Privacy Policy
What personal data Pistos Group collects, why we collect it, who sees it, how long we keep it and what you can ask us to do with it.
Who we are
Pistos Group L.L.C-FZ is the data controller for the personal data described in this policy. Our office is at Office 506, Ground Floor, Hamza A Building, Al Karama, Dubai, United Arab Emirates. You can reach us at hello@pistos.ae or on +971 4 342 5415.
This policy covers this website. It does not cover other sites we link to, including government portals, free zone authorities and banks, each of which has its own policy.
What we collect
We collect only what you give us and what a web server records automatically.
What you send us
Name, email address and mobile number from the enquiry forms, and anything you write in the question field of the Ask Experts form.
Setup assessment answers
Your answers to the six assessment questions, together with the name and mobile number you give before starting. We keep them so the quote that follows matches what you told us.
Correspondence
Emails, WhatsApp messages and call notes once you are in touch with us, including documents you send during an engagement.
Technical data
IP address, browser and device type, pages visited and approximate location, recorded in standard server logs by our hosting provider.
Analytics
Google Analytics, loaded through Google Tag Manager, records how the site is used — pages read, how you arrived, and whether an enquiry was submitted. See our cookie policy for the detail and how to opt out.
What we do not collect
We do not buy contact lists. We do not run advertising or retargeting pixels on this site. We do not ask for passport scans, licence documents or financial records through this website — if an engagement needs them, we collect them separately and tell you how they will be handled.
Why we use it
- To answer your enquiry and send the quote you asked for
- To carry out the work once you become a client
- To meet legal obligations, including anti-money-laundering and know-your-customer checks
- To keep records required by UAE law
- To improve the website, using aggregate figures rather than individual behaviour
Who we share it with
We share personal data only where it is necessary, and never for anyone else's marketing.
- Netlify, which hosts this site and processes form submissions
- Google, through Analytics and Tag Manager, which receives usage data about this website
- The One Accountant, our sister company, where your enquiry concerns accounting, tax or payroll
- Government authorities, free zone authorities and banks, where you have instructed us to act for you and the submission requires it
- Professional advisers where we need legal or audit input on your matter
- Law enforcement or regulators, where we are legally required to disclose
How long we keep it
Enquiries that do not become engagements are kept for 24 months and then deleted. Client records are kept for at least five years after the engagement ends, because UAE anti-money-laundering and tax rules require it. Where a retention period is set by law, that period overrides a deletion request.
Security
The site is served over HTTPS. Form submissions are transmitted encrypted. Client documents are held in access-controlled storage, and access is limited to the people working on your matter. No system is perfectly secure, and we will not pretend otherwise — if a breach affects your data we will tell you and the relevant authority as required.
Your rights
You can ask us what we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask for a copy in a portable format. Write to hello@pistos.ae and we will respond within 30 days. If you are in the EU or UK, see our GDPR policy. For UAE data protection law specifically, see our data protection policy.
Changes
We update this policy when our practices change. The date below is when it was last revised, and the current version is always the one on this page.
Last updated
9 October 2026