We have implemented generally accepted standards of technology and operational security to protect personal information from loss, misuse, alteration or destruction. We have taken all reasonable steps to ensure that the personal data is protected against misuse and accidental loss or disclosure, and from unauthorized or unlawful processing, destruction or alteration, and in case of any personal data breach (as defined by applicable Data Protection Law) we will notify you without undue delay upon becoming aware of it. We require all employees and principals to keep personal information confidential and only authorized personnel have access to this information.
We will retain your personal information in accordance with our data retention policy. It is our normal practice to retain documents relating to client engagements as per the retention period prescribed in the local UAE Regulations (which is in between five to ten years depending on the jurisdiction in which the client is incorporated or registered) from the end of the relevant Engagement.
Where the client is incorporated or registered outside of the UAE, the retention period shall be determined as five years. Thereafter, unless separate arrangements have been made, we may destroy or erase the documents or papers without reference to you.
Upon termination or expiry of this engagement, promptly return to you or, if requested by you, destroy all copies of the personal data, in which case any right to use, copy or disclose that personal data ceases. However, you agree that we shall have the right to retain copies of documents relating to the Engagement after the Engagement has ended, subject to our continuing confidentiality obligations.