Why this matters

Clients trust us with their most private papers: passports, bank statements, family documents. Protecting this data is law (PDPL — the UAE Personal Data Protection Law) and our reputation.

The rules — simple and absolute

Client documents live only in company systems — the client management system and official company storage. Never in your personal phone gallery, personal WhatsApp, personal email, personal Google Drive.
Sending data outside (to a partner, a bank, a government body) — only when it is needed for the client's task, and through approved channels. Not sure if a channel is approved? Ask first.
Talking about clients: never name clients in public places, social media, or to friends. Even «funny stories» are forbidden — Dubai is a small city.
Screens and papers: lock your computer when you step away. Do not leave client papers open on the desk. Shred, do not bin.
Phishing awareness: a strange email «from a client» asks to change a bank account for payment or to send documents urgently → STOP, verify by calling the known number. Criminals love pretending to be clients.
Leaving the company one day? All client data stays. Taking a client base with you is theft, legally and morally.

What you must remember

Client data = only in company systems. Never personal apps.
Approved channels only; ask when unsure.
No client talk outside work. Lock screens.
Verify strange payment requests by phone.

Client data — what never leaves the office