Privacy Policy

Last updated: [DATE — to confirm]

⚠ DRAFT for legal review. This is a working template aligned to the UAE Personal Data Protection Law (PDPL) and GDPR principles. Have it reviewed by your legal adviser before publishing.

Land Sterling Investment Advisory ("Land Sterling", "we", "us") is committed to protecting the privacy of users of this investment portal. This policy explains what personal data we collect, why, and your rights.

1. Who we are

The data controller is Land Sterling Investment Advisory, [registered address / licence — to confirm]. For any privacy query contact Cameron.k@landsterling.com.

2. Information we collect

Registration details — name, email, mobile number and company, provided when you request access.
Account & agreement records — your approval status, the non-disclosure agreement you accept (including a timestamp and IP address), and password (stored only as a secure cryptographic hash).
Activity — sign-in events and the opportunities and pages you view within the portal, used to support your enquiries.
Enquiries — information you submit through "Request Particulars", "Request Data Room Access", "Request Further Details" or "Book a Call".
Cookies & analytics — essential cookies to operate the portal, and (only with your consent) analytics cookies.

3. How we use it

To verify and approve qualified recipients and manage portal access.
To present investment opportunities and respond to your enquiries.
To maintain a record of the non-disclosure agreement governing access to confidential information.
To understand engagement and improve the portal (analytics — consent-based).

4. Legal basis

We process your data on the basis of your consent, the performance of the agreement between us, and our legitimate interest in operating a secure, confidential investment portal.

5. Sharing

We do not sell your data. We may share it with service providers who operate the portal on our behalf (hosting, database, email and, where applicable, CRM and scheduling tools), under appropriate confidentiality obligations. [Confirm sub-processors with legal.]

6. Retention & security

Data is retained for as long as your account is active and as required for our legitimate business and legal obligations. Information is held on secured, access-controlled infrastructure; documents and confidential materials are shared only with parties who have accepted the non-disclosure agreement.

7. Your rights

Subject to applicable law (UAE PDPL / GDPR), you may request access to, correction or deletion of your data, withdraw consent, or object to processing. Contact us at the address above.

8. Changes

We may update this policy; the "last updated" date will reflect any change.