Privacy Policy

What we collect

We collect what you give us, and nothing more. We do not buy data and we do not gather it from other sources.

• Contact details: your name, your company's name, your mobile number, and your email if you enter one.
• Your answers to the pricing questions: approximate revenue, transaction volume, financial year end, and the like — what determines the fee.
• The documents you upload to your engagement file, and the financial and regulatory data inside them.
• Your conversations with us: WhatsApp messages and messages in the website's chat.
• Limited operational data needed to run and protect the site, such as the time and page of a request.

Why we collect it

• To prepare a quote and answer your enquiry.
• To carry out the professional engagement you contract us for.
• To meet our regulatory obligations — first among them customer due diligence under the anti-money-laundering and counter-terrorist-financing regulations, to which this firm is subject. Those steps are not optional and cannot be waived.
• To verify that the mobile number you entered is really yours, by a code sent to it.

Who sees it

Inside the firm: the people who need it to do their work on your file, not every member of staff. Access to client files is logged.

Outside the firm, we do not sell your data and we do not share it for marketing, in any circumstance. It reaches third parties in two cases only:

• Service providers acting on our behalf and on our instructions: the host that runs the site and its database; WhatsApp (Meta) to carry verification and messaging; and the AI model provider that answers the chat and reads uploaded documents to extract their data.
• Regulators and courts where the law requires it. In the case of a suspicious-transaction report under the anti-money-laundering regulations, the law forbids us from telling you that a report was made.

Artificial intelligence on this site

The site uses an AI model in two places: answering your questions in the chat, and reading the documents you upload to extract data from them and flag to our team what needs attention.

That model decides nothing on your file. The professional opinion, the audit opinion, and the decisions built on them are made by chartered accountants in this firm and approved by a responsible partner. What the model produces is raw material in a person's hands, not a judgement.

How long we keep it

We keep engagement files and due-diligence records for the period the anti-money-laundering regulations and the professional standards require — a period we are not free to shorten, even at your request.

What never became an engagement — an enquiry, or a quote that was not accepted — is deleted or de-identified once it is no longer needed.

Security

• Data travels between your browser and the site encrypted.
• Access to client files is limited to those who need it, and each access is logged.
• Proposal and file links are secret, time-limited, and revoked when a new one is issued.
• We will never ask you for a banking password or a card number — not on the site, not on WhatsApp, not on the telephone. Anyone who does so in our name is not us.

Your rights

You may ask to see the personal data we hold about you, to correct it, to have it deleted, or to receive a copy of it. Write to info@mustanad.sa and we will respond.

The limit is what the law imposes: we cannot delete what the law requires us to keep. The data deletion page sets that out in detail.

Changes to this policy

If we change it we change the date at the top of this page. If a change is material and affects existing clients, we tell them.