This policy explains how Accruveo ("we", "us", "our") collects, uses and protects personal data through our website accruveo.com. We provide financial-advisory services — including IFRS advisory and implementation, internal audit and internal controls over financial reporting, enterprise risk, virtual CFO support, ESG/ISSB reporting, Islamic finance, business valuations, and policy and governance — to organisations across the United Kingdom, Ireland, the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Kuwait, Oman, Egypt and Pakistan.
We are committed to handling personal data lawfully and transparently. Because we operate across several countries, this policy is written to meet, at the same time, the requirements of the laws listed in the section "Laws that apply" below. Where a local law gives you a stronger right, that stronger right applies to you.
Accruveo is the data controller for personal data processed through this website. The person responsible for data-protection matters is Muhammad Bin Ismail. For any question or request relating to your personal data, contact us at info@accruveo.com.
| Category | Details | How we get it |
|---|---|---|
| Contact-form data | Your name, organisation, work email address, telephone number (if you provide it), and the contents of your message or enquiry. | You give it to us when you submit a form or email us. |
| Cookies & analytics | Limited information about how the site is used (for example pages viewed and approximate, anonymised region). We prefer privacy-friendly, cookieless measurement. Non-essential cookies are only set with your consent. | Collected via your browser, where you have consented. See our Cookie Policy. |
| Server logs | Technical data automatically recorded by our hosting and security providers, such as your IP address, browser type, the date and time of a request, and the page requested. Used for security, fraud prevention and reliability. | Recorded automatically when you visit the site. |
We do not ask you to provide special-category data (such as data about health, religion or beliefs) through this website, and we ask that you do not include it in form messages.
| Purpose | Lawful basis |
|---|---|
| To respond to your enquiry, provide information about our services, and correspond with you in a business-to-business context. | Our legitimate interests in responding to business enquiries and developing professional relationships (and, where you ask us to take steps before entering an engagement, the steps necessary to do so). |
| To run, secure and improve the website, and to keep records for security and reliability. | Our legitimate interests in operating a safe, reliable website. |
| To measure website usage through non-essential analytics and to set non-essential cookies. | Your consent, which you can withdraw at any time. |
| To comply with legal and regulatory obligations that apply to us. | Compliance with a legal obligation. |
Where we rely on legitimate interests, we have considered your rights and freedoms and limited our processing accordingly. You can object to processing based on legitimate interests — see "Your rights". Where a jurisdiction requires consent for direct electronic marketing or for any processing, we will obtain it before that processing begins, and we do not send unsolicited marketing where local law prohibits it.
We do not sell your personal data. We share it only with service providers who help us operate the website and our business, under contracts that require them to protect it. These include:
We may also disclose data where we are legally required to do so, or to establish, exercise or defend legal claims.
We serve clients in several countries, and our providers (including Microsoft 365 and Cloudflare) operate global infrastructure. This means your personal data may be processed in, or accessible from, countries outside the one in which you are located, including outside the United Kingdom and the European Economic Area.
Where personal data is transferred across borders, we rely on appropriate safeguards recognised by the relevant law — for example the UK International Data Transfer Agreement or Addendum, the European Commission's Standard Contractual Clauses, adequacy decisions where they exist, or the equivalent transfer mechanisms recognised under UAE, Saudi, Egyptian and Pakistani law. You can ask us for more information about these safeguards using the contact details above.
We use reasonable technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access controls, and reputable providers. No method of transmission or storage is completely secure, but we work to protect your data and to limit who can access it.
Depending on where you live and which law applies, you may have some or all of the following rights:
To exercise any right, email info@accruveo.com. We will respond within the time required by the law that applies to you (for example, one month under UK and EU/Ireland rules). We may need to verify your identity first. Exercising your rights is free in most cases.
We hope to resolve any concern directly — please contact us first at info@accruveo.com. You also have the right to complain to a data-protection authority:
This policy is designed to comply, as relevant to where you are, with:
This website is intended for business users and is not directed at children. We do not knowingly collect data from children through the site.
We may update this policy from time to time. The "last updated" date at the top shows when it last changed. Material changes will be reflected on this page.