Privacy & Cookie Policy

This Privacy Notice is provided by Structada of Level 3&5, One Central, The Offices 3, Dubai World Trade Centre, Sheikh Zayed Road, PO Box 9573, Dubai, United Arab Emirates. Structada ("Structada", "we", or "us") is the owner of this platform (the "Platform"). References to "you" or "your" refer to individuals whose personal information is processed by us, including individual investors, and client employees, officers or agents (together "Representatives") with direct or indirect relationships (such as those who invest through an intermediary); and beneficial owners of an organisation or entity in connection with:

the provision of services to potential and actual clients;
transactions to which we are party (including those which we effect on behalf of clients); or
services provided to us by a third-party vendor.

We want you to be familiar with how we collect, use and disclose personal information when you visit structada.com, use our Platform or enter into a contractual agreement with us for one of our services. This Notice is intended to comply with the relevant transparency requirements under the applicable privacy or data protection laws, and describes our processing activities in connection with your relationship with us. It applies to any personal information we may collect from you through our websites or applications, accessed using your device (e.g. mobile, computer) or various other offline means, such as when you attend our events, or when you otherwise interact with us as described below.

If you have any questions or would like to make any requests about your personal information, such as opting out of marketing, please email compliance@structada.com.

When we collect or process personal information about you, it is important that you read this Notice in conjunction with any other notice provided to you, so that you are fully aware of how and why we are using your data. This Notice supplements other notices and is not intended to override them. It should also be read in conjunction with our Terms of Use, and with any terms and conditions as may be applicable to you, and will form part of these.

This website may include links to third-party websites, SDKs, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. When you leave our website, we encourage you to read the notice of every website you visit. We do not control these third-party websites and are not responsible for their privacy notices.

Contacting Us

Website: structada.com
Email: compliance@structada.com (for privacy related queries)

1. How we use personal information

Information that you provide to us

Categories of personal information we collect	Purposes of use ("Processing Purposes" described in more detail below)	Source of Information	Legal Basis
Structada Clients: Identification data User profile data Contact data Electronic monitoring data Financial data Professional information data Services data AML data	To consider opening an account, or entering into a relationship at your request, including performing anti-money laundering, anti-terrorism, sanction screening, fraud and other due diligence checks.	You, where you are defined as a Client and have signed up for our services on the Platform.	Performance of contract. Legal or regulatory obligation. Legitimate interests: ensuring we do not accept the proceeds of criminal activities or assist in fraudulent or any unlawful activities, such as terrorism.
User profile and contact data Marketing and communications data Electronic monitoring data Financial data Professional information data Technical data Services data	To deliver the services you have requested, including liaising with third parties (e.g. administrators, paying agents, clearing systems and placement agents for the purposes of arranging and executing an issuance) and to provide access to our technology solutions services.	You, where you are defined as a Client and have signed up for our services on the Platform.	Performance of contract. Legal or regulatory obligation. Legitimate interests: ensuring that you are provided with the best client services and visitor services we can offer, and securing prompt payment of any fees, costs and debts in respect of our services.
Financial data Professional information data Services data Profile data Identification data Technical data Marketing and communications data	To manage payments, fees and charges and to collect and recover money owed to us. To manage our relationship with you, which will include notifying you about changes to our terms of business or this privacy notice. To interact with governmental or regulatory bodies or other competent national authorities. To detect or prevent fraud and/or other criminal activity and to protect our employees and assets. To manage and protect our business, including improving data security, troubleshooting data and systems, system maintenance and testing, data hosting, managing our offices and other facilities.	You, where you are defined as a Client and have signed up for our services on the Platform.	Performance of a contract. Legitimate interests: ensuring we can manage payments, fees and charges and collect and recover money owed to us; ensuring we can notify you about changes to our terms of business or this notice; protecting Structada and client assets, detecting and protecting against breaches of our policies and applicable laws; protecting our employees; ensuring the efficient and secure running of our business, including through office and facilities administration, maintaining information technology services, network and data security and fraud prevention.
Profile data Technical data Marketing and communications data Professional information data	To invite you to take part in market insight or other events, or client seminars or similar, and to manage your participation in them; to send you marketing communications and service updates (including by paper and electronic channels and personalisation in authenticated instances); and to better understand how our websites and platforms are used and to improve user experience.	You, where you are defined as a Client and have signed up for our services on the Platform.	Consent. Legitimate interests: ensuring our client records are up to date, promoting our client services, receiving feedback, improving our services, identifying ways to expand our business; reviewing how clients use, and what they think of, our services.

Information that we collect for business-to-business relationships only

Categories of personal information we collect	Purposes of use ("Processing Purposes" described in more detail below)	Source of Information	Legal Basis
Vendor data: Identification data Contact data Electronic monitoring data Financial data Services data Professional information data	To build and manage business-to-business relationships, and to engage you or the organisation or entity you work for as a new supplier, including performing anti-money laundering, anti-terrorism, sanctions, fraud and other background checks. Where we provide you access to our systems, to manage and protect our business, including improving data security, troubleshooting data and systems, system maintenance and testing, and data hosting. To manage payments, fees and charges and to collect and recover money owed to us.	Service providers Third party vendors Advertising providers Analytics providers Marketers Partners Public records Databases	Performance of contract. Legal or regulatory obligation. Legitimate interests: ensuring we do not accept the proceeds of criminal activities or assist in fraudulent or any unlawful activities, such as terrorism.
Due diligence and AML information (as permitted by law)	Compliance and risk management activities for business-to-business relationships.	Your response to our due diligence questions. Third party vendor risk compliance screening and data validation tools and databases.	Performance of contract Legal obligation Legitimate interests
Geolocation. Please note: this information is considered "sensitive" under certain laws, and we process it in accordance with applicable legal requirements.	Provide you with our services Personalise your experience Send you relevant marketing and advertising Safety and security Market and advertise for third parties Build and manage business-to-business relationships	You or your company's responses to our due diligence questions. Third party risk, compliance screening and data validation tools and databases.	Legitimate interests

Categories of personal information we collect

Purposes of use ("Processing Purposes" described in more detail below)

Source of Information

Legal Basis

Vendor data:

Identification data
Contact data
Electronic monitoring data
Financial data
Services data
Professional information data

To build and manage business-to-business relationships, and to engage you or the organisation or entity you work for as a new supplier, including performing anti-money laundering, anti-terrorism, sanctions, fraud and other background checks.

Where we provide you access to our systems, to manage and protect our business, including improving data security, troubleshooting data and systems, system maintenance and testing, and data hosting.

To manage payments, fees and charges and to collect and recover money owed to us.

Service providers
Third party vendors
Advertising providers
Analytics providers
Marketers
Partners
Public records
Databases

Performance of contract.
Legal or regulatory obligation.
Legitimate interests: ensuring we do not accept the proceeds of criminal activities or assist in fraudulent or any unlawful activities, such as terrorism.

Due diligence and AML information (as permitted by law)

Compliance and risk management activities for business-to-business relationships.

Your response to our due diligence questions. Third party vendor risk compliance screening and data validation tools and databases.

Performance of contract
Legal obligation
Legitimate interests

Geolocation. Please note: this information is considered "sensitive" under certain laws, and we process it in accordance with applicable legal requirements.

Provide you with our services
Personalise your experience
Send you relevant marketing and advertising
Safety and security
Market and advertise for third parties
Build and manage business-to-business relationships

You or your company's responses to our due diligence questions. Third party risk, compliance screening and data validation tools and databases.

Legitimate interests

Information that we collect from third parties

Categories of personal information we collect	Purposes of use ("Processing Purposes" described in more detail below)	Source of Information	Legal Basis
Information from public and commercial sources	Build and manage business-to-business relationships	Advertising providers Analytics providers Marketers Partners Third party vendors Public records databases Content partners	Legitimate interests
Third party partners in connection with providing our services. For example: contact information such as authentication information, account legitimacy, search requests, payment provision, log events and device identifiers such as IP addresses, device IDs or other unique identifiers.	Provide our services Personalise your experience Provide a seamless experience across platforms and devices Obtain analytics to improve performance Safety and security	Your response to our due diligence questions. Third party vendor risk compliance screening and data validation tools and databases.	Performance of contract Legal obligation Legitimate interests
Due diligence information (where required and permitted by law)	To conduct due diligence checks on potential and existing customers, selling partners and suppliers, and background and suitability checks on individuals. Compliance and risk management activities for business-to-business relationships. Build and manage business-to-business relationships.	You or your company's responses to our due diligence questions. Third party risk, compliance screening and data validation tools and databases.	Legal obligation Performance of contract Legitimate interests

Sensitive Data

Unless we request it, we ask that you do not provide or disclose any sensitive personal information (e.g. social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership). We do not require this for the services.

We may disclose your personal information to third parties where necessary for the following reasons:

To third parties where necessary to manage and operate our business, including management of contracts and providing the functionality of our services.
To service providers, website hosting service providers, information technology and related infrastructure service providers, analytics providers and email delivery service providers.
For legal and compliance reasons, including responding to requests and legal demands from regulators or other authorities, pursuing legal rights and remedies and defending claims.
For fraud prevention and security, including ensuring the security and safety of our premises.
To comply with applicable law and regulations.
We have a legitimate interest in disclosing or transferring your personal information to a third party in the event of any reorganisation, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings). You will be notified of any such business transaction and of possible changes to the processing of your personal information in accordance with applicable law and the "Updates to This Notice" section below.

3. Cookies and analytics

This website uses cookies in the following categories:

Essential — required for the site to function. Always active.
Functional — remember preferences such as language and colour scheme.
Performance — Google Analytics 4, used to understand how the site is used. Not loaded until you consent.
Marketing — not currently used.

Analytics and advertising storage are set to denied by default. Nothing is loaded until you make a choice, and your choice is stored locally in your browser rather than on our servers. You can change it at any time using the Cookie Preferences link in the footer.

4. How long we keep your data

Generally, we will retain data for as long as you are an active user on the Platform. Where users have deactivated their accounts, we will retain data for 12 months before deleting it, unless required to retain it longer for regulatory or compliance reasons. We will retain your personal information for the period necessary to fulfil the purposes outlined in this Notice unless a longer retention period is required or permitted by law, for example for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. The criteria used to determine our retention periods are set out in our retention policy and will vary depending on such factors as (i) the length of time we have an ongoing relationship with you and provide goods or services to you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position.

Retention periods based on legal obligations

Where a legal obligation arises or retention is advisable in light of our legal position, in some circumstances we will retain certain personal information even after your account has been deleted and/or we no longer provide goods or services to you. Some examples are described below.
To cooperate with law enforcement or public, regulatory and government authorities: if we receive a preservation order or search warrant related to your account, we will preserve personal information subject to such order or warrant after you delete your account.
To comply with legal provisions on tax and accounting: we may retain your personal information, such as financial and relationship history, after you delete your account, as required by local tax law and to comply with bookkeeping requirements.
To pursue or defend a legal action: we may retain relevant personal information in the event of a legal claim or complaint, including regulatory investigations or legal proceedings, or if we reasonably believe there is a prospect of litigation, for the amount of time appropriate to local limitation periods after the dispute has been settled or decided by a court or tribunal from which there is no further right of appeal.

Anonymisation of data

In some circumstances we will anonymise your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you. By way of example, anonymisation techniques may include removing direct identifiers from a dataset, replacing point coordinates in geo-referenced data with non-disclosing features or variables, or other recognised techniques appropriate to the data in question.

5. How we keep your data secure

We seek to use reasonable organisational, technical and administrative measures to protect personal information within our organisation, such as encryption and multi-factor authentication. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately in accordance with the "Contacting Us" section above.

6. Third-party services

This Notice does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any website or service to which our products or services link. The inclusion of a link via any of our services does not imply endorsement of the linked site or service by us or by our affiliates.

7. Children

Our services are intended for users over the age of 18. We do not knowingly collect personal information from children for the purposes outlined in this Notice.

8. International transfers

We have our headquarters in the United Arab Emirates. We may transfer your information to service providers and other third parties located outside your country of residence. Where we do so, this is necessary to provide our services and for the purposes outlined in this Notice. Data privacy laws vary from country to country and may not be equivalent to, or as protective as, the laws in your home country. We take steps to ensure that reasonable safeguards are in place with the aim of ensuring an appropriate level of protection for your information, in accordance with applicable law. These measures include data transfer agreements. By providing us with your information, you acknowledge any such transfer, storage or use.

9. Your rights

You may be able to exercise certain privacy rights. The rights available to you depend on our reason for processing your personal information and the requirements of applicable law (that is, your rights will vary depending on whether you are located in, for example, the United Arab Emirates, the wider Middle East, the European Union, the United Kingdom, or the United States). Specifically, you may have the following rights:

The right to confirmation on the existence of processing and to access the data: you may have the right to obtain from us confirmation as to whether personal information is processed and, where that is the case, to request access to the personal information. Depending on where you are located, you may also have the right to information about public and private entities with which the controller has disclosed personal information.
The right to correct incomplete, inaccurate or out-of-date data: you may have the right to request that we correct any personal information about you that is inaccurate. Depending on the purpose of the processing, you also have the right to request that we complete the personal information we hold about you where you believe it is incomplete, including by means of providing a supplementary statement.
The right to the portability of data: you may have the right to request that we transfer the personal information we have collected about you to another organisation, or directly to you, in a structured, commonly used and machine-readable format, under certain conditions.
The right to request anonymisation, blocking or deletion of personal information: you have the right to request the deletion of the personal information we have collected from you, subject to certain conditions and limitations under the law.
The right to revoke consent: where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time with future effect. Depending on where you are located, you may also have the right to request deletion of personal information that was processed based on your consent, or the right to know the consequences of revoking your consent. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
The right to object to processing: you may have the right to object to our processing of your personal information, under certain conditions, and we can be required to no longer process your personal information. Such a right to object may especially apply if we collect and process your personal information through automated decision making, such as profiling, to better understand your interests in our products and services or for direct marketing. If you have a right to object and you exercise this right, your personal information will no longer be processed by us for such purposes. Such a right to object may, in particular, not exist if the processing of your personal information is necessary to take steps prior to entering into a contract or to perform a contract already concluded.
The right to opt out of the sale or sharing of personal information: we do not sell your personal information in exchange for monetary consideration. In the event that we disclose your personal information to third parties for their marketing purposes, you may have the right to opt out of that disclosure. You may also have the right to request further information about the disclosure of your personal information for those third parties' marketing purposes, such as the contact information of those parties, once per calendar year.
The right to limit the use and disclosure of sensitive personal information: we will only use sensitive or special personal information as needed for the purposes for which it was collected or with your consent. We do not currently process sensitive personal information for purposes that may be limited under applicable law. If this changes, we will notify you, and you may have the right to restrict such additional uses.
The right to non-discrimination for exercising a privacy right: we will not discriminate against you for exercising any of these rights.

Exercising your rights

To exercise any of the rights set out above, please contact us at compliance@structada.com. Please note that you will need to verify your identity before we can fulfil your request. Your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected personal information, or an authorised representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate and respond to it. We will only use personal information provided in a verifiable request to verify the requestor's identity or authority to make the request. We will respond to your verifiable request within any prescribed timelines. In some regions there may be limitations on how often a request relating to personal information may be submitted.

Marketing and your rights

In certain jurisdictions you will need to expressly consent to receive marketing emails. If you are an authenticated user on our websites and Platform, we may provide you with a personalised experience based on your user behaviour. In all jurisdictions, you can choose not to receive such communications at any time by clicking the marketing opt-out link in any electronic marketing materials we send you, by contacting us using the details in the "Contacting Us" section of this Notice, or, in relation to certain third-party advertisements, by exercising your rights related to cookies as explained in the "Cookies and analytics" section above.

Third-party marketing and sale of personal information

We do not share or sell your personal information to third parties for the third party to use for their own marketing or other purposes.

10. Updates to this notice

The date at the top of this Notice indicates when it was last revised. Any changes will become effective when we post the revised Notice.