Privacy Policy

Karifin & Co. ("Karifin," "we," "us," or "our") provides finance, accounting, advisory, and compliance outsourcing services to businesses across the UAE, UK, and Bangladesh. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website (www.karifinco.com), contact us, or engage us as a client.

1. Who We Are

Karifin & Co. operates with a primary base in the UAE, a presence in the UK, and a back office in Bangladesh. For questions about this policy or how we handle your data, contact us at nasif@karifinco.com.

2. What Data We Collect

Website visitors: When you browse our site or submit a contact form, we may collect your name, email address, phone number, company name, job title, and any message or details you provide. We also collect limited technical data automatically (see our Cookie Policy) such as IP address, browser type, and pages visited.

Prospective and existing clients: When you engage us for services, we collect the business and personal information necessary to deliver them. This may include financial records, payroll and employee data, tax identification numbers, bank details, and other business documentation you or your organization provide.

Job applicants: If you apply for a role with us, we collect your CV, contact details, and any information you provide during the recruitment process.

We do not knowingly collect information from children, and our services are not directed at individuals under 18.

3. How We Use Your Data

We use personal data to:

• Respond to enquiries and provide requested information
• Deliver our accounting, payroll, advisory, and compliance services
• Meet our own legal and regulatory obligations (e.g., tax filings, AML/compliance checks)
• Improve our website and services
• Send updates about our services, where you've agreed to receive them
• Maintain the security of our systems and prevent fraud

4. Legal Basis for Processing

Where UK GDPR applies, we rely on one or more of the following: your consent, performance of a contract with you, compliance with a legal obligation, or our legitimate interests in running and improving our business. Where UAE or Bangladesh law applies, we process data on an equivalent basis of consent, contractual necessity, or legal obligation under the applicable local framework.

5. Sharing Your Data

We do not sell personal data. We may share it with:

• Cloud accounting and business platforms we use to deliver services (e.g., Xero, QuickBooks), which act as data processors on our behalf
• Regulatory and government authorities where required (e.g., NBR, RJSC, BIDA in Bangladesh; HMRC in the UK; relevant UAE authorities)
• Professional advisors such as auditors, bankers, or legal counsel, where necessary
• Service providers supporting our website and IT infrastructure

All third parties handling data on our behalf are required to protect it in line with this policy and applicable law.

6. International Data Transfers

Because we operate across the UAE, UK, and Bangladesh, personal data may be transferred between these jurisdictions and to service providers located elsewhere. Where data originating in the UK is transferred outside the UK, we rely on appropriate safeguards recognized under UK GDPR (such as adequacy decisions or standard contractual clauses). We take reasonable steps to ensure comparable protection wherever your data is processed.

7. Data Retention

We retain personal data only as long as necessary to provide our services, meet legal and regulatory retention requirements (which vary by jurisdiction and service type, particularly for financial and tax records), and resolve any disputes. Once no longer required, data is securely deleted or anonymized.

8. Your Rights

Depending on where you're located, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at nasif@karifinco.com. We will respond within the timeframe required by applicable law.

9. Data Security

We use appropriate technical and organizational measures, including encrypted cloud platforms, access controls, and confidentiality agreements with staff and partners to protect personal data against unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top will reflect the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

Email: nasif@karifinco.com

Address: Office 10, Holding 120, Century Arcade, Outer Circular Road, Moghbazar, Dhaka 1217