At j. awan & partners, we are dedicated to protecting your privacy and handling your personal data with transparency, in full compliance with relevant data protection laws. This Privacy Policy outlines how we, along with our group entities, affiliates, and subsidiaries (collectively, “j. awan & partners,” “our,” “we,” or “us”), collect, use, and protect personal data, and explains the rights you have regarding this information.

​

1. Identity and Contact Details of the Data Controller

Data Controller: j. awan & partners, including our group entities and subsidiaries. 

​

2. Contact Details of the Data Protection Officer

​

Data Protection Officer: For any queries or concerns regarding data protection, our appointed Data Protection Officer can be reached at dataprivacy@jawanpartners.com.

​

3. Types of Data Collected and Processing Activities

 

We collect various categories of personal data depending on the service provided:

• Identification data (e.g., name, date of birth, ID numbers).

• Contact information (e.g., phone numbers, email addresses).

• Financial details (e.g., bank account information).

• Professional data (e.g., job title, work experience).

• Sensitive data, including special categories as permitted by law (e.g., biometric data, political affiliations, or criminal records).

​

We use your data for activities including, but not limited to:

• Client onboarding and management.

• Service provision and improvement.

• Compliance with legal requirements, such as Anti-Money Laundering (AML) checks.

• Marketing communications (subject to your consent).

• Profiling to assess compliance, risk, and fraud prevention.

• Third-party processing: We may engage third parties (e.g., for marketing, invoicing, and social media campaigns), ensuring they adhere to our data protection standards.

​

4. Legal Basis for Processing

​

Our data processing relies on the following legal bases:

• Contractual necessity: To fulfil our obligations under service contracts.

• Legal obligations: To comply with laws and regulations.

• Legitimate interests: To provide and improve services, safeguard against fraud, and ensure internal security.

• Consent: For specific marketing activities, profiling, or where legally required.

​

5. Special Categories of Personal Data

​

​We may process sensitive personal data, such as biometric data or political affiliations, as permitted by data protection law. Processing of minors’ data is limited to specific purposes and with consent where required.

​

6. Recipients of Data

​

​Your data may be shared with:

• Internal teams within j. awan & partners for business and compliance purposes.

• Third-party service providers: These include IT support, invoicing services, marketing agencies, and other contracted processors.

• Regulators and legal authorities: where necessary to fulfil our legal obligations.

 

7. Data Transfers to Third Countries

​

As a global company, j. awan & partners may transfer personal data to locations outside the jurisdiction where it was initially collected, including transfers from the UAE to other countries. These transfers may involve jurisdictions that do not offer the same level of data protection as the UAE or other applicable jurisdictions.
In such cases, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include:

• Standard Contractual Clauses (SCCs) as approved by relevant data protection authorities, ensuring legally binding commitments for data protection.

• Adequacy decisions where applicable, confirming that the destination country offers an equivalent level of data protection.

• Binding Corporate Rules (BCRs), where necessary, that govern the transfer of personal data within our organisation.  

 

We are committed to assessing each data transfer to ensure that it meets legal requirements and maintains the security and confidentiality of your data. For further details about our safeguards for international transfers, you may contact us at dataprivacy@jawanpartners.com.

 

8. Data Retention Period

​

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including compliance with legal obligations. Retention periods are determined based on legal, regulatory, and business needs, and data will be securely deleted or anonymised once no longer required.

​

9. Data Security Measures

​

We implement technical and organisational measures to protect personal data from unauthorised access, use, or disclosure. Access is restricted to authorised personnel and third-party processors who are bound by confidentiality agreements.

​

10. Data Subject Rights

​

Under the data protection laws applicable in the jurisdictions where j. awan & partners operates, including GDPR and the UAE Data Protection Law DIFC Law No. 5 of 2020, Data Protection Regulations 2021, and other relevant frameworks, you have the right to:

• Access your data and obtain a copy.

• Correct inaccuracies in your data.

• Request erasure (“Right to be forgotten”), subject to legal or contractual constraints.

• Restrict processing under certain circumstances.

• Object to processing, including for direct marketing and profiling.

• Data portability, allowing you to obtain and reuse your data.

To exercise these rights, contact us at dataprivacy@jawanpartners.com. We may need to verify your identity before processing requests.

​

11. Right to Withdraw Consent

​

Where processing is based on your consent, you have the right to withdraw it at any time by contacting us at dataprivacy@jawanpartners.com. Withdrawal does not affect the legality of prior processing.

​

12. Complaints and Appeals

​

If you believe we have not complied with applicable data protection laws, you have the right to file a complaint with the relevant supervisory authority in your jurisdiction. We are committed to working with you to resolve any concerns.

​

13. Automated Decision-Making and Profiling

​

We do not typically rely on fully automated decision-making. However, profiling may be used to assess compliance, risk, or fraud. Automated decision-making and profiling will only be used as permitted by law, and we will notify you when relevant.

​

14. Updates to this Policy

​

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be communicated in advance and updated on our website.