Privacy Policy
1. Who is responsible for your data
METATRIA L.L.C-FZ (Meydan Free Zone, Dubai, United Arab Emirates; commercial licence No. 2651466.01; registered office: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, UAE) is the controller of the personal data described in this Policy. We process personal data under the personal data protection law of the United Arab Emirates, Federal Decree-Law No. 45 of 2021.
Contact for privacy matters: privacy@metatria.com · +971 50 777 8211 · .
2. What we collect
2.1 When you send a request through the Website. Your name; your contact (e-mail address or messenger handle); the service direction you are interested in; your country; the composition of your family where the request concerns relocation or education; your intended timeline; the description of your task in your own words; and your consent to this Policy.
2.2 A source mark. When you first open the Website we store in your browser a mark that records how you arrived (for example the campaign parameters in the link, or the address of the referring page). It is sent to us together with your request, so that we know which of our materials brought you. It contains no name and no contact details. See our Cookie Notice.
2.3 When you become a client. The information and documents required to perform the engagement and to meet our obligations under the anti-money-laundering rules: identity documents, date and place of birth, nationality, address, details of the beneficial owner, the purpose of the services, the source of funds, whether you hold a prominent public position, and the documents of the matter itself (for example corporate, visa or accounting documents). Where the engagement concerns your family, this includes the data of the family members you give us.
2.4 Payment data. The amount, currency, date, reference, the name of the payer and the bank details shown on the payment. We never receive or store your full card number: card payments are handled by our licensed payment service provider, and we see only the confirmation, the last digits and the result.
2.5 Technical data of the Website. Our servers keep ordinary access logs (the IP address of the request, the date and time, the address requested, the browser identifier) for security and to keep the service running.
2.6 Correspondence. The messages you send us and our replies, including by e-mail and messenger.
We do not buy personal data from data brokers, and we do not collect data about you from closed or leaked databases.
3. Why we use it, and on what legal basis
- Answer your request, prepare a quote — to take steps at your request before a contract · Legal basis: your request and your consent
- Perform the engagement, correspond, issue invoices — to perform our contract with you · Legal basis: performance of a contract
- Identify and verify you, screen against sanctions lists, keep compliance records, report where the law requires — because the law requires it of us · Legal basis: legal obligation (Federal Decree-Law No. 10 of 2025 and Cabinet Resolution No. 134 of 2025)
- Keep accounting and tax records, issue and keep invoices — because the law requires it of us · Legal basis: legal obligation (tax law of the United Arab Emirates)
- Keep the Website secure and working; know which materials bring requests — our legitimate interest in running and improving our business, balanced against your rights · Legal basis: legitimate interest
- Send you information about our services where you have asked for it — your choice · Legal basis: your consent, which you may withdraw at any time
We do not use your data for automated decision-making that produces legal effects for you, and we do not profile you for advertising.
4. Who we share it with
4.1 Our staff, bound by confidentiality, on a need-to-know basis.
4.2 Authorities, banks and counterparties named in your engagement, to the extent required to perform it — for example a free zone authority, the immigration or tax authority, a bank where you have asked us to prepare an account application.
4.3 Service providers who process data on our behalf under a written data processing agreement and only on our instructions: the provider that hosts the Website, the provider of our customer relationship management system, our e-mail and document infrastructure, and our payment service provider.
4.4 Where the law or a competent authority requires it, including the Financial Intelligence Unit of the United Arab Emirates. Where we are required to report, the law may prohibit us from telling you.
4.5 Professional advisers (lawyers, auditors, insurers) where necessary to establish, exercise or defend a legal claim.
We do not sell personal data, and we do not share it for someone else's marketing.
5. Transfers outside the United Arab Emirates
5.1 Some of the providers described in clause 4.3 operate outside the United Arab Emirates. Our customer relationship management system is hosted in France (European Union).
5.2 We transfer personal data outside the United Arab Emirates only on the grounds the law allows (Articles 22 and 23 of Federal Decree-Law No. 45 of 2021): to a country recognised as providing an adequate level of protection; or under a contract that binds the recipient to the protections of that law; or with your explicit consent; or where the transfer is necessary to conclude or perform our contract with you, or to establish, exercise or defend a legal claim.
5.3 You may ask us which safeguard applies to a particular transfer.
6. How long we keep it
- Requests that did not become an engagement — up to 12 months from the last contact, then deleted
- Client file, engagement documents, correspondence — at least 5 years, counted from the latest of: completion of the transaction, end of the business relationship, or completion of an inspection, investigation or court proceedings — the period required by the anti-money-laundering rules
- Accounting and tax records, invoices — the period required by the tax law of the United Arab Emirates, at least 5 years
- Website access logs — 90 days
- Marketing consent and the messages sent under it — until you withdraw your consent, and then a record of the withdrawal
When a retention period ends, we delete the data or anonymise it so that it can no longer be linked to you.
7. Your rights
Under Federal Decree-Law No. 45 of 2021 you may:
- ask what we hold about you and receive information about it — Article 13;
- receive the data you gave us in a structured, machine-readable form and ask us to pass it on — Article 14;
- have it corrected or erased where it is wrong or incomplete, or where we no longer have a lawful reason to keep it — Article 15;
- ask us to restrict a particular use — Article 16;
- ask us to stop a use, including direct marketing — Article 17;
- object to processing, including automated processing — Article 18;
- withdraw a consent you have given, at any time and easily, without affecting what we did lawfully before — Article 6.
🔴 Some rights have limits: we cannot delete records that the anti-money-laundering or tax rules require us to keep, and we cannot disclose information where the law prohibits it.
How to use them. Write to privacy@metatria.com from the address you have used with us. We answer within 30 calendar days. We may ask you to confirm your identity first — this protects your data, not ours.
If you are not satisfied. You may complain to the UAE Data Office — the federal authority established by Federal Decree-Law No. 44 of 2021 — under Article 24 of the data protection law, or go to the competent courts of Dubai.
8. How we protect it
Access to client data is limited to the people who need it; accounts are protected by strong authentication; data in transit is encrypted; client files are kept in our secured systems and not on public file storage; passwords and access keys are kept in a password manager and never in documents; devices are encrypted. We keep a record of who accessed a client file.
If a personal data breach occurs that is likely to harm you, we notify the UAE Data Office and, where the law requires, you — without undue delay.
9. Children
Our services are for persons aged 18 and over. We do not knowingly collect the data of a person under 18 except where a parent or legal guardian gives it to us as part of a family matter (for example a family visa or a school admission), and we process it only for that matter.
10. Cookies and browser storage
The Website uses one functional cookie to remember the language you chose, and stores a small number of items in your browser (your light or dark theme, whether you have seen the language strip, the source mark described in clause 2.2, and the result of the calculator while you are on the site). There is no advertising and no third-party analytics on the Website. Details and how to clear them are in our Cookie Notice.
11. Changes to this Policy
We may update this Policy. The edition in force, with its number and date, is published on the Website; where a change materially affects you, we say so on the Website and, where we hold your contact details and the law requires it, we tell you directly.
12. Language
This Policy is published in Arabic and English, and in Russian for convenience. In case of any discrepancy, the Arabic text prevails.
METATRIA L.L.C-FZ · licence No. 2651466.01 · Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates · privacy@metatria.com · +971 50 777 8211