Privacy Policy
Last Updated: January 15, 2026 • Compliance: UK GDPR / EU GDPR / UAE PDPL (Federal Decree-Law No. 45/2021)
1. Overview & Data Controller
Incorp International Ltd (“Incorp International”, “we”, “us”, or “our”) operates offices in London, United Kingdom and Dubai, United Arab Emirates. We act as Data Controller for personal data collected through our website, consultation intake, and onboarding procedures for company formation, corporate secretarial, banking assistance, and compliance services.
2. Information We Collect
Due to statutory anti-money laundering (AML), counter-terrorist financing (CTF), and Know Your Customer (KYC) regulatory duties, we collect and process:
- Personal Identification Data: Full legal name, date of birth, nationality, certified passport copies, national identity cards, and photographs.
- Proof of Residence: Utility bills, municipal tax bills, or certified bank statements dated within 90 days.
- Professional & Financial Information: Curriculum vitae, source of wealth declarations, proof of funds, beneficial ownership percentage, and intended business model.
- Contact & Communication Data: Corporate and personal email, telephone, WhatsApp communications, and consultation transcripts.
- Technical Telemetry: Anonymised IP addresses, browser user agent, device attributes, and cookie telemetry (where consented).
3. Legal Bases for Processing
We process personal data strictly pursuant to Article 6 of the UK/EU GDPR and Article 4 of the UAE Personal Data Protection Law:
Contractual Necessity
Fulfilling corporate formation, government registry filings, and corporate secretarial mandates.
Legal & Regulatory Mandates
Compliance with statutory AML/KYC disclosures, economic substance filings, and beneficial ownership registers.
Legitimate Interests
Fraud prevention, information security monitoring, and commercial service quality improvements.
Explicit Consent
Subscribing to international tax bulletins, legislative updates, and marketing communications.
4. Data Sharing & Third-Party Transmissions
We do not sell, rent, or trade your personal data. Disclosures are made solely to authorized parties necessary to complete your engagement:
- Government Registries: Registrar of Companies (UK Companies House), UAE Free Zone Authorities (DMCC, DIFC, IFZA, DED), Delaware Division of Corporations, and local company registries worldwide.
- Partner Banks & EMIs: Commercial banks and payment institutions where you request corporate account introductions.
- Licensed Registered Agents & Notaries: In jurisdictions where statutory local representation or apostille certification is legally mandated.
5. Data Security & Cross-Border Transfers
All documents are encrypted in transit using TLS 1.3 and at rest utilizing AES-256 standard encryption. Cross-border transfers between our London and Dubai operations or with international corporate registries adhere to Standard Contractual Clauses (SCCs) and UK International Data Transfer Agreements (IDTAs).
6. Your Rights
Under applicable data protection laws, you possess the right to:
- Request access to copies of your personal data held by us.
- Request rectification of inaccurate or outdated information.
- Request erasure of data (subject to statutory anti-money laundering 5–7 year document retention rules).
- Object to or restrict certain automated processing activities.
- Lodge a complaint with the UK Information Commissioner's Office (ICO) or UAE UAE Data Office.
Contact our Data Protection Officer
For any questions regarding data rights, compliance records, or SAR requests: