Privacy Policy

ABM Audit FZ-LLC and its affiliated entities in the United States (together, "ABM Audit", "we", "us") collect information that you voluntarily provide when you request proposals, subscribe to updates, register for events, apply for roles, or otherwise communicate with us. This may include your name, work email address, telephone number, job title, employer name, country or region, and the content of your messages.

When you use our website, we automatically collect certain technical information such as IP address, device type, browser type, referring URLs, pages viewed, and approximate location derived from IP. We use cookies and similar technologies as described in our cookie notice and, where required, subject to your consent preferences.

If you engage us for professional services, we process additional categories of information supplied by you or your organisation as necessary to deliver those services. This may include business contact details, contractual records, and—where relevant to an engagement—information you designate for review as part of audit, attestation, certification, or advisory work.

We use personal information to respond to inquiries, prepare proposals, deliver contracted services, manage client relationships, operate our information security programme, comply with legal and professional obligations, and improve our website and communications.

Where permitted by law, we may use aggregated or de-identified data for analytics, benchmarking, and service development in a form that does not identify individuals.

We do not sell personal information as that term is commonly understood in US state privacy laws, and we do not use personal information for automated decision-making that produces legal or similarly significant effects without human review.

We share personal information with service providers that host our systems, facilitate email delivery, support customer relationship management, or provide other functions essential to our operations. These providers process data on our instructions and under contractual terms that require appropriate confidentiality and security measures.

We may disclose information to professional advisers (such as lawyers and insurers), regulators, accreditation bodies, or law enforcement when we believe disclosure is required by applicable law, regulation, legal process, or professional standards.

Cross-border transfers may occur between the United Arab Emirates and the United States (and other countries where we operate). Where required, we implement appropriate safeguards such as standard contractual clauses or other mechanisms recognised under applicable data protection law.

Depending on where you reside, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. Residents of certain US states may have additional rights, including the right to opt out of certain sharing for cross-context behavioural advertising where applicable.

If you are located in the European Economic Area, the United Kingdom, or similar jurisdictions, you may also have the right to lodge a complaint with a supervisory authority. We honour applicable rights requests subject to verification and any exceptions permitted by law.

To exercise privacy rights, contact us using the details in the Contact section below. We will respond within the timeframe required by applicable law.

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to meet legal, regulatory, insurance, and professional record-keeping requirements. Retention periods vary depending on the nature of the relationship and the type of record.

Marketing contact details are retained until you unsubscribe or we update our lists, subject to a short residual period for suppression and audit purposes.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, loss, or misuse. No method of transmission over the Internet is completely secure; we encourage you to use official channels and avoid sending highly sensitive personal data by unsecured email.

Our information security practices are informed by ISO 27001-aligned controls and the same professional standards we apply when advising clients on security governance.

Questions about this policy or our privacy practices may be directed to privacy@abmaudit.com or to ABM Audit, Data Protection Enquiries, Gate Village 5, Level 3, Dubai International Financial Centre, Dubai, United Arab Emirates.

For US-related inquiries, you may also write to ABM Audit, 350 Fifth Avenue, Suite 4200, New York, NY 10118, United States, Attention: Privacy Office.

For EU-related inquiries, you may also write to ABM Audit, 12 Rue de la Paix, 75002 Paris, France, Attention: Data Protection Officer.

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect material changes, and we will provide additional notice where required by law.