1. Introduction
This Privacy Policy describes how OFZA HOLDING Limited ("We", "Us", or "Our") collects, uses, and processes your personal information when a User (" You/ Your) use or visit our Website(www.ofzaholding.com)/ app ( " platform" ) or submits their personal data to Us.
We are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you use our services, as well as the rights granted to you under applicable data protection laws.
2. Information Collection
We may collect several types of information to provide and improve our services including:
- Account Data: Legal name, email address, date of birth, nationality, and government-issued identification required for identity verification.
- Mobile App Data (Optional): With your explicit consent, we may access device-specific information including IP address, operating system, location data, camera, microphone, and local storage.
- Marketing & Analytics: Data regarding your interactions with our platform, such as page views, click frequencies, and information gathered via cookies or similar tracking technologies.
- System Log Data: Technical logs including transaction history, deposit/withdrawal addresses, browser type, unique device identifiers, and system crash reports.
3. How We Use Your Information
Your data is processed for the following operational and legal purposes (including but not limited to):
- Account Management: To process registrations and maintain your account profile.
- Service Delivery: To verify account ownership, facilitate payments/withdrawals, and provide efficient customer support.
- Communication: To send administrative notifications and, where permitted, marketing materials regarding our products.
- Compliance: To adhere to global regulatory obligations, specifically Anti-Money Laundering (AML) and Know-Your-Customer (KYC) laws.
- Improvement: To analyze user trends and optimize our platform's functionality.
4. Legal Basis for Processing
In accordance with DIFC Law No. 5 of 2020, we process personal data based on:
- Contractual Performance: Necessary to fulfil our agreement with you.
- Legal Obligation: Required to comply with statutory and regulatory mandates.
- Legitimate Interests: To improve our services, provided these interests do not override your fundamental rights.
- Consent: For specific activities, such as direct marketing, which you may withdraw at any time.
5. Data Subject Rights
You possess the following rights regarding your personal information subject to applicable legal restrictions under the law:
- Access & Rectification: The right to request copies of your data and correct any inaccuracies.
- Erasure & Restriction: The right to request the deletion of your data or the limitation of its processing under certain conditions.
- Data Portability: The right to receive your data in a structured, machine-readable format.
- Objection: The right to object to processing for direct marketing or legitimate interest purposes.
- Withdrawal of Consent: The right to revoke consent for any processing previously authorized.
6. Data Retention and Security
6.1 Retention
We retain personal data only for as long as necessary to satisfy the purposes for which it was collected, including legal, tax, or accounting requirements. Retention periods are determined by the sensitivity of the data, potential risk of harm, and the nature of the processing.
6.2 Security Measures
We implement robust technical and organizational safeguards, including:
- Physical: Locked facilities, controlled access, and secure media destruction.
- Technological: Encryption, firewalls, anti-malware software, and continuous system monitoring.
- Organizational: Regular privacy training and awareness programs for all staff.
7. International Data Transfers
We may transfer data to third-party service providers or "third countries" outside of the DIFC. We ensure these transfers are protected by:
- Adequacy Rulings: Sending data to jurisdictions with equivalent privacy laws.
- Contractual Safeguards: Implementing standard data protection clauses to ensure your information remains secure regardless of location.
8. Cookies and Tracking
We use cookies to enhance your browsing experience, remember preferences (such as language), and gather usage statistics. You may manage or disable cookies through your browser settings, though some platform features may become unavailable. For more information read our Cookie Policy available on our website.
9. Children's Privacy
Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal information from children.
10. Changes and Contact Information
We may update this policy periodically. Material changes will be notified via our platform. If you have questions regarding this policy or wish to exercise your rights, please contact us at: info@ofzaholding.com.