Privacy Policy

This Privacy Policy explains how ECOVIS JRB Chartered Accountants (referred to in this policy as "ECOVIS JRB", "we", "us" or "our") collects and processes personal data submitted through the TaxOasis platform at taxoasis.ae, including the UAE E-Invoicing Readiness Assessment and ASP Selector tool. This policy is published in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

1. Who is the data controller

The data controller for personal data submitted through this website is ECOVIS JRB Chartered Accountants, a firm registered in the Abu Dhabi Global Market (ADGM) and operating from Concord Tower, Dubai Media City. TaxOasis is a knowledge platform operated by ECOVIS JRB.

If you have any question about this policy or wish to exercise any of the rights described below, please contact us at support@taxoasis.ae.

2. What personal data we collect

When you complete the E-Invoicing Readiness Assessment and request the email report, we collect the personal data you provide on the lead capture form:

• Your full name
• Your business email address
• The name of the company you represent
• Optionally, your role at that company and a phone number
• Confirmation that you have accepted this Privacy Policy and the related Disclaimer

Alongside the personal data, we also store your responses to the assessment questionnaire, the complexity tier and phase placement those responses produced, and the ASP shortlist generated for you. We additionally log the page from which the form was submitted for analytics purposes.

We do not knowingly collect or process special categories of personal data, and we do not request information from minors. The assessment is intended for business users acting in a professional capacity.

3. Why we collect it and the legal basis

We collect this personal data for two purposes. First, to deliver the assessment report you have requested by email. Second, with your explicit consent, to enable the ECOVIS JRB e-invoicing advisory team to contact you with relevant guidance and offers of professional support. The legal basis for both purposes is your consent, given when you accept this Privacy Policy on the lead form. You may withdraw your consent at any time as described in section 7.

4. How long we retain your data

We retain personal data submitted through the assessment for a maximum of thirty-six months from the date of submission, unless you have engaged ECOVIS JRB on a professional services basis during that period, in which case retention will follow the periods applicable to client records under UAE professional regulatory requirements. After the retention period expires, the data is deleted or anonymised.

5. Who has access to your data

Personal data submitted through this site is accessible only to authorised personnel within ECOVIS JRB. We do not sell, rent, or share your personal data with third-party marketers. We may share data with the following categories of third parties only where strictly necessary:

• Hosting and email service providers. The website and database are hosted on infrastructure provided by Hostinger. Outbound email is sent through standard email service infrastructure. These providers process data on our instructions and are bound by their own data protection obligations.
• Professional, legal, or regulatory advisors. Where we are required to do so to comply with applicable law or regulatory obligation.

We do not transfer your data outside the United Arab Emirates other than as required for the email and hosting infrastructure described above.

6. How we secure your data

We apply technical and organisational measures appropriate to the nature of the data we hold, including encryption of data in transit, access controls limiting database access to authorised personnel, and standard infrastructure-level security applied by our hosting provider. No system can guarantee absolute security; we commit to applying reasonable measures and to notifying affected individuals if a personal data breach with material risk arises.

7. Your rights

Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights in relation to your personal data, exercisable by contacting us at support@taxoasis.ae:

• The right to be informed about how your data is processed.
• The right to access the personal data we hold about you.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion of your data, subject to any legal or regulatory retention obligations on us.
• The right to withdraw your consent to further processing at any time.
• The right to object to processing for direct marketing purposes.
• The right to lodge a complaint with the UAE Data Office.

We will respond to any rights request within thirty days of receipt.

8. Cookies

This site uses only the cookies required for the basic operation of the website (such as the cross-site request forgery token used to protect the lead form). We do not place advertising or third-party tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated through a notice on this page.

10. Contact

For any question or request relating to this policy, write to us at support@taxoasis.ae.