Privacy Policy
This policy explains what personal data this website collects, why, who it is shared with, and the rights you hold under Qatar Law No. 13 of 2016 on Personal Data Privacy Protection. In short: the only data we collect is what you type into the contact form. There is no analytics, no advertising, and no tracking cookie.
Last updated: 5 August 2026
Who we are
MBN Auditing, Accounting, and Financial Consulting, trading as MBN Chartered Accountants, is the data controller responsible for the personal data described in this policy. We are a Qatari firm licensed by the Ministry of Commerce and Industry and registered with the General Tax Authority.
Our office is at World Wide Commercial Building, First Floor, Office 404, D Ring Road, Doha, Qatar. You can reach us at info@mbnaudit.com or +974 7708 8575.
What personal data we collect
We collect only what you choose to give us. This website has no analytics package, no advertising pixels, and no third-party tracking scripts.
| Data | When | Required |
|---|---|---|
| Full name | Contact form | Yes |
| Email address | Contact form | Yes |
| Message | Contact form | Yes |
| Phone number | Contact form | Optional |
| Company name | Contact form | Optional |
| Service of interest, subject | Contact form | Optional |
| A one-way hash of your IP address | Any form submission | Automatic |
We do not store your IP address. To stop automated abuse of the contact form we need to recognise repeat submissions from the same source. We do that by storing a salted one-way cryptographic hash of the address rather than the address itself. The hash cannot be reversed to recover your IP, and it is not linked to your enquiry record.
Why we process it, and on what basis
- To respond to your enquiry. We process the contact form details on the basis of your consent, given when you submit the form, and to take steps at your request before entering an engagement.
- To protect the website from abuse. The hashed IP is used solely to rate-limit submissions. This is necessary for the security and integrity of the service.
We do not use your details for marketing, and we do not sell, rent or trade personal data to anyone. If we ever wish to send you marketing, we will ask for your explicit consent first, as Qatar Law No. 13 of 2016 requires for direct electronic marketing.
Cookies
If you are an ordinary visitor, this website sets no cookies at all. There is no analytics cookie, no advertising cookie, and no consent banner because there is nothing to consent to.
One cookie exists, and only for staff signing in to the private administration area:
| Cookie | Purpose | Lifetime |
|---|---|---|
mbn_session | Keeps an authorised staff member signed in. Strictly necessary. Contains a random token only, never your details. | 8 hours |
Categories of recipient
We do not sell, rent or trade personal data. A small number of service providers process data on our behalf, under contract and on our instructions. We describe them by category rather than by name, because publishing our supplier and infrastructure details would itself weaken the security of the service.
| Category | What they process | Why |
|---|---|---|
| Infrastructure and hosting provider | Data stored by the website, as operator of the systems it runs on | Operating the website |
| Mapping provider | Your IP address and browser information, when the map on the contact page loads | Showing our office location |
| Email delivery provider | The contents of your enquiry, when it is delivered to us | Notifying us of your message |
| Professional advisers and authorities | Only where we are legally required to disclose | Legal and regulatory obligations |
The map on our contact page is embedded from a third-party mapping service. Loading that page means your browser contacts that provider directly, and it receives your IP address, exactly as it would if you had opened its own map site. If you would rather avoid that, the same address and directions are available by calling or emailing us.
On request, we will confirm the identity of any processor handling your data.
International transfers
The server hosting this website is operated by Contabo GmbH and is located outside Qatar. Enquiries you submit are therefore stored outside Qatar. Google, whose services are named above, also processes data outside Qatar. We take reasonable steps to ensure that any transfer preserves an adequate level of protection for your data, consistent with Qatar Law No. 13 of 2016.
How long we keep it
- Enquiries: kept while we are in correspondence with you and for as long as we may need them for our professional records. If your enquiry does not lead to an engagement, we delete it on request.
- Hashed IP records: retained only for the length of the rate-limiting window, then deleted.
- Staff sessions: expire after 8 hours and are deleted from the database.
Where we act as your auditor or accountant, separate statutory retention periods apply to engagement records under Qatari law. Those are governed by our engagement letter, not by this website policy.
How we protect it
- Stored data is isolated from the public internet and is not directly reachable from outside our systems.
- Staff credentials are stored only in an irreversible hashed form using a current, industry-recommended algorithm. We cannot read them, and neither could anyone who obtained a copy of our records.
- Sign-in is rate limited and locks out after repeated failures. Session cookies cannot be read by scripts running in the browser.
- All submitted content is validated on the server and sanitised before it is stored or displayed.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your personal data, we will notify you and the competent authority as required.
Your rights
Under Qatar Law No. 13 of 2016 you have the right to:
- Be told what personal data of yours we hold and how it is processed.
- Ask for a copy of that data.
- Have inaccurate or incomplete data corrected.
- Ask us to erase your data, subject to any professional retention obligations.
- Withdraw consent at any time, without affecting processing already carried out.
- Object to processing that causes you harm or distress.
We do not charge for handling these requests, and we will respond as promptly as we reasonably can.
Contact and complaints
To exercise any of the rights above, or to ask anything about this policy, email info@mbnaudit.com or write to us at World Wide Commercial Building, First Floor, Office 404, D Ring Road, Doha, Qatar.
If you are not satisfied with our response, you may complain to the competent data protection authority in Qatar, the department responsible for personal data protection within the Ministry of Communications and Information Technology.
We may update this policy as the website changes. The date at the top shows when it was last revised.