Privacy Policy

Audit Services Qatar respects the confidentiality of personal and business information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit auditservicesqatar.com, contact our team, submit documents, request a consultation, or engage with our audit, assurance, tax, compliance, accounting, or advisory services.

Our handling of personal data is intended to reflect the requirements of applicable laws in the State of Qatar, including Law No. 13 of 2016 concerning Personal Data Privacy Protection.

1. Information we may collect

The information we collect depends on how you interact with us and the nature of the professional service involved.

Information you provide directly

We may collect:

Full name and contact details
Job title and company name
Business address and commercial information
Identification and authorised representative details where required
Information submitted through enquiry or appointment forms
Business ownership or beneficial ownership information where required
Financial statements, ledgers, schedules, invoices, contracts, and supporting records
Tax and regulatory information
Bank or transaction information where relevant to an engagement
Information required for client acceptance, compliance, or AML/CFT procedures
Correspondence and other information you voluntarily provide to us

Where we are engaged to perform an audit or other professional assignment, we may receive information concerning directors, shareholders, employees, customers, suppliers, or other parties appearing within a client’s records.

Information collected through our website

When you use our website, certain technical information may be collected automatically, including:

IP address
Browser and device information
Operating system
Pages viewed
Approximate access time and session information
Referring pages
Cookie or similar technology information

We use this information primarily to maintain website functionality, security, and performance and to understand how visitors interact with our website.

2. How we use personal data

We may process information for legitimate and lawful purposes connected with our professional activities, including to:

Respond to enquiries and consultation requests
Assess whether we can accept a professional engagement
Verify client or authorised representative information
Deliver audit, assurance, accounting, tax, compliance, and advisory services
Request and review documents required for an engagement
Communicate with clients during an assignment
Prepare professional reports, findings, or other agreed deliverables
Perform quality-control and engagement-management procedures
Meet applicable legal and regulatory requirements
Conduct appropriate AML/CFT or client due-diligence procedures where required
Protect our systems, staff, clients, and business against misuse or unlawful activity
Maintain professional and regulatory records
Manage invoices, payments, contracts, and business administration
Improve the functionality and security of our website
Send business or service communications where permitted

We do not sell personal data.

3. Basis for processing

Under Qatar’s personal-data framework, personal data should be processed lawfully, transparently, and for legitimate purposes. Consent may be required unless the processing is necessary for a legitimate purpose recognised under applicable law.

Depending on the circumstances, we may process information because:

You have provided consent
Processing is necessary to respond to your request or perform an agreed professional engagement
Processing is required to meet a legal or regulatory obligation
Processing is required for a legitimate professional or business purpose permitted by applicable law
Processing is necessary to protect our legal rights or respond to authorised regulatory or judicial requests

Where processing relies on consent, you may withdraw that consent subject to applicable legal and professional obligations.

4. Information obtained during audit and professional engagements

Professional audit and assurance work may require access to significant financial and corporate information.

Depending on the agreed scope, this may include accounting records, payroll records, customer or supplier records, contracts, transaction histories, asset registers, governance documentation, tax information, and internal business records.

We use engagement information only for authorised professional purposes, applicable quality-control requirements, legal and regulatory compliance, or other purposes permitted by law and the relevant engagement terms.

Access to such information is restricted according to the role and requirements of the engagement.

5. Client confidentiality

Confidentiality is fundamental to professional audit and advisory work.

We seek to protect information received from clients from unauthorised disclosure. Information may nevertheless be disclosed where:

The client has authorised disclosure
Disclosure is necessary to perform the agreed engagement
A professional service provider requires access for an authorised purpose
Applicable law or regulation requires disclosure
A competent court, regulator, or government authority lawfully requires information
Disclosure is necessary to establish, exercise, or defend legal rights

Any permitted disclosure will be limited, where practicable, to information relevant to the applicable purpose.

6. Regulators and professional obligations

The auditing profession in Qatar is regulated under Law No. 8 of 2020. Auditors may also have recordkeeping, regulatory cooperation, professional conduct, or AML/CFT responsibilities depending on the nature of an engagement.

Accordingly, certain information received during a client relationship may need to be retained or disclosed to an authorised authority where Qatar law requires it.

7. Service providers and third parties

We may use appropriately selected third-party providers to support our operations, such as:

Website and hosting providers
Email and communication platforms
IT and cybersecurity support providers
Document-management systems
Professional advisers
Specialist consultants engaged for an assignment
Analytics providers

Where third parties process information on our behalf, we seek to limit their access to the information reasonably required for the relevant purpose.

8. International transfers

Certain technology, hosting, professional-support, or business systems may involve processing or storing information outside Qatar.

Where personal data is transferred or processed across borders, we take reasonable steps to ensure that the processing remains consistent with applicable Qatar data-protection requirements.

Qatar’s Personal Data Privacy Protection Law regulates cross-border processing and requires personal-data protection obligations to continue to be observed.

9. Data security

We apply reasonable administrative, organisational, physical, and technical measures designed to protect personal data against:

Unauthorised access
Accidental loss
Improper disclosure
Unlawful use
Alteration or destruction

Qatar law requires controllers and processors to apply precautions appropriate to the nature and importance of the personal data being protected.

No electronic transmission or storage system can, however, be guaranteed to be completely secure.

10. Data retention

We do not intend to retain personal information for longer than necessary for the purpose for which it was collected, except where longer retention is required by:

Audit and professional standards
Applicable Qatar legislation
Tax or accounting requirements
AML/CFT requirements
Regulatory obligations
Contractual requirements
Dispute or legal-claim management

Audit and professional records may therefore be retained after an engagement has ended where applicable laws or professional obligations require continued retention.

11. Your personal-data rights

Subject to the conditions and exceptions contained in applicable Qatar law, individuals may have rights concerning their personal data, including the right to:

Know whether and why their personal data is being processed
Access and review their personal data
Request correction of inaccurate information
Object to certain unnecessary or unlawful processing
Withdraw previously provided consent
Request deletion where the purpose for processing has ended or there is no lawful reason to retain the data
Obtain a copy of personal data in circumstances provided by law

These rights arise under Articles 5 and 6 of Qatar’s Personal Data Privacy Protection Law.

Some requests may be limited where we are required to retain information for legal, regulatory, audit, professional, or dispute-resolution purposes.

12. Marketing communications

Where permitted, we may use contact information to send professional updates, service information, or business communications.

You may request that optional marketing communications stop at any time by contacting us.

Withdrawal from marketing communications does not affect operational messages necessary for an existing engagement.

13. Cookies

Our website may use essential, analytical, or functional cookies and similar technologies.

Cookies may be used to:

Maintain website functionality
Improve website performance
Understand general visitor behaviour
Remember user preferences
Support security

Your browser may allow you to block or delete cookies. Disabling certain cookies may affect website functionality.

14. Personal data of a special nature

We do not intentionally request sensitive or special-category information unless it is relevant and lawful for a specific professional purpose.

Qatar law provides additional requirements for specified categories of personal data of a special nature. Where such information is involved, we will handle it according to applicable legal requirements.

15. Children

Our website and professional services are primarily intended for businesses and adults acting in a professional capacity.

We do not intentionally use our website to collect children’s personal data.

16. Data incidents

We maintain processes intended to identify and respond to security incidents affecting personal data.

Where an incident triggers notification requirements under applicable Qatar law, appropriate notifications will be made to affected individuals and/or the competent authority as required.

17. Third-party websites

Our website may contain links to external websites.

Audit Services Qatar does not control the privacy practices, content, or security arrangements of independent third-party websites. We recommend reviewing their privacy notices before providing personal data.

18. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, technology, professional requirements, or applicable laws.

The latest version will be published on this page with an updated revision date.

19. Contact us

For questions about this Privacy Policy or requests concerning your personal information, please contact:

Audit Services Qatar
Address: 5th Floor, Gath Building, Salwa Road, Doha, Qatar
Email: info@auditservicesqatar.com