another service or business in many cases.
  • Rights relating to automated decision-making and profiling.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in Part 15.

It is important that your personal data is kept accurate and up-to-date. If any of the personal data we hold about you changes, please keep us informed as long as we have that data.

If you have any cause for complaint about our use of your Personal Data, you have the right to lodge a complaint with the UAE Data Office. We would welcome the opportunity to resolve your concerns ourselves first, so please contact us using the details in Part 15.

6. What Data Do You Collect and How?

We may collect, record and use your personal data in physical and electronic form, and will hold, use and otherwise process that data in line with the Data Protection Legislation and as set out in this statement.

When we provide services to you or our clients and perform due diligence checks in connection with our services (or discuss possible services we might provide), we will process Personal data about you. We may also collect personal data from you when you use Our Site.

We may process your data because:

• you give it to us (for example, in a form on Our Site);
• other people give it to us (for example, your employer or adviser, a tax authority and/or other relevant authority/administrative bodies; or third- party service providers that we use to help operate our business); or
• it is publicly available.

We may process personal data from you because we observe or infer that data about you from the way you interact with us or others. For example, to improve your experience of Our Site and to make sure that it is working effectively. For example, we (or our service providers) may use Cookies or Web beacons to collect personal data. More information on how we use these and other tracking technologies – and how you can control them – can be found in Part 14.

The personal data we process may include your:

• name, gender, age and date of birth;
• contact information, such as address, email, and mobile phone number;
• country of residence;
• employment and education details (for example, the organisation you work for, your job title and your education details, employment records);
• financial and tax-related information (for example your income, investments and tax residency);
• Government identifiers (such as Emirates ID);
• postings or messages on Our Site;
• IP address, browser type and language, your access times;
• information in any complaints you make;
• details of how you use our products and services;
• details of how you like to interact with us, and other similar information relevant to our relationship.

We may also need to process Sensitive Personal Data (for example about your health or ethnic origin) that we require to be able to provide the services or that may become apparent to us based on the personal information that we receive.

If you choose not to provide, or object to us processing, the information we collect, we may not be able to process your instructions or continue to provide some or all of our services to you or our client.

Personal data provided by or about third parties

When our client or another third party gives us personal data about you, we require them to confirm that they have complied with the UAE Data Protection Law, including that you have been informed of the processing and have provided any necessary consent.

If any personal information which you provide to us relates to any third party, then by providing us with their personal information you confirm that you have obtained any necessary permissions from those persons to the reasonable use of their personal information in the way set out in this Privacy Policy, or you are otherwise permitted to give us this personal information. You should share a copy of this Privacy Policy with those other individuals when disclosing any personal information about them to us.

7. How Do You Use My Personal Data?

We process information about you to enable us to provide our Services and to meet our legal or regulatory obligations in the UAE.

Use of Personal Data to Provide Services:
We will use your Personal Data to provide Services to you or our clients, including correspondence with you, related third parties, service providers, or Competent Authorities. This includes conducting due diligence (KYC/AML) checks as required by UAE law.

Use of Personal Data for Business Operations:
We may also use your Personal Data for:

• Compliance with UAE legal/regulatory requirements.
• Client onboarding and administration.
• Financial accounting, invoicing, and risk analysis.
• Business development (with explicit permission for testimonials).
• Engaging our professional advisors.
• Investigating security incidents and protecting rights.

Use of Personal Data Collected via Our Site:

• To manage, improve, and personalize your experience on Our Site.
• To draw your attention to information about our Services.
• To manage and respond to your requests.

With your permission and where permitted by UAE law, we may use your Personal Data for marketing purposes. You can opt-out at any time.

Legal Grounds for Processing under UAE Law:
We process your Personal Data based on the following legal grounds:
(a) To perform a contract.
(b) To comply with a legal obligation (e.g., UAE AML regulations, tax laws).
(c) For our legitimate interests (e.g., providing Services, business improvement, security).
(d) With your explicit consent.

For Sensitive Personal Data, we rely on your explicit consent, legal obligations, or other specific grounds permitted under UAE law.

We will only use your Personal Data for the purposes for which it was collected, unless we reasonably determine a new purpose is compatible. For an incompatible purpose, we will notify you and explain the legal basis.

8. How Long Will You Keep My Personal Data?

We will retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of providing our Services and satisfying any legal, regulatory, accounting, or reporting requirements mandated by the laws of the United Arab Emirates.

Specifically, our retention periods are determined based on the following criteria:

• The duration of our business relationship and the provision of Services to you.
• Legal obligations imposed by UAE law, which may require us to retain records for prescribed periods (for example, commercial and financial records as per UAE commercial laws, and client identification records as required by UAE Anti-Money Laundering regulations).
• The necessity to retain data for the establishment, exercise, or defence of legal claims in the UAE.
• Any specific retention periods agreed upon in our contract with you.

Once the purpose for processing your Personal Data has expired and we are no longer legally required to retain it, we will securely delete or anonymise your information.

9. How and Where Do You Store or Transfer My Personal Data?

We primarily store and process your Personal Data within the United Arab Emirates. However, in the course of providing our Services, your information may be transferred to, stored in, or accessed from countries outside the UAE.

We will only transfer your Personal Data outside the UAE when we have ensured that an adequate level of protection is provided or appropriate safeguards are in place, as required by the UAE Data Protection Law. Such safeguards may include:

• Transferring data to a country that has been deemed by the UAE Data Office to have an adequate level of data protection.
• Implementing standard contractual clauses approved by the UAE Data Office that are designed to protect your data.
• Relying on other legal mechanisms or binding corporate rules that are recognized under UAE law.

Transfers may also occur when:

• The transfer is necessary for the performance of a contract with you or for the implementation of pre-contractual measures taken at your request.
• The transfer is necessary for the establishment, exercise, or defence of legal claims in the UAE.
• You have provided your explicit consent to the proposed transfer.
• The transfer is necessary to protect your vital interests or the public interest.

We ensure that any third party service providers or group entities that process your data outside the UAE are contractually bound to provide security and confidentiality standards consistent with this Policy and UAE law.

10. Do You Share My Personal Data?

In connection with the purposes outlined in this Policy, we may disclose your Personal Data to the following categories of recipients, always ensuring such sharing complies with the provisions of the UAE Data Protection Law:

• Competent Authorities. Regulatory bodies, law enforcement agencies, courts, and other governmental authorities in the UAE, as required by law.
• Service Providers.  Carefully selected third parties who provide services to us, such as IT and system administration, cloud storage, payment processing, and professional advisory services. These parties act as our Processorsand are bound by strict contractual obligations to process your data only on our instructions, in a confidential and secure manner.
• Group Entities / Business Partners. Affiliated companies or trusted partners, but only where necessary for the provision of our Services to you, and subject to appropriate safeguards.
• Successors in Business. In the event of a merger, acquisition, sale of company assets, or transition of service to another provider, your Personal Data may be transferred as part of that business transaction. We will ensure the recipient entity is bound to protect your data in accordance with this Policy and UAE law.

Our Site hosts social media applications or services that allow you to share content with other users (collectively “Social Media Applications”). Any personal data that you contribute to these Social Media Applications can be read, collected and used by other users of the application. We have little or no control over these other users, so any information you contribute to these Social Media Applications might not be handled in line with this privacy statement.

If any of your personal data is shared with a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law

If any personal data is transferred outside of the UAE, we will take suitable steps in order to ensure that your personal data is treated just as safely and securely as it would be within the UAE and under the Data Protection Legislation.

If we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner of our business may continue to use your personal data in the same way(s) that we have used it, as specified in this Privacy Policy.

11. How Can I Control My Personal Data?

In addition to your rights under the Data Protection Legislation, set out in Part 5, when you submit personal data via Our Site, you may be given options to restrict our use of your personal data. In particular, we aim to give you strong controls on our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from us which you may do by unsubscribing using the links provided in our emails).

12. Can I Withhold Information?

You may access and browse the public areas of Our Site without providing any Personal Data. However, to use specific features, such as submitting an inquiry via our contact form, registering for an event, or requesting our Services, you will be required to submit certain Personal Data.

You may also restrict our use of non-essential Cookies through your browser settings or our cookie consent tool. Please note that restricting certain data, including essential Cookies or the Personal Data necessary to perform a requested service, may prevent you from accessing the full functionality of Our Site or from using our Services.

For more information on controlling Cookies, please see Part 14. Our requirements for Personal Data are always based on providing our Services effectively and in accordance with UAE laws.

13. How Can I Access My Personal Data?

If you want to know what personal data we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “request to access”.

All subject access requests should be made in writing and sent to the email or postal addresses shown in Part 15.

There is not normally any charge for a subject access request. If your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.

We will respond to your subject access request within twenty days and, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.

14. How Do You Use Cookies?

Our website uses cookies, pixel tags, web beacons, and other web technologies such as CAPTCHA’s to improve the website’s performance, to enhance your browsing experience and to protect the website against spam robots. Certain areas of the website also use cookies to understand more about you, so we can offer you more personalized browsing experience. 

You can find out more about cookies and how to manage them in the information below. You can change your cookie settings and disable some or all cookies for the website at any time by clicking on the ‘Customize cookies’ button below. You can also change your browser settings so that cookies cannot be placed on your device.

If you have any questions in relation to the cookies we use please contact us. 

What is a cookie?

A “cookie” is a technology that allows the website to store tokens of information (an “identifier”) in your browser used by the website while you are on the website. Cookies are then sent back to the website on each subsequent visit, or to another webpage that recognizes that cookie. Cookies are used in order to make the website work, or to work more efficiently, as well as to provide information to the owners of the website.

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies may tell us, for example, whether you have visited the website before or whether you are a new visitor. They can also help to ensure that adverts you see online are more relevant to you and your interests.

When landing on the website, you have been given the opportunity to accept cookies used on the website, to accept certain categories of cookies and decline others, or to decline all cookies. If you have accepted our use of some or all cookies, the following information relates to cookies used on the website only. Please note that any consent to accept or to decline cookies is limited to the Our Site only and not to other sites or any other pages, which may be hyperlinked to our website or portal. For more information on cookies used by those websites, please refer to the specific privacy notice or cookie policy on those websites.

There are two broad categories of cookies:

• First party cookies, served directly by us to your device.
• Third-party cookies, which are served by a third party on our behalf.

Cookies can remain on your computer or mobile device for different periods of time. Some cookies are “session cookies”, meaning that they exist only while your browser is open. These are deleted automatically once you close your browser. Other cookies are “permanent cookies”, meaning that they survive after your browser is closed. They can be used by the website to recognize your computer when you open your browser and browse the Internet again.

What types of cookies do we use?

Functionality Cookies

Functionality Cookies enable Us to provide additional functions to you on Our Site such as personalisation and remembering your saved preferences. Some functionality Cookies may also be strictly necessary Cookies, but not all necessarily fall into that category.

Targeting Cookies

It is important for Us to know when and how often you visit Our Site, and which parts of it you have used (including which pages you have visited and which links you have visited). As with analytics Cookies, this information helps us to better understand you and, in turn, to make Our Site and advertising more relevant to your interests.

Third Party Cookies

Third party Cookies are not placed by Us; instead, they are placed by third parties that provide services to Us and/or to you. Third party Cookies may be used by advertising services to serve up tailored advertising to you on Our Site, or by third parties providing analytics services to Us (these Cookies will work in the same way as analytics Cookies described above).

Persistent Cookies

Any of the above types of Cookie may be a persistent Cookie. Persistent Cookies are those which remain on your computer or device for a predetermined period and are activated each time you visit Our Site.

Session Cookies

Any of the above types of Cookie may be a session Cookie. Session Cookies are temporary and only remain on your computer or device from the point at which you visit Our Site until you close your browser. Session Cookies are deleted when you close your browser.

Analytics Cookies

It is important for Us to understand how you use Our Site, for example, how efficiently you are able to navigate around it, and what features you use. Analytics Cookies enable us to gather this information, helping Us to improve Our Site and your experience of it.

Our Site uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). This service uses Cookies to gather the required information. You do not have to allow us to use these Cookies, however whilst our use of them does not pose any risk to your privacy or your safe use of Our Site, it does enable us to continually improve Our Site, making it a better and more useful experience for you.

The information about your use of  Our Site (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of Our Site, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of Our Site. By using Our Site, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Our Site initializes Google Analytics with the setting “anonymize”. This guarantees anonymized data collection by masking the last part of your IP address. Further information concerning the terms and conditions of use and data privacy can be found at https://www.google.com/analytics/terms/default.html

Social buttons

We use ‘social buttons’ to enable our users to share or bookmark web pages. These are buttons for third party social media sites and these sites may log information about your activities on the Internet including on Our Site. Please review the respective terms of use and privacy policies of these sites to understand exactly how they use your information and to find out how to opt-out, or delete, such information.

External web services

We sometimes use external web services on Our Site to display content within the web pages of Our Site, for example to display images, show videos or run polls. As with the social buttons, we cannot prevent these sites, or external domains, from collecting information on your use of this embedded content.

Email Communications

We may also use tracking technologies to determine whether you have read, clicked on, or forwarded certain email communications we send to you so that we can make our communications more helpful and interesting. If you do not wish us to confirm whether you have opened, clicked on or forwarded our communications, you will need to unsubscribe, as it is not possible for us to send these emails without tracking enabled. Registered subscribers can update their communication preferences at any time by contacting us, or you can unsubscribe following the instructions in the individual email communications you receive from us.

Please contact us if you would like more detailed information on the cookies we use.

Before Cookies are placed on your computer or device, you will be shown a pop-up requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies (unless those Cookies are strictly necessary); however, certain features of Our Site may not function fully or as intended.

In addition to the controls that we provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all Cookies or only third-party Cookies. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.

You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.

It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.

15. How Do I Contact You?

To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details:

Email address: info@astortsgroup.com

Postal Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.

16. Changes to this Privacy Policy

We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.

Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up-to-date. This Privacy Policy was last updated on February 12, 2026.