1. Who we are

Formenzo is a product operated by YABS Public Relations Management LLC (UAE Trade License No. 788672), registered in Dubai, United Arab Emirates (“Formenzo”, “we”, “us”).

For privacy-related queries, contact us at privacy@formenzo.com or via WhatsApp at +971 50 000 0000.

2. What data we collect

Identity data: full name, passport copy, nationality, date of birth, photograph.
Contact data: email, WhatsApp number, phone number, address.
Company data: business name, activity, shareholders, ownership %, address of operation.
Financial data: source of funds declarations, bank statements (when required for KYC).
Usage data: IP address, browser type, pages visited, assessment answers.

3. Why we collect it

To form your UAE company (contractual necessity).
To apply for residence visas and Emirates ID on your behalf.
To open corporate bank accounts with our partner banks.
To comply with UAE Anti-Money Laundering (AML), UBO, and ESR regulations.
To communicate case status via email, WhatsApp, and SMS.
To improve our service through anonymized usage analytics.

4. Legal basis (UAE PDPL)

Consent: For marketing communications and optional analytics.
Contract performance: To deliver the company formation service.
Legal obligation: AML/KYC compliance, tax authority filings.
Legitimate interest: Fraud prevention, service improvement.

5. Data residency & storage

Personal data is stored on encrypted servers in the Middle East region (AWS me-south-1, Bahrain) to ensure UAE data sovereignty. Database records are encrypted at rest (AES-256) and in transit (TLS 1.3).

Sensitive documents (passports, Emirates IDs) are stored in AWS S3 with signed URLs expiring in 5 minutes. Document access is logged and audited.

6. Who we share data with

We share data only with trusted processors necessary to deliver our services:

Free Zone authorities (IFZA, Meydan, DMCC, RAKEZ, SHAMS, DAFZA, ADGM) — for license filings.
UAE government portals (Tasheel, Amer, GDRFA, ICA, DHA) — for visa/EID processing.
Banking partners (WIO, Mashreq, Emirates NBD, RAKBANK, ADCB) — for account opening.
Federal Tax Authority (FTA) — for VAT and Corporate Tax registration.
Payment processors (Stripe, Telr) — for transactions only.
Infrastructure providers (AWS, Vercel, Neon) — encrypted hosting.

We never sell your data. We never share with third-party advertisers.

7. Your rights under UAE PDPL

You have the right to:

Access your personal data (free of charge, within 30 days).
Correct inaccurate data.
Delete your data (right to be forgotten), subject to legal retention requirements.
Object to processing for marketing purposes.
Data portability (export in machine-readable format).
Withdraw consent at any time.
Lodge a complaint with the UAE Data Office.

To exercise any right, email privacy@formenzo.com.

8. Retention period

We retain your data for the duration of our service relationship plus 7 years after (to comply with UAE Commercial Companies Law record retention). KYC records may be retained for 10 years under AML law.

9. Cookies & analytics

We use essential cookies (session, CSRF protection) and privacy-respecting analytics (PostHog, EU-hosted) to understand site usage. No third-party advertising pixels (no Facebook, Google Ads, TikTok pixels). See our Cookie Policy.

10. Changes to this policy

We'll notify you of material changes via email. The current version is always posted at formenzo.com/privacy with a last-updated date.

Contact

Data Protection Contact
YABS Public Relations Management LLC
Trade License: 788672
Dubai, United Arab Emirates
Email: privacy@formenzo.com

Legal - Privacy Policy