Privacy Policy

1. Introduction & Scope

GoldenKey ("GoldenKey", "we", "us") respects your privacy. This policy explains what personal data we collect through goldenkeybcs.com and our consultancy services, why we collect it, how long we keep it and the choices you have.

It applies to website visitors, enquirers, clients and their authorised representatives. By using our website or services you acknowledge this policy; where consent is required (for example analytics cookies), we ask for it explicitly.

2. Data We Collect

• Contact data — name, phone, email, nationality and message content submitted through our forms, WhatsApp or email.
• Service data — passport copies, visas, corporate documents and other KYC material you provide for engaged services only.
• Requirement data — selections made in our requirement estimator (jurisdiction, activity, visa counts, add-ons).
• Usage data (with consent) — pages viewed, clicks, scroll depth, time on page, referral source, UTM tags, device type, browser, screen size, language and timezone, linked to a random visitor identifier.
• Technical data — IP address and user-agent processed transiently for security, rate limiting and fraud prevention.

3. How We Use Data

• Responding to enquiries and preparing quotations you request.
• Delivering engaged services and filing applications with UAE authorities on your instruction.
• Improving our website, content and service experience (analytics, with consent).
• Meeting legal obligations, including UAE AML/KYC and record-retention requirements.
• Protecting our website and clients against fraud, abuse and security threats.

4. Legal Bases & Consent

We process contact and service data to take steps you request and to perform contracts with you; compliance data under legal obligation; and analytics data only with your consent, given via the cookie banner and revocable at any time by clearing site data or declining the banner on your next visit.

5. Sharing & Disclosure

We never sell personal data. We share it only with: (a) UAE government authorities and free zones as required to deliver the services you engage; (b) service partners such as banks, insurers, auditors and typing centres, strictly on need-to-know for your file; (c) our hosting and infrastructure providers under confidentiality; and (d) authorities where disclosure is legally mandated.

6. Retention

Enquiry data is retained for up to 24 months from last contact. Client service files are retained for the periods UAE law requires (typically 5–7 years for compliance records) and then securely deleted. Analytics data is stored in aggregate-friendly form and pruned on a rolling basis.

7. Your Rights

• Access a copy of your personal data held by us.
• Correct inaccurate or incomplete data.
• Request deletion where no legal retention duty applies.
• Withdraw analytics consent at any time.
• Object to or restrict specific processing.
• Complain to a competent data-protection authority.

To exercise any right, email info@goldenkeybcs.com — we respond within 30 days.

8. Security

We apply layered safeguards: HTTPS transport encryption, hashed credentials, least-privilege access to client files, prepared-statement database access, rate limiting on public endpoints and audit logging in our administrative systems. No system is infallible; we notify affected users of any breach as required by law.

9. Children

Our services are directed at adults establishing businesses. We do not knowingly collect data from children under 18; dependent-visa processing uses parents' submissions with parental consent.

10. Changes & Contact

We may update this policy as our services or the law evolve; the 'last updated' date above always reflects the current version, and material changes are highlighted on this page.

Contact: GoldenKey, B1 Building, Level 03, Office 318, Ajman Free Zone, UAE · info@goldenkeybcs.com · +971 55 671 5001.