Privacy notice
Last updated 7 November 2026. Reviewed to an expert standard. A licensed UAE lawyer's review is planned. Version 2026-11-07.
Contents (11)
Who we are
This website, nordaccounting.ai, is operated by Nord Accounting and Consultancy Limited (“NORD”, “we”), licensed by Masdar City Free Zone, Abu Dhabi (licence MC 14624), Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates. We are the controller of the personal data described in this notice. You can reach us at info@nordaccounting.ai. We have not appointed a data protection officer; the law does not require one for a launch list of this kind.
What this notice covers
This notice covers the website and the launch list. It does not cover the NORD software itself, which opens on 1 January 2027 and has its own notice. From 1 January 2027, when you use the NORD software, you are the controller of the personal data you enter about your own clients and staff, and NORD acts as your processor under a separate data processing addendum published with the subscription terms. That processing is covered by the software’s own notice and the addendum, not by this notice.
What we collect, and why
We collect personal data for six separate purposes. Each is listed with the data it uses and the legal basis we rely on.
| Purpose | What we use | Legal basis |
|---|---|---|
| To reply to an enquiry you send us | your name, work email, phone, company, role and message | your request, taken before a contract |
| To keep you on the launch list and tell you when accounts open | your work email, the language you used, the page, plan and campaign tags you came with, the time you signed up and the time you confirmed your address, and, if you add them, your first name, company, answers about your business and how you found us | your consent, given when you sign up and confirmed by the link we email you; to withdraw it and leave the list, reply to any email or write to info@nordaccounting.ai; replying “stop” ends only the offers and news |
| To send marketing about NORD by email | the same | your separate consent, given by ticking the box; never assumed; withdraw it by replying “stop” to any email, and your place stays |
| To message you on WhatsApp about your sign-up and the launch, if you ask us to | the WhatsApp number you add after signing up | your consent, given by ticking its box; withdraw it by writing to info@nordaccounting.ai |
| To protect the website from abuse | your IP address, browser details and the result of the anti-abuse check (Cloudflare Turnstile) | needed to take your sign-up safely, at your request; the check runs only on the sign-up page |
| To understand how the website is used | the pages you visit, how long you stay and how far you scroll, the page you came from, campaign tags in the link, the buttons, links and forms you use (never what you type), page speed, your browser with its language and time zone, operating system, device type and screen size, and a code made from your IP address and browser that changes every day; no cookie and nothing stored on your device (PostHog) | no consent is asked: the measurement is built not to identify you. Your IP address is used only to make the daily code and is not kept, and we never combine this data with your email or the launch list |
We do not collect financial data, government identifiers or anything about children on this website.
The consent record
When you sign up to the launch list we store the time of your consent, the version of this notice you saw (shown at the bottom of this page) and whether you ticked the marketing box. We then email you a link to confirm your address; when you use it, we store the time you confirmed, and your place on the list counts from then. The link works for 7 days; after that you can sign up again for a new one. This record is how we show that consent was given, as the PDPL requires. When you leave the list it is deleted with the rest of your data, except the note of your withdrawal, which we keep only as long as needed to show it.
Who receives your data
We use a small number of providers to run the website. Each is a processor acting on our instructions under a written agreement, and each holds data only to do the job described.
| Provider | What it does | Where the data is processed |
|---|---|---|
| Cloudflare | serves the website, runs the sign-up form, checks for abuse (Turnstile), stores the launch list and sends our emails | the launch list is stored in the European Union; the website is served, and our emails are sent, from Cloudflare’s global network, which includes the UAE, the European Union and the United States |
| PostHog | measures how the website is used, without cookies | European Union |
We do not sell personal data and we do not share it with advertisers.
Transfers outside the UAE
Some of the providers above process data outside the United Arab Emirates, in the European Union and the United States, as listed. We transfer it there because those providers run the services the website depends on. We rely on the data-protection terms each provider is contractually bound by and, for the launch list, on your consent; where the UAE Data Office recognises a destination as providing an adequate level of protection, we rely on that.
How long we keep it
| Data | Kept for |
|---|---|
| an enquiry | until it is answered and for 12 months after |
| the launch list | until accounts open on 1 January 2027 and for 12 months after, unless you leave the list earlier |
| marketing consent | until you withdraw it, then the consent record only as long as needed to show the withdrawal |
| a sign-up you do not confirm | until 1 January 2027, then deleted |
| anti-abuse logs | 90 days |
| the IP address and browser details stored with a sign-up | as long as the sign-up |
| website measurement | 12 months, then deleted in PostHog’s routine clean-up |
Your rights
Under the PDPL you can ask us to show you the personal data we hold about you, correct it, delete it, restrict or object to its use, stop automated processing, or receive it in a usable, machine-readable format to move elsewhere. You can withdraw consent at any time; withdrawing it does not affect anything done before you withdrew. Write to info@nordaccounting.ai. We answer within 30 days. If you are not satisfied with our answer you can complain to the UAE Data Office, the federal regulator established under Federal Decree-Law 44 of 2021.
Security
The website is served over HTTPS only. The launch list is held in a database that only NORD can reach. We keep an internal record of what we process and a procedure for a personal-data breach. If a breach occurs that would prejudice the privacy, confidentiality or security of your data, we will notify the UAE Data Office and, where the law requires, tell you, as set out in the PDPL.
Cookies
The website’s own pages set no cookies and use no local storage for measurement. PostHog measures visits without cookies and without storing anything on your device. One embedded tool may set cookies of its own: the anti-abuse check on the Sign up page. See the cookie statement.
Changes to this notice
When this notice changes, the date and the version at the bottom of this page change with it, and the version is stored with every consent given from then on.
Questions about this notice: info@nordaccounting.ai · Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates
Last updated 7 November 2026. Reviewed to an expert standard. A licensed UAE lawyer's review is planned. Version 2026-11-07.