Privacy Policy

1. Who We Are

The data controller responsible for the processing of your personal information is:

2. Information We Collect

When you submit an enquiry through our website or contact us directly, we may collect:

• your name;
• your telephone number;
• your email address;
• the contents of your enquiry or message;
• your preferred method of communication;
• information contained in subsequent communications with us.

We do not intentionally request sensitive personal information through the general website contact form.

When you access the website, limited technical information may also be processed for website operation, security and error prevention. This may include your IP address, browser type, device information, access time and pages visited.

3. How We Collect Information

We may collect personal information when you:

• complete and submit a website form;
• contact us by telephone, email, WhatsApp, Telegram or another communication channel;
• request information about our services;
• request a consultation;
• enter into discussions concerning the provision of services;
• otherwise voluntarily provide information to us.

4. How We Use Your Information

We may use your personal information to:

• receive and respond to your enquiry;
• contact you regarding the services you requested;
• arrange a consultation;
• provide information about our services;
• prepare for or perform services requested by you;
• maintain records of enquiries and communications;
• protect the security of our website and systems;
• prevent fraud and misuse;
• comply with legal and regulatory requirements;
• establish, exercise or defend legal claims.

We will not use your contact details for unrelated marketing communications unless you have separately agreed to receive such communications.

5. Legal Basis for Processing

Depending on the circumstances, we may process your information based on:

• your consent;
• taking steps at your request before entering into a service arrangement;
• performance of an agreement with you;
• compliance with a legal or regulatory obligation;
• our legitimate interests in responding to enquiries, operating our business, protecting our systems and improving our services, provided that those interests do not override your rights.

Where processing is based on consent, you may withdraw your consent at any time.

6. Email, Telephone and WhatsApp Communications

Where you have contacted us, requested a response or provided the relevant consent, we may communicate with you by telephone, email or WhatsApp regarding your enquiry.

We will only initiate WhatsApp communications where:

• you requested communication through WhatsApp;
• you provided appropriate consent; or
• another lawful basis permits the communication.

You may ask us to stop contacting you through a particular channel at any time by replying “STOP”, informing our representative or contacting us at contact@mfcuae.com.

Withdrawal of consent will not affect processing carried out before the withdrawal.

7. Sharing of Personal Information

We do not sell or rent personal information.

We may disclose limited personal information where reasonably necessary to:

• website hosting, email, communications, IT, CRM or technical service providers;
• professional advisers, consultants or authorised representatives;
• WhatsApp, Meta or another communication platform where you choose or consent to communicate through that platform;
• government authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law;
• protect our legal rights, security, personnel, clients or systems.

Service providers may process information only for authorised purposes and subject to appropriate confidentiality and security requirements.

8. International Data Transfers

Some service providers or communication platforms may process information outside the United Arab Emirates.

Where personal information is transferred internationally, we take reasonable steps to ensure that the transfer is conducted in accordance with applicable data-protection requirements.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

General enquiries will normally be retained for no longer than 24 months following the last substantive communication, unless:

• the person becomes a client;
• the information relates to an ongoing matter;
• a longer period is required by law or regulation;
• retention is necessary for compliance, accounting or legal-claim purposes.

When information is no longer required, we will delete, anonymise or securely archive it, as appropriate.

10. Data Security

We use reasonable administrative, organisational and technical measures designed to protect personal information against:

• unauthorised access;
• unlawful disclosure;
• accidental loss;
• alteration;
• misuse;
• destruction.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Cookies and Technical Tools

The website uses cookies or similar technical tools necessary for basic website functionality, security, remembering technical settings, and preventing abuse and errors.

In addition, the website may integrate third-party analytics and measurement technologies, specifically:

• Meta / Facebook Pixel & Conversion API: Used to measure advertising effectiveness and convert lead signals in accordance with Meta compliance rules.
• Yandex Metrika: Used for website traffic analysis and user experience measurement.

Non-essential tracking scripts are loaded only subject to user consent options provided on the website. Users may control cookies through their browser settings or consent options. Disabling certain cookies may affect website functionality.

12. Your Rights

Subject to applicable law, you may have the right to:

• request information about the personal data we process;
• obtain access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• request restriction of processing;
• object to certain processing;
• withdraw consent;
• request transfer of your information where applicable;
• submit a complaint to the competent data-protection authority.

We may request reasonable information to confirm your identity before responding to a request.

To exercise your rights, contact: contact@mfcuae.com

13. Third-Party Websites and Platforms

The website may contain links to third-party websites, social networks or communication platforms, including WhatsApp, Telegram and Instagram.

Those services operate under their own terms and privacy policies. We are not responsible for the privacy practices or content of independent third-party services.

14. Children’s Privacy

The website and services are not directed to children under the age of 18.

We do not knowingly collect personal information directly from children through the website without appropriate authorisation from a parent or legal guardian.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, technologies or legal obligations.

The updated version will be published on this page with a revised “Last updated” date.

16. Contact Us

Questions, requests or concerns relating to this Privacy Policy may be sent to: