Privacy Policy


BOTH’s International Commitment to data protection and privacy in compliance with GDPR


The new EU General Data Protection Regulation (GDPR) came into effect 25th of May 2018.

If you have engaged with BOTH in the past, or have enquired about our services then we may hold limited personal information about you. We hold much of this data for the purpose of managing client relationships, but on the occasion, we may send an update about the new regulations in the UAE that might affect our clients.

BOTH respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data and how we protect your privacy rights.

This notice is provided in a layered format in a specific area set out below. Please also use the Glossary to understand the meaning of some of the terms used in this privacy notice.



Purpose of this Privacy Notice

This privacy notice aims to give you information on how BOTH collects and processes your personal data/documents during the process of any services that we provide.

Data is collected based on the requirements of the services. As well as the consent of the client/s involved. It is important that you read this privacy notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.


BOTH is made up of different legal entities, details of which can be seen upon request of the client. This privacy notice is issued on behalf of BOTH so when we mention “Company”, “we”, “us” or “our” in this privacy notice, we are referring to the relevant company in BOTH who is responsible for processing your data. For purposes of compliance with General Data Protection Regulation (GDPR), BOTH with business address at 23rd floor, Tamouh Tower 12, Al Reem Island, Marina Square, Abu Dhabi, UAE and Conrad Hotel, 9th Floor, Office 901-23, Sheikh Zayed Road, Dubai, UAE is the controller.


Personal data, or personal information, means any information about an individual from which that person can be identified.

We may collect, use and store different kinds of personal data about you and your company which we identify as follows:

    • Passport Copy & Original
    • Trade License
    • Attested Educational Certificate
    • Immigration Cancellation papers
    • Emirates ID copy
    • Copy of valid previous health insurance card or Certificate of Continuity issued by the Insurer
    • Tenancy Contract (Thawteeq/Ejari)
    • Employment Contract
    • Any other required documents

If You Fail to Provide Personal Data

Where we need to collect personal data by law, or under the terms of processing a service we have with you and you fail to provide that data when requested, we may not be able to perform or complete the process/job that we have with you.


We use different methods to collect data from you including through:

Direct interactions – You may give us your information, contact and any related documents by filling in forms we provide (New Hire Form) or by corresponding with us personally or by post, phone, email, chat or otherwise. This includes the personal data you provide when you process the following:

    • New Visa Applications
    • Visa Renewals
    • Establishing Legal Entities
    • Trade License Renewals
    • MOA Amendments
    • POAs


​We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. (i.e. Health Insurance providers, travel agencies & etc.)



​How Long Will You Use My Personal Data For?

​We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements.