1. Introduction
ORO Capital Ltd. (“ORO Capital”, “we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of personal data entrusted to us by our clients, counterparties, website visitors, and business partners. This Privacy and Cookies Policy explains how we collect, use, store, share, and protect your personal information when you visit our website or engage with our corporate finance and advisory services.
We process personal data in accordance with applicable data protection legislation, including the Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020 and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
2. Data Controller
ORO Capital Ltd. is the data controller responsible for your personal data. If you have any questions about this policy or our data protection practices, please contact us at:
ORO Capital Ltd.
Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Email: [email protected]
3. Information We Collect
We collect and process personal data only to the extent necessary to deliver our institutional services, manage client engagements, comply with statutory obligations, and administer our website. The categories of personal data we may collect include:
- Identity & Contact Data: Full name, professional title, business organisation, jurisdiction, business email address, and telephone number provided via enquiry forms or direct correspondence.
- Mandate & Advisory Data: Information provided in connection with corporate finance, capital raising, M&A advisory, or transaction brokerage inquiries.
- Regulatory & Compliance Data: Identification documents, proof of address, source of funds, and corporate ownership records required under anti-money laundering (AML) and know-your-customer (KYC) regulations.
- Technical & Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and anonymous page interaction data collected during website visits.
4. How We Use Your Personal Data
We use your personal data for the following lawful purposes:
- To evaluate, respond to, and process corporate finance and strategic advisory inquiries.
- To perform our obligations under advisory agreements, engagement letters, or transaction mandates.
- To fulfill mandatory regulatory, compliance, and statutory obligations under DFSA rules and applicable UAE legislation, including anti-money laundering (AML/CFT) verification.
- To maintain the integrity, security, and performance of our digital infrastructure and website.
- To manage institutional stakeholder relationships and maintain professional correspondence.
5. Legal Basis for Processing
We process personal data under one or more of the following legal bases:
- Performance of a Contract: Processing necessary to negotiate, enter into, or execute an advisory mandate or service agreement.
- Legal & Regulatory Compliance: Processing required to comply with binding laws, regulatory codes, and requests from supervisory authorities.
- Legitimate Interests: Processing necessary for our legitimate institutional business interests, provided such interests are not overridden by your fundamental rights and freedoms.
- Consent: Where you have granted explicit consent for specific processing activities.
6. Confidentiality & Data Sharing
We treat all client and counterparty information with the highest degree of professional discretion. We do not sell, rent, or trade your personal data. We may share personal data only in the following strictly controlled circumstances:
- Group Entities: With members of ORO Holdings where necessary to deliver unified advisory, structuring, or fund management solutions.
- Professional Advisers: With legal counsel, auditors, compliance consultants, and accountants acting under professional obligations of confidentiality.
- Regulatory & Law Enforcement Authorities: With the Dubai Financial Services Authority (DFSA), courts, or government bodies where required by applicable law or formal regulatory subpoena.
- Service Providers: With vetted IT, hosting, and communications providers bound by comprehensive data processing and security agreements.
7. Cookies and Tracking Technologies
Cookies are small text files placed on your device to ensure efficient website operation and provide aggregated analytical insight. Our website uses cookies strictly in accordance with international best practices:
- Strictly Necessary Cookies: Essential for website navigation, security authentication, and session integrity. These cannot be switched off in our systems.
- Performance & Analytics Cookies: Enable us to measure visitor counts and traffic patterns to optimize performance. All analytical data is aggregated and completely anonymized.
You can manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect the proper functioning of certain website features.
8. Data Security and Retention
We implement robust technical and organisational security measures to protect personal data against accidental loss, unauthorised access, alteration, or disclosure. All digital transmissions are encrypted using industry-standard Transport Layer Security (TLS).
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required to comply with regulatory record-keeping obligations (typically a minimum of six to ten years for financial advisory records under DFSA requirements).
9. Your Legal Rights
Depending on your jurisdiction and applicable data protection legislation, you may have the following rights regarding your personal data:
- Right of Access: Request confirmation of whether we process your data and obtain a copy of such data.
- Right to Rectification: Request correction of inaccurate or incomplete personal information.
- Right to Erasure: Request deletion of your personal data where retention is no longer legally required.
- Right to Restriction: Request suspension of processing under certain contested circumstances.
- Right to Object: Object to processing based on legitimate interests.
- Right to Data Portability: Request transfer of your data to another controller in a structured format.
To exercise any of these rights, please contact our Compliance Officer at [email protected]. We respond to all verified requests within statutory timeframes.
10. Updates to this Policy
We review and update this Privacy and Cookies Policy periodically to reflect legal, technological, or operational changes. The latest revision date will always be indicated at the foot of this page.
Last updated: September 2026