This Privacy Policy explains how FINLINEBUSINESS SERVICES FZCO (referred to in this Policy as "we", "our" or "us") collects, uses, discloses, and protects personal data that you provide when accessing or using the website www.finline.ae, related services, and any associated mobile or online applications (collectively, the "Website"). We respect your privacy and are committed to protecting your personal data in compliance with applicable data protection laws, including the United Arab Emirates Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL), its Executive Regulations, and other relevant laws governing privacy and data protection in the UAE.
When you access or use the Website, interact with customer support, subscribe to services, complete forms, or otherwise provide information to us, you are invited to review and, where applicable, provide your clear and unambiguous consent to the practices described in this Privacy Policy. This Policy applies to all individuals whose personal data we collect, including visitors, customers, potential customers, partners, and other users of the Website.
We may collect personal data that you voluntarily provide to us when you contact us, register for a newsletter, request information, submit a form, purchase products or services, or otherwise interact with the Website. Such personal data may include your name, email address, telephone number, postal address, billing information, details required to process transactions, and other identifiers you choose to submit. In addition to personal data voluntarily provided, we may collect usage and technical information automatically when you use the Website. This may include IP addresses, device and browser information, access times, pages viewed, and other details generated by automated tracking technologies such as cookies, web beacons, and similar technologies. For more information on how we use these technologies, please see our Cookie Policy. These technical and usage data are used to operate and improve the Website, tailor content, analyse trends, administer the Website, and gather demographic information about our user base.
We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Website through behavioral metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products and services and online activity. Additionally, we use this information for site optimization, fraud and security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.
We collect your personal data for legitimate and specified purposes only. We process personal data to enable the provision of our services, respond to inquiries and requests, create and manage user accounts where applicable, process payments, communicate with users about products, services, updates or offers, personalise user experience, monitor and analyse site usage, ensure the security and proper functioning of the Website, detect and prevent fraud or other unlawful activity, comply with legal obligations, and for any other purpose disclosed at the time of data collection. We do not use your personal data in ways that are incompatible with the purposes for which it was collected.
The legal grounds on which we rely to process your personal data include your explicit consent, the necessity of processing to perform a contract to which you are a party, compliance with legal obligations applicable to us, and our legitimate interests in operating, improving, marketing, and protecting our business, provided that such legitimate interests do not override your rights and freedoms.
We may share personal data with third parties in order to fulfil the purposes described in this Policy. Such recipients may include service providers who assist us in operating the Website, managing data hosting, conducting analytics, processing payments, sending communications, providing customer support, or performing other services on our behalf. These third parties are required by written contract to safeguard your personal data and are permitted to use it only in connection with the services they perform for us. We may also disclose personal data to comply with a legal obligation, enforce our terms or rights, protect the security or integrity of our systems, or respond to valid requests from public authorities.
Where personal data is transferred outside the United Arab Emirates, we will ensure that such transfers are compliant with the PDPL, including ensuring that the destination country provides an adequate level of protection as determined by the UAE Data Office or by implementing appropriate safeguards such as Standard Contractual Clauses (SCCs), contractual protections or obtaining your explicit consent where required.
We implement appropriate technical, organisational, and administrative measures designed to protect personal data from unauthorised access, misuse, disclosure, alteration, or loss. These measures include access controls, encryption, monitoring of systems for potential vulnerabilities, and periodic review of our security practices. In the event of a personal data breach that poses a risk to your rights, we will notify you and the UAE Data Office in accordance with the timeframes mandated by the PDPL. While we strive to protect personal data, no security measure can guarantee absolute protection against all risks.
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal, regulatory, or internal policy requirements. Specifically, we retain Personal, Identity and Financial data for a minimum of five (5) to ten (10) years to comply with UAE commercial and tax laws. Once the data is no longer needed for its original purpose or to satisfy legal retention obligations, we will securely delete or anonymise it.
You have rights in relation to your personal data under the PDPL. You may have the right to request access to your personal data, to have inaccurate data corrected, to request deletion of certain personal data (the "Right to be Forgotten"), to restrict or object to processing, to withdraw consent where processing is based on consent, and to request data portability where applicable. To exercise any of these rights or to make enquiries about your personal data, you may contact us at [email protected] or our Data Protection Officer (DPO) at [email protected]. Upon receiving your request, we will take reasonable steps to verify your identity and respond within the period prescribed by the PDPL Executive Regulations.
Our Website may contain links to other websites that are not operated or controlled by us. We are not responsible for the privacy practices or content of third-party websites, and we recommend that you review their privacy policies before providing any personal data.
This Privacy Policy may be updated from time to time to reflect changes in our data practices, legal requirements, or technological developments. Any updates will be effective upon posting of the revised Policy on the Website. We will notify you of material changes via email or a prominent notice on our Website to obtain your consent where legally required.
If you have any questions about this Privacy Policy, you may contact FINLINEBUSINESS SERVICES FZCO by email at [email protected] or at its registered address. You can also contact us.