Privacy Notice

Yasa Capital (DIFC) Limited Privacy Notice

Version: 1 | Effective Date: 13 August 2024

1. General Overview

At Yasa Capital (DIFC) Limited, we respect your privacy and are committed to handling your personal data responsibly, in compliance with applicable laws, including DIFC Law No. 5 of 2020 (the “DIFC Data Law”). As the data controller, this Privacy Notice outlines:

  • The types of personal data we collect,
  • Why and how we use it,
  • How it is shared and safeguarded, and
  • Your rights regarding your data.

This notice applies to individuals we interact with, including:

  • Clients, suppliers, business partners, and advisers.
  • Office or website visitors; and
  • Other professional or business contacts.

For queries, please contact us at:


Email: info@yasacapital.com

Address: 605 South, Gate District 5, Dubai International Financial Centre, Dubai, PO Box 507116, UAE

2. What Personal Data We Collect

We may collect the following types of data:

2.1. Data You Provide

Examples include:

  • Name, job title, employer, and contact information.
  • Identity documents (e.g., nationality, photograph, date of birth, biometric data).
  • Financial details, transaction records, and due diligence reports.
  • Communication details (e.g., calls or emails).

2.2. Data From Third Parties

Sources may include databases, your employer, counterparties, and regulatory authorities.

2.3. Data We Generate

Examples include:

  • Records from services provided or interactions with us.
  • Information collected via cookies or similar technology on our website.

3. Purpose and Legal Basis for Processing

We process personal data for:

  • Legal compliance and due diligence.
  • Delivering services or managing business relationships.
  • Communicating about potential opportunities or organizing events.
  • Maintaining business records and conducting market research.
  • Safeguarding legal rights, preventing fraud, and ensuring compliance.

We rely on the following legal bases:

  • Consent: In specific cases where required (withdrawal is possible).
  • Contract Performance: To fulfil contractual obligations.
  • Legitimate Interests: For our business activities, balanced with individual rights.
  • Legal Obligations: To comply with applicable laws and regulations.

4. Sharing and Transferring Personal Data

4.1. Internal Sharing

Your data may be shared within Yasa Capital’s Associates for operational or administrative purposes.

4.2. Third Parties

We may share data with:

  • Service providers (e.g., agents, contractors) under confidentiality agreements.
  • Counterparties, regulators, and legal advisers, as needed.
  • Relevant parties during restructuring or asset transfers (subject to safeguards).
  • Authorities as required by law.

4.3. International Transfers

Data may be transferred outside DIFC to jurisdictions with:

  • Adequate data protection standards, or
  • Contracts providing equivalent safeguards (e.g., DIFC Standard Clauses).

For details on transfer protections, contact us.

5. Data Security and Retention

We implement strict security measures to protect personal data from unauthorized access or misuse. Access is restricted to personnel and third parties with a legitimate need.

Retention periods are determined by:

  • The purpose of data processing,
  • Legal and regulatory obligations, and
  • Risk and sensitivity of the data.

Where appropriate, data may be anonymized for extended use.

6. Your Rights

Under the DIFC Data Law, you have the right to:

  • Access: Request copies or details of your personal data.
  • Correction: Update inaccurate or incomplete information.
  • Erasure: Request deletion (subject to legal retention requirements).
  • Objection/Restriction: Limit or challenge certain types of processing.
  • Data Portability: Receive data in a machine-readable format or transfer it to another entity.
  • Complaint: File a complaint with the DIFC Commissioner of Data Protection.

To exercise these rights, contact us at info@yasacapital.com.

7. Website and Cookies

7.1. Usage Data

We collect information like IP addresses, browser types, and usage patterns to improve our services.

7.2. Cookies

We use cookies for:

  • Session management,
  • Preference tracking, and
  • Security purposes.

You can modify cookie settings in your browser, though this may affect functionality.

8. Contacting Us

For more information or to exercise your rights: