Sonsoto is operated by Hana Global Expansion FZCO, Trade Licence 57258, United Arab Emirates. Sonsoto helps clients coordinate UAE company formation, residency and Golden Visa workflows, property purchase support, tax residency certificates, will-registration intake, renewals, banking preparation, insurance coordination, compliance workflows, and document management.
This Privacy Policy explains how we collect, use, share, retain, and protect personal data when you use the Sonsoto website, platform, document vault, workflows, communications, and related services.
This Policy applies to clients, users, prospective clients, website visitors, account holders, company shareholders, directors, employees, dependents, family members, beneficial owners, authorized representatives, property counterparties, and other people whose information is provided to Sonsoto for a service.
If you provide personal data about another person, you confirm that you have the authority or lawful basis to do so and that you have made this Policy available to them where required.
The data we collect depends on the workflow you use. It may include:
We collect data directly from you when you create an account, complete a workflow, upload a document, contact us, pay for a service, or communicate with Sonsoto. We may also collect data from authorized representatives, partners, public registers, sanctions and compliance databases, government or free-zone portals, banks, insurers, property partners, professional advisors, payment providers, and technical service providers.
We use personal data to operate Sonsoto and deliver requested services. This includes creating and managing your account, maintaining your client profile, running workflows, checking document readiness, preparing service files, coordinating partners, responding to requests, processing payments, meeting legal and compliance obligations, protecting the platform, improving services, and maintaining records.
Where applicable, our legal bases may include your consent, performance of a contract, steps taken before entering into a contract, compliance with legal obligations, legitimate interests in operating and protecting Sonsoto, and the establishment, exercise, or defense of legal claims.
The Sonsoto vault is designed so you can upload documents once and reuse approved records across relevant workflows. For example, a passport, Emirates ID, trade licence, title deed, bank statement, or certificate may be checked once and then referenced for company formation, residency, renewal, banking preparation, property, or tax-residency workflows when appropriate.
We only reuse documents where there is a service need, operational need, legal basis, or client instruction. Some authorities, banks, insurers, partners, or workflows may still require updated documents, fresh signatures, originals, certified copies, or separate forms.
Sonsoto may use automated and AI-assisted tools to classify documents, extract fields, detect expiry dates, identify missing information, summarize status, support search, assist routing, and help draft operational communications. These tools support workflow coordination and do not make final authority, bank, insurance, legal, tax, or property decisions.
Where an automated result affects your file, Sonsoto may request your review, ask for correction, or route the matter for human review.
We share personal data only where needed to operate Sonsoto, provide a requested service, comply with law, protect the platform, or support legitimate business operations. Recipients may include government authorities, free zones, banks, insurers, property brokers, developers, trustees, notaries, courts, registered agents, professional advisors, compliance providers, payment processors, cloud providers, analytics providers, communication tools, and support vendors.
We do not sell personal data. We do not give partners unrestricted access to your vault. We share the information reasonably needed for the relevant service, partner review, legal obligation, or client instruction.
Sonsoto is based in the UAE, but some service providers, partners, or systems may process data in other countries. Where personal data is transferred internationally, we use appropriate safeguards where required, such as contractual controls, access restrictions, vendor due diligence, and transfer mechanisms required by applicable law.
We use technical and organizational measures designed to protect personal data, including encryption in transit and at rest where supported, access controls, role-based permissions, audit logging, monitoring, secure cloud infrastructure, and operational security practices. No system is completely risk-free, and you are responsible for protecting your login credentials and devices.
We keep personal data for as long as reasonably needed for the relevant service, account operation, legal and compliance obligations, audit history, dispute handling, fraud prevention, tax and accounting records, regulatory retention, or legitimate business purposes. Some records may need to be retained after a workflow is completed or your account is closed.
Where retention is no longer needed, we will delete, anonymize, or archive data in accordance with our retention practices and applicable law.
Depending on the law that applies, you may have rights to access, correct, update, delete, restrict, object to, or receive a copy of your personal data. You may also be able to withdraw consent where processing is based on consent. These rights may be limited where we must retain data for legal, regulatory, security, audit, contractual, compliance, or dispute reasons.
You can request changes through your account or by contacting us. We may need to verify your identity before acting on a request.
Sonsoto may use cookies, local storage, pixels, logs, and analytics tools to operate the website, keep you signed in, remember preferences, measure performance, understand usage, detect errors, and protect the platform. You can control cookies through your browser settings, but some features may not work correctly if cookies are disabled.
Sonsoto is not intended for children to use directly. We may process information about dependents or family members when required for a residency, family sponsorship, will-registration, insurance, or related workflow and when provided by an authorized adult.
We may update this Privacy Policy as Sonsoto evolves, new services are added, laws change, or our practices change. The updated version will be posted on this page with a new date. Material changes may also be notified through the platform or other reasonable channels.
Privacy questions and requests can be sent to privacy@sonsoto.com. Please include enough information for us to identify your account or request, but do not send unnecessary sensitive documents by email unless requested.
Off-hours — we reply first thing at 9:00 local. Vy is always on.
We use strictly necessary cookies to run the site. With your consent we'd also use optional cookies (e.g. support tools). You can accept, reject optional, or choose. Cookie policy.
