Privacy policy

Application of this privacy policy

This Privacy Policy (the “Policy”) forms part of the client service agreement/terms and conditions (“Terms”) relating to the services provided by Sancta Capital Advisors Limited (“Sancta Capital”).

Sancta Capital is committed to safeguarding the privacy of the personal information that is provided to it or collected by it during the course of its business as well as the personal information it receives from you. This Policy describes how and why we collect, store and use personal information, and provides information about your rights. Please read the following information carefully to understand our views and practices regarding how we handle personal information.

For the purposes of applicable data protection law, Sancta Capital is the “data controller” of your personal information.

Collection of personal information

We may collect personal information from you through your use of the website, when you request information from us, when you engage us for services, or as a result of your relationship with any of our clients.

We may request, and collect from you, personal information, and other information. Depending on the information or services you request, we may ask you to provide your name, phone numbers, address, email address, passport details, and other personal information.

By providing us with any personal information, you are consenting to the use of your personal information as contemplated in this Policy. If you do not want us to use your personal information for any of these purposes, please do not provide us with your personal information.

In addition to the personal information you knowingly provide to us, with regard to each of your visits to our website or app, we may automatically collect the following information:

technical information including the Internet protocol (IP) address used to connect your device to the internet, browser type and version, time zone setting, location, browser plug-in types and versions, operating system, as well as the admin system and aggregated data reports. That data is statistical in nature and tells us about the navigational behaviour and actions of our users and does not divulge any information about the identity of any individual;

information about your visit, services you viewed or searched for, page response times, download errors, length of visits, page interaction information (such as scrolling, clicks, and mouse-overs); and

in addition, we may use third party services such as Google Analytics that collect, monitor and analyze information about demographics and navigational behaviour. Demographics may include information such as gender, country of provenance and age. Navigational behaviour may include information such as pages viewed during a session, time spent on a given page and engagement with the Site's content such as clicks and form submissions (e.g., an email subscription to our newsletter).

For that same reason, we can obtain information about your general use of the internet using cookie files, which are small files that are sent to us, and which are stored in your device's hard drive. The cookies help us improve our website as well as provide a better and more personalized service. They allow us to:

estimate the size and nature of our audience as well as their behavioural tendencies on our website;

store information about our users' preferences, which allows us to personalize our website in conjunction with individual interests;

accelerate your search; and to

recognize you when you come back on our website.

If you wish to remove cookies, you can deactivate cookies within your browser's parameters. However, if you deactivate your cookies, you might not be able to access some parts of our site. Unless you deactivate cookies, the system on our site will send cookies by default.

Purposes

We will only use your personal information for our legitimate business purposes, including:

processing and responding to inquiries, and providing our services within the contractual relationship with you or the client linked to you;

managing our relationship with you and our clients;

marketing our services;

compiling anonymous statistics, such as website usage statistics and statistics on the effectiveness of invitations and other emails; and for complying with the regulations of the DFSA and where otherwise required by law.

Client relationship management

We operate a Client Relationship Management email mailing list program, which we use to inform clients and other contacts about our services, including our performance, publications and events. Such marketing messages may contain tracking technologies in order to track subscriber activity relating to engagement, demographics and other data, and to build subscriber profiles.

If you would like to cease receiving marketing materials from us at any time, please let our CRM management team know directly. You can also change your preferences for receiving our marketing emails and legal updates from us at any time, and you can unsubscribe by following the instructions specified in our marketing emails or via the website. Please update your details by contacting our CRM management team by email at info@sanctacapital.com.

Sharing your information

We may disclose your personal information to a recipient (i) for the purposes of outsourcing one or more of the purposes-related functions described above; (ii) to confirm or update information provided by you; (iii) to inform you of events, information about our services, and other important information, or (iv) for other purposes disclosed at or before the time the information is collected.

If you tell us you wish to attend an event, your name and organization may appear on a list which we provide to other delegates at the event. We also take photographs and video of our events, and this may result in your image being captured and used in the course of reporting on the event (e.g. via social media or other means).

In relation to any other third parties, we will only disclose your information where you have given your consent or where we are required to do so by law, or where it is necessary for the purpose of, or in connection with legal proceedings or in order to exercise or defend legal rights.

Cross-border transfer of your information

It may sometimes be necessary for us to share your personal information with our affiliates or to share your information with business partners, outsourced services providers. In such events, this will entail a transfer of personal information from within the Dubai International Financial Centre (“DIFC”) to recipients outside the DIFC, and vice versa.

The level of personal information protection in locations outside the DIFC may be less than that offered within the DIFC or the country in which you reside and may not be recognized as providing an adequate level of protection, but we have procedures in place to ensure the protection of personal information. These procedures include putting steps in place to ensure that all such entities keep your personal information confidential and secure and only use it for the purposes that we have specified and communicated to you. When we transfer your information to other countries, we will use, share and safeguard that information as described in this privacy notice. We only transfer personal information outside of the DIFC when it is necessary for the services we provide you, or subject to appropriate safeguards that assure the protection of your personal information, such as standard contractual clauses.

Your rights

Under certain circumstances, you have the following rights:

Access and Accuracy: the right to ask us to provide you, or a third party, with copies of the personal information we hold about you at any time, and to be informed of the contents and origin, verify its accuracy, or else request that such information be supplemented, updated or rectified in accordance with the applicable law;

Erasure or Blocking: the right to request erasure, anonymization or blocking of your personal information that is processed in breach of the law;

Objecting: the right to object on legitimate grounds to the processing of your personal information. In certain circumstances we may not be able to stop using your personal information, if that is the case, we’ll let you know why;

Porting: the right to request that some of your personal information is provided to you, or to another data controller, in a commonly used, machine-readable format;

Complaints: if you believe that your data protection rights may have been breached, you have the right to lodge a complaint to the applicable supervisory or data protection authority; and

Withdraw consent: when personal information is processed on the basis of consent an individual may withdraw consent at any time. In the event that you no longer want to receive any marketing material from us, please use the unsubscribe option (which is in all of our marketing emails to you) or contact us on the details set out below.

If you would like to exercise any of the above rights, please contact our Compliance Officer at maria.shmatova@rethink-hq.com.

Confidentiality

The information you provide may be confidential, and we will maintain such confidentiality and protect your information in accordance with this Policy, our professional obligations and applicable law. We do not sell, rent, distribute, or otherwise make, personal information commercially available to any third party. We may share information with our service providers for the purposes set out in this Policy.

Information security

We have implemented reasonable administrative, technical and physical measures to protect your personal information against loss, misuse and alteration.

How long we keep your personal information

We will retain your personal information for the length of time needed to fulfil the purposes for which it was collected (as outlined in this Policy) unless a longer retention period is required or permitted by law.

Your personal information that is processed for marketing purposes will be stored until you exercise the right to withdraw consent, and once such right is exercised, your personal information will be kept only during the applicable statute of limitations period for any disputes or liabilities that may arise as a consequence of the processing of that information (which is up to 15 years in the United Arab Emirates). Once potential actions are time-barred we will proceed to delete the personal data. In any other circumstances, we will only retain your personal information for a shorter or longer period as required by any applicable law.

Changes to this privacy policy

This Policy is effective as of 1st April 2022 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change this Policy at any time and you should check this Policy periodically.