Privacy Policy

1Introduction

Fairway Business Setup ("Fairway", "we", "us", or "our") is a business consultancy headquartered at 29th Floor, Al Saqr Business Tower, Sheikh Zayed Road, Dubai, United Arab Emirates, with a representative office in Mumbai, India. We provide UAE company formation, visa, PRO, banking, accounting, and tax compliance services to founders, SMEs, and enterprises.

This Privacy Policy describes the personal information we collect about you when you visit our website (fairway.ae), engage our services, or otherwise interact with us, and explains how we use, share, and protect that information. We are committed to processing your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the regulations issued by the UAE Data Office, and applicable international privacy standards including the EU General Data Protection Regulation (GDPR) where it applies.

2Information we collect

Information you provide directly

When you engage Fairway, sign up for a consultation, or submit forms via our website, we collect:

• Identification data: full name, date of birth, nationality, passport number, Emirates ID number, photographs, and signature.
• Contact details: email address, mobile and landline numbers, residential and business addresses.
• Professional details: CV, educational certificates, employment history, current sponsor details (if you hold a UAE residence visa), and professional qualifications.
• Business information: proposed business activities, trade name preferences, shareholding structure, beneficial ownership details, source of funds, and bank reference letters.
• Family information: when family sponsorship is requested, we collect spouse, children, and parent details including marriage and birth certificates.
• Financial information: bank statements, financial statements, VAT and corporate tax registration details, and transaction records (for accounting and tax services).

Information we collect automatically

When you visit our website, we collect technical and usage data including IP address, device type, browser type and version, operating system, referring URL, pages visited, time spent on each page, and click activity. This is collected via cookies and similar technologies (see Section 5).

Information from third parties

We may receive information about you from UAE government authorities (Department of Economy and Tourism, Federal Authority for Identity, Citizenship, Customs and Port Security, Ministry of Human Resources and Emiratisation, Federal Tax Authority), free zone authorities, banking partners, attestation chains, and referrers introducing you to our services.

3How we use your information

We use your personal information for the following purposes:

• Service delivery: to assess eligibility, prepare applications, submit documents to government and free zone authorities, coordinate banking introductions, and complete the services you have engaged us for.
• Communications: to respond to your inquiries, provide service updates, send invoices and receipts, communicate renewal reminders, and answer support questions via email, WhatsApp, or phone.
• Legal compliance: to comply with anti-money-laundering (AML) and counter-financing-of-terrorism (CFT) requirements, beneficial ownership disclosures, OECD Common Reporting Standard (CRS), FATCA, Economic Substance Regulation (ESR), and tax reporting obligations.
• Government & bank submissions: to submit your information, with your authorisation (typically via Power of Attorney), to UAE government departments, free zone authorities, immigration, banks, attestation services, and notary publics.
• Service improvement: to analyse website usage, improve user experience, develop new services, and conduct internal research.
• Marketing: with your consent, to send you newsletters, service updates, and marketing communications. You may opt out at any time.

4Sharing & disclosure

We share your personal information only with parties necessary to deliver our services or as required by law:

Government authorities

UAE Department of Economy and Tourism (DET), Abu Dhabi Department of Economic Development (ADDED), Sharjah Economic Development Department (SEDD), Ajman DED, Federal Authority for Identity, Citizenship, Customs and Port Security (ICP), General Directorate of Residency and Foreigners Affairs (GDRFA), Ministry of Foreign Affairs (MOFAIC), Ministry of Human Resources and Emiratisation (MoHRE), Federal Tax Authority (FTA), and free zone authorities including DMCC, DAFZA, JAFZA, IFZA, RAKEZ, and others.

Banking & financial partners

UAE banks (including Emirates NBD, ADCB, Mashreq, RAKBank, FAB, ADIB, Ajman Bank, Sharjah Islamic Bank), digital banks (WIO, Mashreq NeoBiz), international banks (HSBC UAE, Standard Chartered, Citi UAE), and licensed payment gateway providers — for the purpose of opening and operating bank accounts on your authorised behalf.

Service providers

Document attestation chains (home country authorities, UAE Embassies, MOFAIC), legal translators, notary publics, courier services, audit firms, IT and cloud infrastructure providers (including providers of accounting platforms such as Xero, QuickBooks, and Zoho Books), and professional indemnity insurers.

Legal obligations

We may disclose your personal information when required by court order, regulatory authority, criminal investigation, AML/CFT obligations, OECD CRS or FATCA reporting, or other applicable law.

Business transfers

If Fairway is involved in a merger, acquisition, asset sale, or financing, your personal information may be transferred as part of that transaction. We will notify you and apply appropriate safeguards.

We do not sell your personal data to advertisers, data brokers, or other third parties for marketing purposes.

5Cookies & analytics

Our website uses cookies and similar tracking technologies to operate the site, remember your preferences, and analyse traffic. We use the following categories of cookies:

• Strictly necessary cookies: required for site functionality (session management, security). These cannot be disabled.
• Performance cookies: measure site usage so we can improve performance (Google Analytics, Hotjar). Anonymised by default.
• Functional cookies: remember your preferences and choices.
• Marketing cookies: used by advertising platforms (Google Ads, Meta) to measure ad effectiveness — only with your consent.

You can manage cookie preferences through your browser settings or our consent banner where available. Disabling cookies may impact site functionality.

6Data security & retention

We implement industry-standard organisational and technical safeguards to protect your personal data, including encrypted storage, access controls, multi-factor authentication for staff, secure document portals, and routine security audits. All staff sign confidentiality agreements as a condition of employment.

Retention periods: We retain client records for the duration of our engagement plus a minimum of seven (7) years as required by UAE Federal Tax Authority and free zone audit regulations. Beneficial ownership records are retained for at least five (5) years per UAE Cabinet Decision No. 58 of 2020. Marketing data is retained until you withdraw consent. Website analytics data is retained for 26 months unless aggregated.

Despite our safeguards, no system is 100% secure. If a personal data breach occurs that is likely to result in high risk to your rights and freedoms, we will notify you and the UAE Data Office without undue delay, in line with the PDPL.

7Your rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion where the data is no longer needed for the purpose collected, subject to our legal retention obligations.
• Right to restriction: request limitation of processing in certain circumstances.
• Right to data portability: receive your personal data in a structured, commonly used format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw consent for processing where consent is the legal basis.
• Right to lodge a complaint: lodge a complaint with the UAE Data Office or the relevant data protection authority in your jurisdiction.

To exercise any of these rights, contact us at privacy@fairway.ae. We will respond within thirty (30) days.

8International data transfers

Fairway operates from the UAE with a representative office in India. Your data may be processed in both jurisdictions. Where your data is transferred outside the UAE, we ensure adequate safeguards including contractual data protection clauses and, where applicable, transfers only to jurisdictions providing adequate protection as recognised by the UAE Data Office.

Cloud services and accounting platforms used by Fairway (e.g., Xero, QuickBooks, Zoho Books, Google Workspace, Microsoft 365) may host data in regional data centres including the EU, USA, Singapore, and Australia. These providers maintain SOC 2 / ISO 27001 certifications and offer GDPR-compliant data processing terms.

9Children's privacy

Our services are intended for adults engaged in business activities. We do not knowingly collect personal data from children under 18, except in the context of family visa sponsorship where parents or legal guardians provide their children's information for residence-visa processing on the sponsor's UAE residence visa. We rely on the parent's authority and consent in such cases.

10Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For material changes, we will notify active clients by email. Your continued use of our services after the update constitutes acceptance of the revised policy.

11Contact us

If you have questions about this Privacy Policy, want to exercise any of your rights, or wish to make a complaint, reach out to us directly:

You may also lodge a complaint with the UAE Data Office (u.ae) if you believe your data protection rights have been infringed.