Privacy Policy
Last updated: 27 October 2026
This Privacy Policy explains how MB&A CPAs collects, uses, shares and protects business and personal information when you visit our website, contact us, use the Client Hub or engage us for professional services.
Contents
- Terminology used in this Privacy Policy
- How we collect and use information
- How we secure international transfers of information
- How long we retain information
- How we protect information
- Analytics, advertising, and tracking technologies we use
- Links to third-party websites and services
- Our commitment to children’s privacy
- Your privacy rights
- Changes to this Privacy Policy
- Contact us about your privacy
Terminology used in this Privacy Policy
For consistency and clarity, this Privacy Policy refers to Magdadaro Bayon-on and Associates CPAs Co. as “MB&A CPAs,” “MB&A,” “we,” “us,” or “our.” References to individuals and businesses who engage with, communicate with, or receive services from MB&A CPAs are referred to as “our clients,” “prospective clients,” “website visitors,” or “they,” “them,” and “their,” as applicable. References to personal information or data belonging to these individuals or businesses are referred to as “personal information” or “their personal information.” This terminology is used throughout this Privacy Policy to clearly distinguish MB&A CPAs’ responsibilities from the rights, information, and interests of the individuals and businesses we serve.
How we collect and use information
MB&A CPAs may use our clients’ personal information to respond to their inquiries, understand their business needs, arrange consultations, and provide the accounting, tax, audit, business advisory and other related professional services they request from us. We may also use their business and personal information to coordinate appointments, provide service updates, manage their engagements, and communicate with them about matters relevant to their relationship with MB&A CPAs.
We process our clients’ business and personal information only for legitimate and lawful purposes, including providing our services, improving our digital channels, meeting our legal and regulatory obligations, protecting our systems and services, and establishing or protecting our legal rights. Where required, we will collect our clients’ consent before processing their business and personal information. Our clients should avoid submitting sensitive personal information through our website forms unless specifically requested by us or necessary for the service being provided. Where sensitive or confidential information is required for a professional engagement, our professional team will handle it with appropriate care and safeguards in accordance with applicable laws and our professional obligations.
How we secure international transfers of information
As an international accounting and advisory firm, MB&A CPAs may work with technology providers, professional advisers, and service providers located outside the UAE (United Arab Emirates). As a result, our clients’ business and personal information may, where necessary, be processed or stored in our operations office (Cebu City, Philippines) or another country.
When we transfer such information outside the UAE, we take appropriate measures to ensure that the transfer and subsequent processing are carried out in accordance with applicable UAE data-protection requirements. This may include appropriate contractual safeguards, recognized protection mechanisms, consent where required, or other lawful measures.
Where applicable, we will provide appropriate information about international transfers and the safeguards used to protect our clients’ business and personal information.
How long we retain information
We retain our clients’ business and personal information only for as long as it is reasonably necessary for the purpose for which it was collected, or as required or permitted by law.
The length of time we retain information depends on its nature, how we use it, our relationship with the client, and our legal, regulatory, professional and record keeping obligations. However, certain accounting, tax and business records may need to be retained for longer periods where required by UAE law, including applicable corporate tax record-keeping requirements.
When the retained information is no longer required, we take reasonable steps to securely delete, anonymize or otherwise dispose of it, unless we are required or permitted by law to retain it for a longer period.
How we protect information
MB&A CPAs takes the security and confidentiality of our clients’ business and personal information very seriously. We maintain appropriate technical and organizational measures designed to protect their information from unauthorized access, misuse, loss, alteration, or disclosure.
Access to such information is limited to authorized MB&A CPAs professionals and service providers who have a legitimate need to use it for their responsibilities. We also maintain appropriate procedures for handling such information and managing security risks.
While we take reasonable steps to protect our clients’ information, no website, electronic transmission, or storage system can be guaranteed to be completely secure. We therefore encourage our clients to take appropriate care when sharing their information online.
Analytics, advertising, and tracking technologies we use
MB&A CPAs may use cookies and other similar technologies such as tracking pixels, Google tags, and web beacons to help our website function properly and remember preferences, understand how visitors use our website, improve performance, and measure the effectiveness of our marketing, advertising, and communications.
Where applicable, we may use services such as Google Analytics and Meta Analytics to understand website activity, measure our campaign performance, and improve our digital services. These technologies may collect information such as device and browser details, pages visited, interactions with our website, and advertisements viewed or engaged with. Where required by applicable law, we will provide appropriate choices or obtain consent before using non-essential cookies or similar technologies.
Our website visitors can manage or delete cookies through their browser settings. Disabling cookies may affect certain website features or functions.
Links to third-party websites and services
Our website may include links to third-party websites or landing pages, applications, social media or other services for your convenience. These third parties operate independently from the MB&A CPAs website and have their own privacy practices and policies.
Our commitment to children’s privacy
Our website and professional services are intended primarily for businesses, professionals, and adults. We do not knowingly request or intentionally collect personal data from children under the age of 18 through our general website forms.
If we become aware that we have collected personal information from a child without an appropriate lawful basis or authorization, we will take reasonable steps to address the matter or delete the information where appropriate and permitted by law.
Your privacy rights
Subject to applicable UAE law, our clients may have certain rights regarding how we process their business and personal information; they may request correction of inaccurate information, deletion where legally permitted, and restriction or cessation of certain processing activities.
Where we process our clients’ information based on their consent, they may withdraw that consent at any time. They may also object to the use of their business and personal information for direct purposes. Where applicable, they may also request a copy of their provided information in a structured and commonly used format or request its transfer to another organization, subject to the requirements and limitations of applicable law.
Some rights may be subject to legal or regulatory requirements, including situations where MB&A CPAs is required to retain information or process it for legal, regulatory, professional or legitimate business purposes. We may also need to verify their identity before responding to a request.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, data-processing practices or applicable legal and regulatory guidance.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy. Where appropriate, we may also provide additional notice of material changes through our website or other suitable communication channels.
We encourage you to review this Privacy Policy periodically so that you remain informed about how we collect, process, use, protect and manage our clients’ information.
Contact us about your privacy
To make a request or ask a question about this Privacy Policy, email info@mbacpaco.com, call +971 2 671 9443, or write to MB&A CPAs, Office No. 2, Floor 0, Building No. 8, Hamdan Bin Mohammed St, Al Zahiyah, Abu Dhabi, United Arab Emirates.