Privacy Policy

Effective Date:May 2, 2025. ABFA Investments Ltd (“ABFA”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of visitors to its website (the “Site”) in accordance with the UAE’s Federal Decree-Law No. 45 of 2021 on Personal Data Protection (“PDPL”) and related regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data.

Scope and Compliance

ABFA acts as the data controller for any personal data you provide. We process personal data only to the extent necessary for legitimate purposes in compliance with applicable law. We are governed by the UAE Federal PDPL, which establishes rules for the collection, processing, transfer and protection of personal data in the UAE. Under the PDPL, individuals in the UAE have rights including access to, rectification of, deletion of, restriction of, objection to, and portability of their personal data.

Information We Collect

ABFA does not use cookies or similar automatic tracking technologies on this Site. We do not engage in targeted advertising or analytics. The Site does not place persistent identifiers on your device. We collect personal data only if you voluntarily provide it to us, for example by contacting us or subscribing to updates. The types of personal data we may collect directly from you include:

Contact Information: Name, email address, phone number, postal address.

Communications: Any comments or messages you submit to us (e.g. via email or contact forms).

Other Data You Provide: Any other personal data you choose to send us (e.g., professional background, affiliations).

We do not knowingly collect any personal data from children under 16 years of age. If we learn that we have inadvertently received data from a child under 16, we will delete it.

Legal Basis for Processing

Under the PDPL, processing of personal data generally requires a lawful basis. In most cases, ABFA’s processing is based on your consent (when you provide data and agree to this Policy) or on legitimate interest (where processing is necessary for our legitimate business interests, such as responding to inquiries or complying with legal obligations). We will not process personal data for purposes beyond what you have consented to or what is required by law without your explicit approval.

How We Use Your Personal Data

We use the personal data you provide for the following purposes:

To Communicate: Responding to your inquiries or requests for information.

To Provide Services: Carrying out services you have requested (e.g., distributing newsletters if subscribed).

Internal Business Purposes: Improving our Site, understanding user interactions, or fulfilling our corporate governance requirements.

Legal Compliance: Complying with legal obligations, government requests, or otherwise enforcing our legal rights.

We will not use your personal data for purposes incompatible with the purposes for which it was originally collected, or for any illegal or unauthorized activities.

Data Sharing and Transfer

We do not sell, trade, or otherwise disclose your personal data to unaffiliated third parties, except as required or permitted by law. We may share data with service providers and partners who process data on our behalf for the purposes listed above, under strict confidentiality and security obligations.

Cross-Border Transfers:

The PDPL imposes restrictions on transferring personal data outside the UAE. If we transfer your data to a location outside the UAE, we will ensure that appropriate safeguards are in place as required by PDPL (e.g. contracts incorporating data protection obligations, or transfers to countries with adequate protections). We will only transfer data internationally when necessary and in compliance with applicable law.

Data Security and Retention

ABFA implements reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration or destruction. The PDPL requires controllers and processors to maintain the confidentiality and security of personal data. Accordingly, we maintain secure servers and enforce access controls to safeguard data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. When data is no longer needed, we will securely delete or anonymize it.

Your Rights Under PDPL

You have the following rights regarding your personal data processed by ABFA, subject to applicable legal limitations:

Right of Access: You may request confirmation of whether we hold your personal data and obtain a copy of that data, along with certain information about its processing.

Right to Rectification: You may request correction of any inaccurate or incomplete personal data about you.

Right to Erasure (Deletion): You may request deletion of your personal data when it is no longer necessary or unlawfully processed.

Right to Restrict Processing: You may require us to restrict or suspend processing of your data in certain situations (e.g. if you contest accuracy or object to processing).

Right to Object / Withdraw Consent: You may object to our processing of your personal data for certain purposes, or withdraw consent where processing is based on consent. Upon withdrawal, we will cease processing data to the extent required by law.

Right to Data Portability: Where processing is based on your consent or for a contract, you may request a copy of your personal data in a structured, machine-readable format for transmission to another controller.

Right to Lodge Complaints: You have the right to lodge a complaint with the UAE Data Office (the regulator) or any other relevant authority regarding our processing of your personal data.

To exercise any of these rights, please contact us using the information below. We will respond in accordance with PDPL requirements. 

Cookies and Tracking Technologies

No Cookies or Automatic Tracking: ABFA does not use cookies, web beacons, tracking pixels, or similar technologies on the Site to collect personal information. The Site’s content is static, and no personal data is automatically gathered when you browse the Site. We do not conduct profiling, behavioral targeting, or analytics on Site visitors. You may still control cookies via your browser, but for our Site this has no effect on personal data collection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Effective Date.” We encourage you to review this Policy each time you visit the Site. Your continued use of the Site after changes indicates your acceptance of the updated Policy.