SMEs must appoint an accredited ASP by 31 March 2027  Check your readiness →
Skip to content
UAE E-Invoicing HubIndependent guide · UAE

Privacy Policy

This policy explains what personal data we collect when you use this website, why we collect it, who processes it on our behalf, how long we keep it and how you can exercise your rights. We collect as little as we need, we do not sell personal data and we do not use advertising cookies.

Who is responsible for your data?

The controller of your personal data is Kenobiz Solutions LLC, Meydan Free Zone, Dubai, United Arab Emirates, the publisher of this website. For any privacy question or request, use our contact form and mention "Privacy" in your message.

Which laws apply?

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). If you are in the European Union, the EU General Data Protection Regulation (GDPR) also applies to the data we collect from you.

What data do we collect?

When you fill in a form or request a readiness report

When you use the contact form, ask for a call or ask to receive your e-invoicing readiness check report by e-mail, we may collect:

  • your name and e-mail address;
  • your phone or WhatsApp number (optional);
  • your company name and emirate;
  • your revenue band, number of users, current software and needs (for example inventory or multi-company);
  • your preferred language and your answers to the readiness check;
  • the page you came from and campaign tags in the link (UTM parameters);
  • the date and time you gave your consent.

You can use the readiness check and see your result without giving any contact details. They are only needed if you want the report sent to you or want us to contact you.

When you use the AI assistant

When you ask the AI assistant a question, we process the messages you type, the page you asked from and the language of the conversation. To improve our guides, we keep an anonymised log of questions (the question text with personal details removed, its language, the page and any rating you give).

Please do not type personal data (names, phone numbers, TRNs, invoice details) into the assistant. It does not need them to answer.

Audience measurement

We measure visits with Vercel Web Analytics, which works without cookies. It gives us aggregated figures such as pages viewed, referring sites, country and device type. We cannot identify you from these figures.

Technical data

Like any website, our hosting provider processes technical data such as your IP address and browser type to deliver pages and to protect the site and the AI assistant against abuse (for example by limiting the number of requests).

Why do we use your data, and on what basis?

PurposeData usedLegal basis
Answer your message or send the report you asked forForm data, readiness answersYour request and your consent
Follow up about software or implementation services from KenobizForm dataYour consent (the box is never pre-ticked)
Answer your questions in the AI assistantYour messagesYour request
Improve our guidesAnonymised questionsOur legitimate interest in useful, accurate content
Measure audienceAggregated analyticsOur legitimate interest
Keep the site secureTechnical dataOur legitimate interest
Meet legal obligationsData required by lawLegal obligation

You can withdraw your consent at any time. This does not affect processing that took place before.

Who processes your data on our behalf?

We use a small number of service providers. They process data only on our instructions and for the purposes above.

ProviderRoleWhat it receives
VercelWebsite hosting and cookieless audience measurementTechnical data, aggregated analytics
SupabaseDatabase (region: Mumbai, India)Form data, readiness answers, conversations, anonymised questions
AnthropicGenerates the AI assistant's answersThe messages of your conversation are sent to the Anthropic API to produce each answer
ZohoCustomer relationship management (CRM) for KenobizContact details and needs, if you asked us to contact you
E-mail providerSends replies, confirmations and reportsYour name, e-mail address and the content of the e-mail

Is your data transferred outside the UAE?

Yes. Some of these providers store or process data outside the UAE and outside the European Union, for example in India (our database region) and in the United States. We rely on our providers' data processing terms and, where the law requires it, on contractual safeguards such as the European Commission's standard contractual clauses, so that your data keeps an appropriate level of protection.

How long do we keep your data?

  • AI assistant conversations without contact details: deleted after 90 days.
  • Anonymised question logs: they contain no personal data and may be kept to improve the guides.
  • Contact and lead data: if you do not become a client, deleted after 24 months.
  • Client data: kept for the duration of our contract and then for the record-keeping periods required by UAE law.
  • Analytics: aggregated only; no individual profile is kept.

What are your rights?

Depending on the law that applies to you, you have the right to:

  • know whether we process your data and obtain a copy of it;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or stop the processing of your data, or object to it;
  • receive your data in a usable format or have it sent to another provider;
  • withdraw your consent at any time;
  • not be subject to a decision based solely on automated processing that significantly affects you.

To exercise a right, use the contact form. We may ask you to confirm your identity. We will reply within the time limits set by the applicable law (one month under the GDPR). If you are not satisfied with our answer, you can complain to the UAE Data Office or, if you are in the EU, to the data protection authority of your country.

Do we sell your data or use advertising cookies?

No. We do not sell, rent or trade personal data. We do not use advertising cookies, cross-site tracking or advertising pixels. Every e-mail we send includes a way to unsubscribe.

Cookies and browser storage

Our audience measurement does not use cookies. The site may store strictly necessary information in your browser, for example to keep your language choice or an open conversation while you navigate. This information is not used to track you.

Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect their data.

Changes to this policy

We will update this page when our practices or the law change, and show the date of the last review at the bottom of the page. Related pages: our terms of use and our disclaimer.

Last reviewed: By Kenobiz Solutions editorial team

General information, not tax or legal advice. For your specific case, consult an FTA-registered tax agent.

Book a call