Privacy Policy

  1. Policy Statement

PICPA Dubai (“we”, “our”, or “Platform”) is committed to protecting your personal data and ensuring compliance with applicable data protection laws and global best practices.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you access or use the Platform.

By using the Platform, you agree to the terms of this Privacy Policy.

  1. Scope and Applicability

This Policy applies to:

  • All users (Subscribers, Registrants, Partners) 
  • Website visitors and platform users 
  • Individuals whose personal data is processed by PICPA Dubai. 
  1. Personal Data We Collect

PICPA Dubai collects the following categories of personal data:

3.1 Personal Identification Data

  • Full name 
  • Email address 
  • Phone number
  • Address
  • Job Title
  • Job Industry

3.2 Financial and Investment Data

  • Bank or payment-related information (if applicable) 

3.3 Technical and Usage Data

  • IP address 
  • Device information 
  • Browser type 
  • Platform activity and usage behavior 

3.4 Cookies and Tracking Data

  • Session cookies 
  • Analytics cookies 
  • Preference cookies 
  1. Legal Basis for Processing

PICPA Dubai processes personal data based on:

  • Consent – When you explicitly agree 
  • Legal Obligation – Compliance with AML/KYC and regulatory requirements 
  • Legitimate Interest – Platform security, fraud prevention, and service improvement 
  • Contractual Necessity – To provide services requested by users 
  1. Purpose of Data Processing

We use personal data for the following purposes:

5.1 Identity Verification and Compliance

  • Conduct KYC/AML checks 
  • Prevent fraud, money laundering, and illegal activities 

5.2 Platform Functionality

  • Facilitate investment matching between founders and investors 
  • Enable communication and transactions 

5.3 Service Improvement

  • Analyze usage patterns 
  • Enhance user experience and platform performance 

5.4 Legal and Regulatory Compliance

  • Comply with obligations under UAE laws and regulations 
  • Respond to lawful requests from authorities 
  1. Data Sharing and Disclosure

PICPA Dubai may share personal data under the following circumstances:

6.1 Regulatory Authorities

  • Law enforcement agencies 
  • Regulatory bodies such as the National Privacy Commission 

6.2 Service Providers

  • Identity verification providers 
  • Cloud storage providers 
  • Payment processors 

All third parties are contractually bound to protect your data.

6.3 Other Platform Users (Limited and Consent-Based)

  • Deal-related disclosures (e.g., founder profiles) 
  • Investment-related interactions 

6.4 Business Transfers

  • In case of merger, acquisition, or restructuring 

Important Note

PICPA Dubai does NOT sell personal data to third parties.

  1. Cross-Border Data Transfers

Your data may be transferred and processed outside the UAE.

PICPA Dubai ensures:

  • Adequate data protection safeguards 
  • Contractual protections with foreign processors 
  • Compliance with international data transfer standards 
  1. Data Retention

PICPA Dubai retains personal data only as long as necessary:

  • Minimum of 10 years for AML/KYC compliance 
  • Longer if required by law or for legitimate business purposes 

After retention periods, data is securely deleted or anonymized.

  1. Data Security Measures

PICPA Dubai implements industry-standard security controls, including:

  • Encryption (data at rest and in transit) 
  • Secure servers and cloud infrastructure 
  • Role-based access controls 
  • Continuous monitoring and vulnerability assessments 
  1. User Rights

Under the Data Protection and Privacy (PDPL – Federal Decree Law No. 45 of 2021), users have the right to:

  • Access their personal data 
  • Correct inaccurate or outdated data 
  • Object to processing (where applicable) 
  • Withdraw consent 
  • Request deletion or blocking (subject to legal obligations) 
  • Data portability (where applicable) 

Requests may be submitted via the Contact section below.

  1. Cookies Policy

PICPA Dubai uses cookies to:

  • Enhance user experience 
  • Analyze platform performance 
  • Store user preferences 

Users may control or disable cookies through browser settings, although some features may be affected.

  1. Platform Non-Disclosure Agreement (NDA)

By using PICPA Dubai, users agree to:

  • Maintain confidentiality of sensitive business and investment information 
  • Not disclose or misuse confidential data obtained through the Platform 
  • Use information solely for legitimate investment evaluation purposes 

This obligation survives termination of account access.

  1. Data Use Consent

By accessing and using PICPA Dubai, you provide consent to:

  • Collection and processing of personal and financial data 
  • Sharing of relevant deal-related data with authorized users 
  • Use of anonymized or aggregated data for analytics and platform improvement 

Users may withdraw consent, subject to:

  • Legal and regulatory limitations 
  • Platform functionality constraints 
  1. Automated Decision-Making and Profiling

PICPA Dubai may use automated systems for:

  • Risk scoring 
  • Fraud detection 
  • Personalization of user experience 

These systems do not replace human oversight in critical decisions.

  1. Third-Party Links and Services

The Platform may contain links to third-party websites or services.

PICPA Dubai is not responsible for:

  • Their privacy practices 
  • Their data handling policies 

Users are encouraged to review third-party privacy policies.

 

  1. Children’s Privacy

PICPA Dubai does not knowingly collect data from individuals under the age of 18.

If such data is identified, it will be promptly deleted.

  1. Data Breach Notification

In the event of a data breach, PICPA Dubai shall:

  • Notify affected users and the UAE Data office (or relevant authorities) as required 
  • Take immediate steps to mitigate risks 
  • Conduct investigation and remediation 
  1. Governance and Accountability

PICPA Dubai shall maintain:

  • A designated Data Protection Officer (DPO) 
  • Internal data protection policies and procedures 
  • Regular privacy impact assessments 
  1. Updates to This Privacy Policy

PICPA Dubai reserves the right to update this Policy at any time.

Users will be notified of material changes where required.

Continued use of the Platform constitutes acceptance of updates.

  1. Contact Information

For privacy-related inquiries, requests, or complaints, please contact:

  • PICPA Dubai Data Protection Team 
  • Via the “Contact Us” section of the Platform