Privacy policy

1. Who we are

SHERYAN Documents Clearing Services (SHERYAN) is a documents clearing company in Dubai. We decide how the personal data described here is used, and we are responsible for it.

Our office: Office 305, Zalfa Building, 2nd St, Al Garhoud, Dubai, UAE. Email: aturkmani@sheryan.ae. Phone: +971 56 678 6226.

2. What we collect

• Your account: your full name, mobile number, email address and password, and your nationality if you add it. We never see your password; only a protected (hashed) form of it is stored. When you sign in, our sign-in provider records the time, your internet (IP) address and your browser, for security.
• The self-assessment: while you answer, your answers stay in your browser tab. When you reach the result, your answers, your result and a short summary (for example your profession and the authority) are saved to your account.
• Documents: the files you upload, such as your passport, Emirates ID, photo, degree, licences, experience letters and Good Standing Certificate, and the documents SHERYAN prepares for you.
• Your services: what you have asked us to do, the status of each step, dates that matter to your case (such as an exam or an expiry date), and internal notes our team keeps about your case.
• Invoices and payments: your invoices, whether they are paid, the bank transfer reference, and any transfer receipts you upload. We do not receive or store card details.
• Messages: what you and our team write to each other in your portal, and any files attached to them.
• Call bookings: your name, mobile number, email address, the note you add and the time you choose. To limit how many calls can be booked in an hour, we keep a one-way code made from your internet address and the day, not the address itself.
• Tracking an application: when someone looks up a service with its reference and mobile number, we keep a one-way code made from the internet address, not the address itself, to stop repeated guessing.
• The contact form: your name, mobile number, email address, the topic you choose, your message, the page you sent it from and the time. We store them so our team can reply to you, and only our team sees them. To limit how many messages can be sent in an hour, we keep a one-way code made from your internet address and the day, not the address itself.
• Visits to the website: we count page views in our own database: the page, the language, the website you came from and the day, and how far the self-assessment gets (started, each question reached, the result level). This count uses no cookies, stores no internet address and keeps nothing that identifies you.

If your application needs online accounts (for example an email account, a DataFlow account or an authority's portal account), SHERYAN may hold the logins we create for you or that you give us. They are stored encrypted, used only for your applications, and deleted when the service ends or when you ask.

3. Why we use it

• To provide the service you asked for: to assess your case, to prepare, submit and follow up the applications you ask us to handle, and to show you their progress in your portal.
• To communicate with you about your case, by phone, by email or through messages in your portal. When you create an account, you agree to SHERYAN contacting you about your result.
• To meet our legal obligations, such as keeping financial records and answering lawful requests from the authorities.
• To keep the website and your account secure.

We do not sell your information, and we do not use it or share it for advertising.

4. Who can see it

• You. Your portal shows your own details, services, documents, invoices and messages, and the name, phone and email of your SHERYAN contact.
• SHERYAN's team. Team members sign in with a staff or administrator account and can see the records of applicants and clients so that they can work on cases. Administrators also approve applications and manage team accounts. Internal notes are seen by the team only.
• The authorities and verification bodies, only when you ask us to apply on your behalf. We give them the information and documents that the application needs.
• Our service providers, described in the next section, who store or deliver information on our behalf.
• Others only where the law requires it.

5. Service providers and storage

• A cloud database and file storage provider holds your account, your records and your files. Its servers are currently in the European Union, in Germany, so your information is stored outside the UAE.
• An email delivery provider will send the emails about your case once email is switched on. It receives your name, your email address and the content of each email.
• Our hosting provider runs the website.

The place where your information is stored may change. If it does, we will update this page.

6. Cookies

We use only cookies that are strictly necessary for signing in:

• Sign-in cookies, whose names start with “sb-”, keep you signed in to your portal. Scripts on the page cannot read them, and signing out ends them.
• A cookie named “sh-recovery” lasts 15 minutes while you choose a new password after a reset.

If you do not sign in, we set no cookies. We use no advertising, analytics or tracking cookies, and no third-party scripts.

The self-assessment keeps your answers in your browser's session storage (not a cookie) while you answer. It is cleared when you close the tab or sign out.

7. How long we keep it

• Applicants whose application we do not take on: the account and answers for 2 years after the last activity; uploaded documents for 1 year after the last activity.
• Clients: 5 years after the last service is completed, with their documents and messages, or longer where an authority requires it.
• Invoices and payment records: at least as long as UAE law requires for financial records.
• Call bookings from people who do not become clients: 2 years after the call.
• The record of status changes and notifications: 2 years. The activity log of who opened, downloaded, uploaded or changed what: 6 years. It holds references and short details, not your documents.

Visit counts are daily totals and contain no personal data. When we delete information, copies may remain in backups until they are replaced in the normal cycle.

8. How we protect it

• The website uses encrypted connections (HTTPS).
• Your documents are kept in private storage. They have no public web address: each download goes through our server, which first checks who is asking.
• Access depends on your role. You see only your own records, and the database checks this again on every request.
• Team members sign in with a password and a code from an authenticator app (two-step sign-in).
• An activity log records who opened, downloaded, uploaded or changed what, and when. Its entries cannot be edited or deleted through the site.

If you think someone has used your account, contact us straight away.

9. Your rights

You can ask us to:

• give you a copy of the information we hold about you;
• correct information that is wrong or incomplete;
• delete your information;
• stop using your information for a particular purpose (objection);
• withdraw a consent you have given, for example to be contacted about your result.

You can change your name, mobile number and nationality yourself in My details in your portal.

To make a request, email aturkmani@sheryan.ae. We may ask you to confirm who you are first.

Some records must be kept after a request to delete them, for example invoices for as long as the law requires, or the records of a service that is still open with an authority. Withdrawing consent does not affect what we did before you withdrew it.

10. Changes to this policy

We may update this policy when the website, our services or the law change. The date at the top of this page shows the last update.

11. How to contact us

Email aturkmani@sheryan.ae or call +971 56 678 6226. Our office: Office 305, Zalfa Building, 2nd St, Al Garhoud, Dubai, UAE.