Privacy Policy
Last updated: 1 January 2025 — EmirateFi K.S.C., Kuwait
1. Introduction
EmirateFi K.S.C. (“EmirateFi”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our platform, website, mobile application, and related services.
By using any EmirateFi service, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services immediately and contact us at privacy@emiratefi.com.
2. Data We Collect
We collect the following categories of personal data:
- Identity Data: Full name, date of birth, nationality, passport or Emirates ID number, photographs
- Contact Data: Email address, phone number, postal address
- Financial Data: Bank account details, transaction history, investment records, source of funds declarations
- Technical Data: IP address, device type, browser type, operating system, cookies and usage data
- Behavioural Data: Pages visited, features used, time on platform, clickstream data
- Communications Data: Support tickets, chat transcripts, email correspondence
3. How We Use Your Data
We use your personal data for the following purposes:
- To open, verify, and maintain your EmirateFi account
- To process investment transactions and payments
- To comply with our legal obligations under Kuwait law, AML/CFT regulations, and FinCEN/FinTRAC requirements
- To conduct KYC (Know Your Customer) and due diligence checks
- To provide customer support and respond to your enquiries
- To send you service notifications, security alerts, and transaction confirmations
- To improve our products, services, and platform through analytics
- To detect and prevent fraud, money laundering, and other unlawful activity
- To send marketing communications where you have provided explicit consent
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: Processing necessary to perform our agreement with you
- Legal Obligation: Processing required to comply with applicable laws and regulations
- Legitimate Interests: Processing for fraud prevention, security, and platform improvement
- Consent: Marketing communications and non-essential cookies, where your explicit consent has been obtained
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Regulatory Authorities: Central Bank of Kuwait, Anti-Money Laundering Unit (AMLU), FinCEN, FinTRAC, and other regulators where required by law
- Service Providers: KYC/identity verification providers, cloud hosting partners (AWS), payment processors, and cybersecurity providers — all subject to data processing agreements
- Professional Advisors: Legal counsel, auditors, and compliance consultants under strict confidentiality obligations
- Group Companies: EmirateFi subsidiaries and affiliates for operational and compliance purposes
6. Data Retention
We retain your personal data for as long as your account is active and for a minimum of 7 years after account closure, in compliance with Kuwait anti-money laundering regulations and applicable financial services laws. Specific retention periods vary by data type and applicable legal requirement.
7. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your data where legally permissible
- Restriction: Request that we restrict processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for marketing at any time
To exercise any of these rights, contact our Data Protection Officer at privacy@emiratefi.com.
8. Cookies
We use essential, analytical, and marketing cookies on our platform. You may manage your cookie preferences through our Cookie Settings panel. Disabling certain cookies may affect platform functionality.
9. Security
We implement industry-standard technical and organisational security measures including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor authentication, SOC 2 Type 2 certified infrastructure, and 24/7 security monitoring. No method of transmission over the internet is 100% secure — if you believe your account has been compromised, contact us immediately.
10. Contact Us
Data Protection Officer
EmirateFi K.S.C.
Al-Hamra Tower, Floor 12, Sharq Area
Kuwait City, Kuwait
Email: privacy@emiratefi.com
Phone: +965 2223 0722
