Skip to main content
AcuFin

Legal

UAE Privacy Notice

Jurisdictional notice under the UAE Federal Personal Data Protection Law and, where applicable, the DIFC Data Protection Law.

Why this notice

This notice supplements our Privacy Policy for data subjects in the United Arab Emirates. It addresses processing under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ('PDPL') and, where applicable, the DIFC Data Protection Law No. 5 of 2020.

Controller and contact

AcuFin Corporate Limited, acting through its representations in Dubai and Abu Dhabi. Data Protection Officer: dpo@acufin.global. UAE-specific enquiries may also be addressed to ae@acufin.global.

Lawful bases under the PDPL

Consent (where required); performance of a contract; compliance with a legal obligation including AML/CFT and counterparty due diligence; protection of public interest; and our legitimate interests where these are not overridden by the data subject's rights.

DIFC processing

Where data is processed within the Dubai International Financial Centre, the DIFC DP Law applies. Where we transfer personal data out of the DIFC, we use the transfer mechanisms set out in that law, including the DIFC Standard Contractual Clauses where appropriate.

Cross-border transfers

Personal data of UAE data subjects may be transferred to Mauritius and other jurisdictions. We rely on the transfer mechanisms permitted by the PDPL or DIFC DP Law, including adequacy, contracts incorporating model clauses, or consent.

Your rights

Access, correction, deletion, withdrawal of consent, restriction or objection to processing, portability, and the right to complain to the relevant authority. To exercise rights, email dpo@acufin.global.

Complaints

You may complain to the UAE Data Office (PDPL matters) or the DIFC Commissioner of Data Protection (DIFC matters). We would, however, ask you to contact us first.

Last reviewed May 2026