Privacy Policy

Bess Flower Project Management LLC · Last updated: June 2026 · Version 1.0

This policy explains how Bess Flower Project Management LLC collects, uses, and protects your personal data. We are committed to handling your information with care and in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).

1. Who we are

Bess Flower Project Management LLC is a limited liability company registered in Dubai, UAE (Trade Licence No. 1063174). We provide bookkeeping, financial reporting, accounting systems, and related business services to clients worldwide.

Data Controller: Bess Flower Project Management LLC
Contact: info@bf-pm.com
Website: bf-pm.com

2. Data we collect

Enquiry and contact data

When you submit an enquiry via our website, we collect: your name, email address, phone number (if provided), location, the service you are interested in, and any information you share about your business. This data is collected via our website contact form and stored by Netlify Inc. (USA) on our behalf as a form submission processor.

Client service data

To deliver bookkeeping and accounting services, we process financial data relating to your business. This may include: bank statements, invoices, receipts, payroll records, supplier and customer details, and other financial records provided to us in the course of the engagement. This data may contain personal information relating to your employees, customers, or suppliers.

Communications data

Records of emails, messages, and calls between you and Bess Flower in connection with our services.

Technical data

Our website does not use tracking cookies or analytics tools. We use browser localStorage solely to remember your currency display preference (USD, AED, EUR, or GBP). This data never leaves your device. Netlify, our hosting provider, may collect standard server logs including IP addresses for security purposes. For Netlify's data practices, see netlify.com/privacy.

3. Why we process your data and our legal basis

To respond to your enquiry — Legal basis: legitimate interests (responding to a business enquiry you initiated).
To provide bookkeeping and accounting services — Legal basis: performance of a contract to which you are a party.
To comply with legal obligations — Legal basis: compliance with a legal obligation (e.g. anti-money laundering requirements, tax record-keeping obligations).
To send service-related communications — Legal basis: performance of a contract or legitimate interests.
To improve our services — Legal basis: legitimate interests, provided this does not override your rights and freedoms.

We do not use your data for automated decision-making or profiling. We do not sell your data to third parties. We do not send unsolicited marketing without your consent.

4. Who we share your data with

We share your data only where necessary to deliver our services or meet legal obligations:

Accounting delivery partner — An FTA-registered accountancy firm based in the UAE who provides bookkeeping and compliance services on our behalf under a Data Processing Agreement and strict confidentiality obligations.
Netlify Inc. — Our website and form hosting provider, based in the USA. Netlify processes form submission data on our behalf. Data is transferred under standard contractual clauses.
Zoho Corporation — Our email provider (Zoho Mail), used to communicate with you. Zoho operates data centres in the UAE and globally.
Accounting software providers — We use cloud accounting software (such as Zoho Books or Xero) to manage client bookkeeping. These providers process data under their own privacy policies and data processing terms.
Legal and regulatory authorities — Where required by law, including tax authorities and anti-money laundering regulators.

We do not share your data with any other third parties without your explicit consent.

5. International data transfers

Bess Flower is based in the UAE and serves clients globally. Your data may be processed outside your home country. Where we transfer personal data from the European Economic Area (EEA) or the UK to countries without an adequacy decision, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

6. How long we keep your data

Enquiry data (no engagement): 12 months from the date of enquiry, then securely deleted.
Client service data: For the duration of the engagement plus 7 years, to meet legal accounting record-keeping requirements. Some data may be retained longer where required by applicable law.
Communications: 3 years from the end of the engagement, unless required longer for legal purposes.

7. Your rights

Depending on your location, you have the following rights regarding your personal data:

Right of access — Request a copy of the personal data we hold about you.
Right to rectification — Request correction of inaccurate or incomplete data.
Right to erasure — Request deletion of your data where we have no lawful reason to retain it. Note that legal record-keeping obligations may limit this right for client financial data.
Right to restriction — Request that we limit how we use your data in certain circumstances.
Right to data portability — Request a copy of your data in a structured, machine-readable format.
Right to object — Object to processing based on legitimate interests.
Right to lodge a complaint — If you are in the EEA, you have the right to lodge a complaint with your local supervisory authority. If you are in the UK, this is the Information Commissioner's Office (ico.org.uk). If you are in the UAE, this is the UAE Data Office.

To exercise any of these rights, please contact us at info@bf-pm.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. All client financial data is handled under strict confidentiality obligations by all staff and contractors. Access to financial data is limited to those who need it to deliver our services.

Despite these measures, no data transmission over the internet is completely secure. If you become aware of any security incident involving your data, please notify us immediately at info@bf-pm.com.

9. Cookies and local storage

Our website does not use cookies for tracking or analytics. We use browser localStorage to save your currency display preference. This is stored locally on your device only and is not transmitted to us or any third party. You can clear this at any time by clearing your browser's local storage.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after any change constitutes acceptance of the updated policy.

11. Contact us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Bess Flower Project Management LLC
Email: info@bf-pm.com
Website: bf-pm.com
Trade Licence No: 1063174, Dubai, UAE