Privacy Policy
Last updated: April 2026
1. Introduction
Lumea Finance is an accounting firm based in Dubai, United Arab Emirates. We provide accounting, VAT, Corporate Tax and bookkeeping services to businesses operating in the UAE.
This Privacy Policy explains what personal data we collect, how we use it, who we share it with and what rights you have in relation to your data. It applies to all visitors and users of our website at https://www.lumeafinance.com and any of our sub-pages, including start.lumeafinance.com.
By using our website or submitting any form, you confirm that you have read and understood this policy.
2. What Information We Collect
We collect the following categories of information:
Personal data
- First name and last name
- Email address
- Phone number
Business data
When you use our estimate calculator, we collect:
- Type of business
- Monthly transaction volume
- How long your business has been active
- Whether you currently work with an accountant
Technical data
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on the website
- Referral source (e.g. which ad or platform brought you to the site)
Cookies and tracking data
We use cookies and tracking pixels to analyze website behavior and measure the effectiveness of our advertising. See Section 5 for full details.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To send you a personalized accounting estimate based on your inputs
- To schedule and confirm a call with you via our booking system
- To follow up with you as a potential client
- To run targeted advertising campaigns on Meta (Facebook and Instagram) and Google, including retargeting and lookalike audiences
- To analyze how visitors use our website so we can improve it
- To comply with our legal and regulatory obligations
We do not sell your personal data to third parties. We do not use your data for any purpose beyond what is listed above.
4. Legal Basis for Processing (GDPR)
For visitors from the European Economic Area, we process your personal data on the following legal grounds:
- Consent:for marketing communications and the placement of non-essential tracking cookies (Meta Pixel, Microsoft Clarity). You may withdraw consent at any time.
- Legitimate interest:for following up with individuals who have submitted a form or booked a call. Our legitimate interest is to respond to genuine business inquiries.
- Contractual necessity:for processing data required to deliver the service you have requested, such as sending you an accounting estimate.
- Legal obligation:where applicable, for complying with applicable laws and regulations.
6. Third-Party Services
We share data with the following third-party services, solely as necessary to operate our business:
- GoHighLevel (GHL):our CRM and call booking platform. Stores lead information and manages calendar scheduling.
- n8n:an automation platform we use to process estimate requests and route data between systems.
- Meta (Facebook and Instagram):for advertising purposes. Data shared includes hashed contact information for Custom Audiences.
- Google:for Google Ads conversion tracking and analytics.
- Microsoft Clarity:for anonymous session analytics and heatmaps.
- Vercel:our website hosting provider. Processes request data (including IP addresses) as part of serving the website.
Each of these third parties has its own privacy policy. We recommend reviewing their policies if you want to understand how they process data.
7. Data Retention
We retain personal data for the following periods:
- Lead data (name, email, phone, estimate inputs): up to 24 months after the last interaction, unless you request earlier deletion.
- Website analytics data:in accordance with the default retention periods of each analytics platform (typically 14 months for Google Analytics, indefinitely for Clarity session recordings unless manually deleted).
- Client data:in accordance with UAE legal requirements. Financial records are retained for a minimum of 5 years under UAE commercial law.
When retention periods expire, data is securely deleted or anonymized.
8. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:
- Right of access:request a copy of the personal data we hold about you.
- Right to rectification:ask us to correct inaccurate or incomplete data.
- Right to erasure:request that we delete your personal data, subject to legal exceptions.
- Right to restriction:ask us to limit how we use your data while a dispute is resolved.
- Right to data portability:receive your data in a structured, machine-readable format.
- Right to object:object to processing based on legitimate interest, including direct marketing.
- Right to withdraw consent:where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, contact us at support@lumeafinance.com. We will respond within 30 days.
9. Your Rights (UAE)
For individuals located in the United Arab Emirates, your data rights are governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Under the UAE PDPL, you have the right to:
- Know that your personal data is being processed and for what purpose
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data, subject to legal and regulatory exceptions
- Object to or restrict certain types of processing
- Withdraw consent where processing is based on consent
To submit a request under the UAE PDPL, contact us at support@lumeafinance.com.
10. Data Security
We take the security of your personal data seriously. The measures we have in place include:
- HTTPS encryption for all data transmitted to and from our website
- Access controls limiting who can view personal data within our organization
- Use of trusted third-party platforms with their own security certifications
- Regular review of data handling practices
No system is completely secure. If you believe your data has been compromised, contact us immediately at support@lumeafinance.com.
11. International Data Transfers
Some of the third-party services we use (including Meta, Google, Microsoft and Vercel) store and process data on servers located outside the UAE, including in the United States and the European Union.
Where data is transferred internationally, we rely on the standard practices and contractual safeguards provided by those platforms. We only use platforms that commit to processing data in a lawful and secure manner.
If you have questions about international data transfers, contact us at support@lumeafinance.com.
12. Children's Privacy
Our services are intended for business owners and professionals. We do not knowingly collect personal data from individuals under the age of 18.
If you believe a minor has submitted personal data through our website, please contact us at support@lumeafinance.com and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements.
The date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.
14. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Lumea Finance
IFZA A2 Building, Dubai Silicon Oasis
United Arab Emirates
