Dubai Financial Market

Dubai Financial Market and its affiliates (Collectively or individually, referred to us “Dubai Financial Market”, “DFM”, “We”, “our”, “us”) is committed to protecting your privacy, whether you are an employee, customer, share holder or any other third parties. This policy explains how we collect, share, transfer and use the personal information about you, and how you can exercise your privacy rights. This policy applies to interaction that we have with you via our websites, mobile application, services or providing us with your personal information in person, as applicable.

Third parties that link from or to our Services, or from whom we collect personal information may have their own privacy policies and practices. This Policy does not apply to sites or applications offered by other companies or individuals, including third party products and services. Please review any third-party policies to learn more about their practices.

Personal information is any information relating to a natural person that allows DFM to identify you directly or indirectly through the linking of data, and includes data such as your full name, identification number , passport number, physical addresses, mobile numbers, IBAN numbers, card numbers, e-mail addresses, transactional data, electronic communications data, payments data, identification details of equipment or terminal appliances, as point of sale, personal computer, smartphone, tablet, browser history (log files, cookies etc.) as well as any other information that may allow us to identify you, in accordance with the provisions of Federal Decree Law No. 45/2021 on the Protection of Personal Data (“applicable law”). Personal information may include special personal information such as your trade union membership, medical/health status, race, religion, or criminal behavior.

What information do we collect?

We collect and store certain types of information about you when we deal with you as part of our business as an operator of an exchange and clearing house.

Upon visiting DFM’s websites or accessing our Services, you may be asked to provide your name, surname, phone number, email address, date of birth, place of birth, nationalities, residence details, tax status and details, dependent and beneficially personal details, bank account numbers, card numbers and contact details. In some cases, we may also ask you to provide or upload documents (such as your passport, emirates ID, employment details) which will require authentication prior to upload. In addition, you may be asked to upload your facial image taken through the camera on your mobile device when you onboard for the services through a mobile application. We may obtain your technical related personal information through automated processing which may include IP address, device information, agent, operating system etc., This information is captured through cookies, and we will alert you to these cookies so that you may disable or refuse these cookies, however, some part of our website may become inaccessible or not function properly if you do so.

We process your information responsibly

We process your personal information to protect your and our legitimate interests and will only collect and process the absolute minimum set of information needed for the stated purpose. In general, DFM collects and processes your personal information including but not limited to the following purposes:

To create a record of you on our system and to provide you with relevant products and services based on your relationship with DFM.
Processing your personal information for historical, statistical or research purposes where the outcomes are aggregated and analyzed to provide you with better products and services.
Prevention of financial crime, including fraud detection and prevention, sanctions screening, adverse media screening, monitoring of anti-money laundering and any financing of terrorist activities.
Enforcement of our financial and business obligations.
Carrying out surveys relating to customer, employee or third-party sentiment to improve our offerings.
Detecting and preventing misuse or abuse of our websites or services.
To better understand our customers or visitors in terms of the content that we display on our website, and how to enhance, advertise and market our products and services.
Providing you with information, alerts or updates on our existing products and services or any other aspects of our services, including notifying you about changes to our services and for all other incidental and associated purposes relating to the provision of services.

Your personal information may be shared in limited, necessary circumstances

DFM is committed to providing you with a seamless service across all our products and services. In order to enhance our professional relationship with you, we may share your personal information with other DFM group entities ("affiliates") as well as third parties, to perform our services, under a legal obligation, regulatory requirement, contractual terms or where we consider it reasonably necessary to do so. In limited instances, permitted by the applicable law, your personal information may be shared outside the UAE to jurisdictions with similar data protection legislations as the applicable law, or under a contractual arrangement offering appropriate safeguards in accordance with the applicable law..

We may also need to share your personal information with external organizations such as credit agencies or other regulatory or industry bodies, to meet our due diligence, regulatory and legal obligations.

Your personal information may be shared with our business partners or counterparties, where we are involved in corporate transactions or to any party to whom we assign our rights under any of our agreements for those products and services.

While engaging third parties, we endeavor to choose reliable service providers who have data privacy policies equivalent to the standards adopted by us by virtue of being subject to similar data protection legislations that are equivalent to the applicable law or to appropriate contractual safeguards. We would only share your personal information in circumstances that are necessary and under the following conditions:

Your personal information is treated as strictly confidential and kept secure by adopting adequate security and organizational measures.
Use of your information would be in a manner consistent with the purposes for which it was originally collected.
Use of your information is compliant with the applicable law; and meet the disclosure requirements binding on us.

We hear your consent

We may process your personal data for the performance of the contract(s) or agreements concluded with you in compliance with the applicable law, and in furtherance to DFM legitimate interests to provide you with adequate and qualitative products and services and to prevent against any excessive risk.

We may also process your personal data based on your consent. Personal data requested by DFM is usually necessary for the provision of a service or product to you or for your use of the Website. If your personal data is not provided, we may be unable to meet our obligations to you or to provide you with the requested products and services. When providing your data is necessary for the provision of a service or product, DFM will inform you of that and the consequences of failing to provide it.

You have the right to withdraw your consent to the use of your personal data at any time through the methods communicated by DFM through its various communication channels from time to time. Your withdrawal of consent will come into effect within 30 days from the receipt of the withdrawal request but will not affect the lawfulness of any personal data processing that occurred prior to such withdrawal coming into effect or any subsequent processing related to DFM’s business operations or legal and regulatory obligations.

We keep your personal information secure

We implement appropriate physical, electronic, and procedural safeguards, security policies and procedures to keep your personal information secure. These controls include access controls, encryption and other forms of security aligned to global best practices. We take steps to protect your information from unauthorized access and against unlawful processing, misuse, accidental loss, modification, destruction, and damage.

Any employees and third parties who process personal information for us or on our behalf are contractually obligated to comply with and implement the same levels of protection and confidentiality standards as a minimum.

We respect your rights at DFM

In line with applicable legislation, you have the following legal rights in respect of your personal information:

Right to access your personal information thereby enabling you to obtain a copy of your personal information that we have on record and to check that we are lawfully processing it.
Right to correct your personal information, thereby enabling you to request that we correct any incomplete or inaccurate personal information that we hold about you.
Right to have your personal information deleted under certain circumstances. For example, where your personal information is no longer required to be retained by DFM in respect of our contractual obligations to you.
Right to object to or restrict the processing of your personal information under certain circumstances. For example, if you want us to establish the accuracy of the personal information that we hold on you. This includes the withdrawal of consent to processing in line with applicable regulations.
Right to receive your personal information in a structured, commonly used and machine-readable format.
Right to request manual intervention in case a fully automated decision is made about you that significantly impacts you and where you don’t agree with the outcome.
Right to opt out of or opt in to receiving direct marketing at any point during your customer journey with DFM.
Right to raise a complaint to DFM where you are concerned with how your personal information is processed and where this is not resolved to your liking, then to raise a complaint with the relevant regulator or supervisory authority. You can contact us on customer.service@dfm.ae.

We respond to requests we receive from individuals wishing to exercise their data protection rights or express any concern in accordance with applicable data protection laws, which typically require a response within 30 days. Please be aware that in order to accommodate some requests, we must verify your identity before we can respond, and this may require you to provide photographic or other forms of identification to us.

Amendments to this notice

We reserve the right to update or modify this statement, at any time and without prior notice. If you would like to continue using our website after making such changes to such privacy policy, this means that you accept them.