Privacy Policy

1. Information We Collect

We collect the following categories of personal data:

• 1.1 Personal & Identity Information
  • Contact information: Name, email, phone number, residential address.
  • KYC/AML Data: Passport, Emirates ID, proof of address, nationality for account verification and compliance with regulatory requirements.
  • Financial information: Payment details, transaction history, bank account information and investment preferences for processing transactions.
• 1.2 Technical & Usage Data
  • Device Information: IP address, browser type, device identifiers, app usage metrics.
  • Cookies: Session, authentication, and analytics cookies (see Section 9).
• 1.3 Communications
  • Any correspondence you send us including but not limited to customer support inquiries, feedback, suggestions and marketing preferences.

2. Legal Basis for Processing

We process your data based on:

• Contractual Necessity: To fulfill Services (e.g., executing transactions).
• Legal Obligations: Compliance with UAE AML/KYC laws and Meydan Free Zone requirements.
• Consent: For marketing communications (opt-in required).
• Legitimate Interests: Fraud prevention, service improvement, and business operations.

3. How We Use Your Information

We do not sell or rent your personal information. However we are required to share it with

• Regulatory Authorities: To comply with applicable laws, regulations and court orders.
• Payment Processors & Financial Institutions: To facilitate transactions and ensure compliance with financial regulations.
• Service Providers: Third-party service providers and vendors who assist in website hosting, data analytics and customer support.
• Affiliates & Business Partners: In cases of mergers, acquisitions, or partnerships, your data may be transferred to relevant entities with appropriate safeguards.

4. Data Sharing & Third Parties

We share data only when necessary with:

• Regulatory Authorities: As required by UAE law.
• Service Providers: Payment processors (e.g., Stripe), KYC vendors, cloud storage providers.
• Affiliates & Partners: Under strict confidentiality agreements.
• Gold Custodians: For secure storage and logistics.
• No sale of personal data to third parties for unrelated commercial purposes.

5. Cross-Border Data Transfers

Your data may be transferred outside the UAE to jurisdictions with varying data protection standards. We ensure safeguards such as:

• Standard Contractual Clauses (SCCs) with third parties.
• Data Encryption during transit and storage.
• Due Diligence on vendors’ security practices.

6. Your Rights Under UAE Law

You have the following rights regarding your personal data:

• Access: You can review, update, or correct your personal information through your account settings.
• Delete: You may request the deletion of your account and personal data, subject to legal and regulatory obligations.
• Restrict Processing: Limit how we use your data.
• Marketing Preferences: You can opt out of receiving promotional communications by adjusting your preferences in the app or by contacting us.
• Withdraw Consent: you may revoke permissions at any times (e.g., cookies).

7. Data Retention

We implement strict security measures to protect your personal information, including encryption, secure servers, and access control mechanisms. However, while we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and secure your account credentials. We retain data only as long as necessary:

• KYC/AML Records: 5 years post-account closure (per UAE regulations).
• Transaction Data: 7 years for tax and audit purposes.
• Marketing Data: Until consent is withdrawn.
• Data is securely anonymized or deleted post-retention.

8. Cookies & Tracking Technologies

We use cookies to:

• Authenticate Users: Secure login sessions.
• Analyze Traffic: Google Analytics for usage trends.
• Personalize Content: Tailor user experience.
• Manage preferences via browser settings or our Cookie Consent Banner.

9. Security Measures

Our extensive security measures include

• Encryption: AES-256 for sensitive data.
• Access Controls: Role-based permissions for staff.
• Audits: Annual penetration testing and compliance reviews.

10. Children’s Privacy

• Our Services are not directed at minors under 18. We do not knowingly collect data from children.

11. Updates to This Policy

We may revise this Policy to reflect regulatory changes. Significant updates will be notified via:

• Email: Sent to registered users.
• Platform Notices: Posted on our website/app.