Privacy Policy
This policy explains what Mustanad Professional Services collects from you, why, who sees it, and what you can ask us to do about it.
Last updated: 2026-09-10
Who we are
Mustanad Professional Services is a licensed accounting and auditing firm in the Kingdom of Saudi Arabia, licence no. 423, with offices in Riyadh and Dammam. We are the controller of the personal data described below.
For anything concerning this policy: info@mustanad.sa — or 920002183.
What we collect
We collect what you give us, and nothing more. We do not buy data and we do not gather it from other sources.
- Contact details: your name, your company's name, your mobile number, and your email if you enter one.
- Your answers to the pricing questions: approximate revenue, transaction volume, financial year end, and the like — what determines the fee.
- The documents you upload to your engagement file, and the financial and regulatory data inside them.
- Your conversations with us: WhatsApp messages and messages in the website's chat.
- Limited operational data needed to run and protect the site, such as the time and page of a request.
Why we collect it
- To prepare a quote and answer your enquiry.
- To carry out the professional engagement you contract us for.
- To meet our regulatory obligations — first among them customer due diligence under the anti-money-laundering and counter-terrorist-financing regulations, to which this firm is subject. Those steps are not optional and cannot be waived.
- To verify that the mobile number you entered is really yours, by a code sent to it.
Who sees it
Inside the firm: the people who need it to do their work on your file, not every member of staff. Access to client files is logged.
Outside the firm, we do not sell your data and we do not share it for marketing, in any circumstance. It reaches third parties in two cases only:
- Service providers acting on our behalf and on our instructions: the host that runs the site and its database; and WhatsApp (Meta) to carry verification and messaging.
- Regulators and courts where the law requires it. In the case of a suspicious-transaction report under the anti-money-laundering regulations, the law forbids us from telling you that a report was made.
Security
- Data travels between your browser and the site encrypted.
- Access to client files is limited to those who need it, and each access is logged.
- Proposal and file links are secret, time-limited, and revoked when a new one is issued.
- We will never ask you for a banking password or a card number — not on the site, not on WhatsApp, not on the telephone. Anyone who does so in our name is not us.
Your rights
You may ask to see the personal data we hold about you, to correct it, to have it deleted, or to receive a copy of it. Write to info@mustanad.sa and we will respond.
The limit is what the law imposes: we cannot delete what the law requires us to keep. The data deletion page sets that out in detail.
Changes to this policy
If we change it we change the date at the top of this page. If a change is material and affects existing clients, we tell them.