Privacy Policy

Effective Date: 19 October 2026

NOKAAF & Daxin UAE, a member firm of Daxin Global, is dedicated to protecting the confidentiality and privacy of information entrusted to it. We are committed to the appropriate protection and use of personal information, sometimes referred to as personal data or personally identifiable information (PII), collected through our website and in connection with our professional services.

NOKAAF & Daxin UAE provides audit, taxation, advisory, accounting, and technology services, including Customer Relationship Management (CRM), Enterprise Resource Planning (ERP), Odoo, and Microsoft Dynamics 365 solutions. Our professional activities may involve confidential financial records, tax documentation, business information, customer records, and other sensitive materials.

This Privacy Policy explains how we collect, use, share, store, and protect personal information when you visit our website, contact us, request our services, or otherwise interact with our business.

NOKAAF & Daxin UAE is a member firm of Daxin Global. Each member firm of Daxin Global is a separate and independent legal entity.

Contents

1. Collection and Use of Personal Information
   1.1 What Information We Collect
   1.2 Automatic Collection of Personal Information
   1.2.1 IP Addresses | 1.2.2 Cookies | 1.2.3 Google Analytics
   1.2.4 Web Beacons | 1.2.5 Location-Based Tools
   1.3 Social Media Widgets and Applications | 1.4 Children
2. How We Use Your Personal Information
3. The Legal Grounds We Have to Use Your Personal Information
4. Sharing and Transfer of Personal Information
   4.1 Transfers Within the Daxin Global Organization | 4.2 Transfers to Third Parties | 4.3 International Transfers
5. Choices
6. Your Rights
7. Data Security and Integrity
8. Links to Other Websites
9. Privacy Policy Revisions
10. Policy Questions and Enforcement

1. Collection and Use of Personal Information

1.1 What Information We Collect

We obtain personal information when you voluntarily provide it through our website, contact forms, email communications, business inquiries, service requests, contracts, or professional engagements. This may include your name, email address, telephone number, business address, company name, job title, professional role, and other relevant contact details.

When providing audit, accounting, taxation, or advisory services, we may receive financial statements, accounting ledgers, invoices, receipts, tax returns, tax registration details, contracts, business reports, transaction records, payroll information, and supporting documentation. These records may contain personal information relating to company directors, employees, customers, suppliers, shareholders, or other individuals.

When providing technology services, including CRM, ERP, Odoo, and Microsoft Dynamics 365 implementation, customization, integration, migration, maintenance, and support, we may process user account information, system configurations, access permissions, business records, transaction data, technical logs, and other information necessary to deliver the agreed services.

We may also receive employment information when individuals apply for positions with us, where recruitment services are offered. We aim to collect only information reasonably necessary for the purpose for which it is obtained. If you provide personal information about another individual, you should ensure that you are authorized to provide it and that any required notices or permissions have been addressed.

1.2 Automatic Collection of Personal Information

We and our authorized service providers may use cookies, web beacons, server logs, and similar technologies to collect information automatically when you visit our website or interact with our electronic communications. This may include your IP address, browser type, device information, operating system, pages visited, referring website, access times, and general website activity. We may use this information to maintain website functionality, protect our systems, understand visitor behavior, and improve website performance. Where required by law, we will obtain consent before using non-essential tracking technologies.

1.2.1 IP Addresses

IP addresses and related technical information may be recorded for information security, system diagnostics, fraud prevention, troubleshooting, and website administration. We may also use aggregated or appropriately de-identified information to analyze website traffic and improve the reliability of our online services.

1.2.2 Cookies

Cookies are small text files stored on your device when you visit a website. We may use them to maintain essential website functionality, remember preferences, analyze website performance, and improve the browsing experience.

Strictly Necessary Cookies: Support essential functions such as navigation, security, form submissions, and access to protected areas. Where permitted by law, they may operate without consent because they are necessary for the requested service.

Performance Cookies: Help us understand how visitors use our website, identify technical issues, and assess website performance.

Functionality Cookies: Remember preferences such as language settings or selected options.

Targeting and Advertising Cookies: Where used, help deliver relevant marketing content, measure advertising performance, and limit repeated advertisements.

We will request consent for non-essential cookies where required by applicable law. You can manage preferences through the cookie consent banner or website privacy settings, or adjust your browser settings to block or delete cookies. Disabling certain cookies may affect website functionality. Cookies may be session-based or persistent; actual types and retention periods depend on the technologies implemented on our website.

1.2.3 Google Analytics

We may use Google Analytics or comparable website analytics services to understand how visitors interact with our website. These services may collect page views, referral sources, browser and device information, approximate geographic information, and general website interactions. We may use this information to evaluate website performance and improve content. Where required by law, we will obtain consent before enabling non-essential analytics technologies. Google’s privacy information is available at https://policies.google.com/privacy. This section applies to Google Analytics only if we use the service on our website.

1.2.4 Web Beacons

Web beacons and similar technologies may be used to collect information about interactions with website content or electronic communications, such as whether a communication was opened or a link was clicked. Where used, these technologies may help us evaluate website performance and improve communications. We will use them in accordance with applicable legal requirements, including consent requirements where applicable.

1.2.5 Location-Based Tools

We may collect or infer general geographic information from technical data, such as an IP address, to understand website traffic and provide relevant regional information. If a service requires precise location information, we will handle it according to relevant permissions and applicable legal requirements.

1.3 Social Media Widgets and Applications

Our website may include links, sharing buttons, embedded content, or other features provided by third-party social media platforms. These platforms may collect information about your interactions according to their own privacy policies and settings. We do not control their independent information collection practices and encourage you to review their privacy policies. Information voluntarily published through any interactive website feature may be visible to other users.

1.4 Children

Our website and professional services are primarily intended for businesses, organizations, and individuals acting in a professional or commercial capacity. We do not knowingly collect personal information from children where such collection is prohibited by applicable law. If we become aware that personal information has been collected unlawfully, we will take appropriate steps, including deletion where required.

2. How We Use Your Personal Information

We use personal information for the purposes for which it was collected, as described in this Privacy Policy, or for other purposes permitted by applicable law. Depending on our relationship with you, we may use personal information to:

•       Respond to inquiries and provide information about our services.
•       Prepare proposals, quotations, engagement letters, contracts, and other business documents.
•       Deliver audit, taxation, accounting, advisory, and technology services.
•       Review financial records and supporting documentation for professional engagements.
•       Support tax compliance, accounting processes, financial reporting, and related business activities.
•       Implement, configure, integrate, maintain, and support CRM, ERP, Odoo, and Microsoft Dynamics 365 solutions.
•       Manage client relationships, projects, service requests, and business communications.
•       Maintain records necessary for professional, contractual, and legal responsibilities.
•       Process invoices, payments, billing information, and related transactions.
•       Manage recruitment and employment inquiries, where applicable.
•       Improve our website, online services, business processes, and client experience.
•       Maintain information security and investigate potential fraud, unauthorized access, or misuse.
•       Communicate service updates and business information, and send marketing communications where permitted.
•       Comply with legal, regulatory, professional, and contractual obligations.
•       Establish, exercise, or defend legal claims and protect legitimate business interests.

For technology engagements, information accessed through a client’s systems will be handled according to the agreed scope of work, authorized access, contractual arrangements, and applicable legal requirements. We are committed to maintaining client confidentiality and do not sell personal information to third parties for their own direct marketing purposes.

3. The Legal Grounds We Have to Use Your Personal Information

We process personal information in accordance with data protection laws applicable to our operations in the United Arab Emirates. Depending on the circumstances and applicable legal framework, the legal grounds may include:

Consent: We may request consent for particular activities, including certain marketing communications and non-essential cookies. Where processing relies on consent, you may withdraw it, subject to applicable law.

Performance of a Contract: We may process information to provide agreed services, fulfil contractual obligations, or take steps requested before entering into an agreement, where permitted by law.

Compliance With Legal Obligations: We may process information to comply with applicable laws, regulations, court orders, reporting requirements, recordkeeping obligations, or lawful requests from competent authorities.

Legitimate Interests, Where Permitted: We may process information for lawful business purposes, provided the processing respects relevant rights and interests. These purposes may include website security, business relationship management, fraud prevention, and service improvement.

Other Legally Permitted Grounds: Applicable law may permit processing in additional circumstances, including specified legal proceedings, protection of vital interests, or other statutory exceptions.

The applicable legal ground depends on the nature of the information, the purpose of processing, and the circumstances involved. Our professional responsibilities may require processing to deliver services, maintain engagement records, meet legal and regulatory obligations, protect confidential information, and prevent fraud or unauthorized access. Where sensitive personal information is processed, we will apply the additional requirements and safeguards applicable to that information.

4. Sharing and Transfer of Personal Information

We are committed to maintaining the confidentiality of personal information and confidential business records. We do not sell personal information to third parties for their own direct marketing use. We may share information when necessary to deliver services, operate our business, comply with legal requirements, or fulfil other purposes permitted by law.

4.1 Transfers Within the Daxin Global Organization

Daxin Global comprises separate and independent member firms. Information may be shared with another member firm or affiliated entity only where necessary for a legitimate business purpose, professional engagement, authorized service, or legal or regulatory requirement. Any sharing is subject to applicable confidentiality requirements, contractual arrangements, and data protection obligations. Membership of Daxin Global does not, by itself, mean that all member firms have access to client information.

4.2 Transfers to Third Parties

We may share personal information with authorized third parties where necessary for legitimate professional and business purposes, to fulfil client requests, or as required or permitted by law. These parties may include:

•       Website hosting and infrastructure providers.
•       Information technology and cybersecurity service providers.
•       CRM, ERP, Odoo, and Microsoft Dynamics 365 providers.
•       Cloud storage and business software providers.
•       Authorized consultants, contractors, and professional advisers.
•       Accounting, billing, payment, and financial service providers.
•       Business communication and customer relationship management providers.
•       Other service providers involved in delivering agreed services.
•       Government authorities, regulators, courts, and law enforcement agencies where disclosure is legally required or permitted.

Where third parties process information on our behalf, we take appropriate steps to ensure that confidentiality, security, and data protection arrangements are in place as required by law. Technology processing arrangements may depend on the service configuration, software provider, client instructions, and contractual responsibilities. Information may also be disclosed in connection with a merger, restructuring, acquisition, or transfer of business assets, subject to applicable legal requirements.

4.3 International Transfers

Certain technology providers, cloud platforms, or business partners may process information outside the UAE. Where personal information is transferred internationally, we will comply with applicable legal requirements and implement necessary safeguards, which may include approved transfer mechanisms, contractual protections, or another lawful arrangement. The countries involved depend on the service providers and systems used.

5. Choices

You may choose whether to provide personal information to us. However, certain information may be necessary for us to respond to your inquiry, provide professional services, establish a business relationship, or meet legal obligations. If you do not provide necessary information, we may be unable to fulfil your request or complete an engagement.

You may unsubscribe from marketing communications using the instructions provided or by contacting us. You may manage cookie preferences through available consent controls or adjust your browser settings. Where processing relies on consent, you may withdraw it, without affecting processing lawfully carried out before withdrawal. Certain information may still need to be retained where required or permitted by law.

6. Your Rights

Depending on the applicable law and circumstances, you may have rights regarding personal information we process, including:

Access and Correction: Request access to personal information and correction or completion of inaccurate or incomplete information.

Erasure: Request deletion where legal requirements for deletion are satisfied, subject to lawful retention obligations.

Objection to Processing: Object to particular processing activities where the law provides that right.

Restriction of Processing: Request restriction or suspension of certain processing where legal conditions are met.

Withdrawal of Consent: Withdraw consent where processing is based on consent, subject to applicable law.

Data Portability: Receive eligible information in an appropriate electronic format or request transfer where such a right applies.

Complaints: Raise a concern with us or, where appropriate, lodge a complaint with the competent data protection authority.

To exercise your rights, contact us using the details in Section 10. We may request reasonable information to verify your identity and locate relevant records. Requests will be assessed under applicable law, and rights may be subject to exceptions, limitations, and lawful retention obligations.

7. Data Security and Integrity

We take reasonable and appropriate technical and organizational measures to protect personal information and confidential business information against unauthorized access, loss, misuse, alteration, disclosure, or destruction. Access is limited to authorized individuals and service providers who require it for legitimate business purposes and are subject to appropriate confidentiality obligations.

Safeguards may include access controls, authentication procedures, secure handling of electronic documents, system monitoring, and appropriate arrangements with technology providers. We recognize the importance of protecting financial records, tax documentation, client communications, business information, and data accessed through CRM, Odoo, and Microsoft Dynamics 365 systems. Access to client systems will be limited according to the agreed scope, authorized permissions, and applicable requirements.

No electronic system or method of transmission can be guaranteed to be completely secure. We seek to retain personal information only as long as necessary for service delivery, professional recordkeeping, legal compliance, and legitimate business purposes. Retention periods depend on the information, engagement, applicable laws, professional obligations, and contractual requirements. When information is no longer required, we will take appropriate steps to delete, anonymize, or securely dispose of it, subject to applicable retention obligations.

8. Links to Other Websites

Our website may contain links to external websites, software platforms, and services operated by third parties. These websites may have privacy policies and information-handling practices that differ from ours. We do not control the independent privacy practices of third-party websites that we do not operate and encourage visitors to review the relevant privacy policy before providing information. Third-party CRM, Odoo, Microsoft Dynamics 365, or cloud-based platforms may also apply their own terms and privacy documentation.

9. Privacy Policy Revisions

We may revise this Privacy Policy to reflect changes in our business operations, professional services, website functionality, technology systems, information-handling practices, or applicable legal and regulatory requirements. Revised versions will be published on our website with an updated effective date. Where required by law, we will provide additional notice or obtain consent for changes affecting the processing of personal information. We encourage you to review this policy periodically.

10. Policy Questions and Enforcement

NOKAAF & Daxin UAE is committed to protecting the online privacy and confidentiality of personal information entrusted to it. If you have questions, requests, or concerns regarding this Privacy Policy or the way we handle personal information, please contact us using the details below.

Company Name: NOKAAF & Daxin UAE

Organization: Member firm of Daxin Global

Location: Business Bay, Dubai, United Arab Emirates

Telephone: +971 52 764 6955

Email: info@daxin-global.ae

Website: https://daxin-global.ae

Please provide sufficient information to help us understand your concern and locate relevant records. We may request reasonable verification information before responding to a privacy request. We will review and respond to requests and complaints in accordance with applicable legal requirements. Where a concern cannot be resolved directly, you may have the right to refer the matter to the competent data protection authority.

Separate Legal Entity Notice

NOKAAF & Daxin UAE is a member of Daxin Global. Each member firm of Daxin Global is a separate and independent legal entity. NOKAAF & Daxin UAE and its affiliates are not responsible or liable for any acts or omissions of Daxin Global or any other member of Daxin Global, subject to applicable law and relevant contractual arrangements. This notice describes the organization’s legal structure and does not replace separate privacy, confidentiality, or data protection obligations applicable to an individual member firm.