Privacy Policy

This Privacy Policy applies to Nazrah Financial ("Nazrah", "we", "us", "our"), operated by Nazrah Investment Consultancy, and to the website nazrahfinancial.com and any associated services or applications (collectively, the "Services").

By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.

We collect information in three ways:

• Information you provide: name, email, phone number, country of residence, identification documents (for KYC), employment information, and details about your investment goals and risk tolerance.
• Financial information: for clients, this includes brokerage account numbers, transaction history, and the balance figures used to compute performance and fees.
• Automated information: IP address, device type, browser, pages visited, time spent on pages, referral source. Collected via cookies and analytics (see Section 5).

We use your information to:

• Provide, operate, and maintain the Services;
• Verify your identity and comply with anti-money-laundering (AML), counter-terrorism-financing (CTF), and Know-Your-Customer (KYC) obligations;
• Manage your account and, for eligible client accounts, calculate performance and process settlements and withdrawals;
• Communicate with you about your account, support requests, marketing (with your consent), and changes to our Services or policies;
• Improve our website, products, and customer experience;
• Detect, prevent, and respond to fraud, security incidents, and other harmful activity;
• Comply with applicable law, court orders, or requests from regulators with valid jurisdiction.

We do not sell your personal information. We share it only when necessary, with:

• Service providers who process data on our behalf — including hosting (Vercel, Supabase), payment processing (Stripe), email delivery, analytics, and KYC/AML providers. They are bound by confidentiality and data-protection contracts.
• Brokerage and liquidity partners when required to open or operate your trading account.
• Regulators, law enforcement, or courts when legally required, subject to applicable due-process protections.
• Successors in the event of a merger, acquisition, or asset sale, in which case continued use of the Services constitutes consent to the new owner's privacy practices.

We use a minimal set of essential cookies (for authentication and session management). Non-essential analytics and marketing tags run only after you give consent through the cookie banner, and you can decline them — the Services will still function.

We use industry-standard safeguards including encryption in transit (TLS 1.3) and at rest (AES-256), access controls, audit logs, and regular security reviews. Infrastructure providers (Supabase, Vercel) are SOC 2 Type II compliant.

No system is perfectly secure. You are responsible for keeping your account credentials confidential and for using strong, unique passwords. Notify us immediately if you suspect unauthorized access.

We keep your personal information only as long as needed to:

• Provide the Services and maintain your account;
• Comply with regulatory record-keeping obligations (typically 5–7 years after account closure under UAE financial regulations);
• Resolve disputes and enforce our agreements.

After this period, we delete or anonymize the data unless legally required to retain it longer.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion (subject to legal retention obligations);
• Object to or restrict certain processing;
• Receive your data in a portable format;
• Withdraw consent for processing based on consent (this does not affect prior lawful processing);
• Lodge a complaint with the UAE Data Office or your local data protection authority.

To exercise these rights, email privacy@nazrahfinancial.com. We respond within 30 days.

Your data may be processed and stored outside your country of residence (typically in AWS/Vercel/Supabase regions in the UAE, EU, US, or Asia). When we transfer data internationally, we ensure equivalent protection through standard contractual clauses or adequacy determinations.

Our Services are not intended for individuals under 18. We do not knowingly collect personal information from minors. If you believe we have, contact us and we will delete it.

We may update this policy to reflect changes in our practices or legal obligations. The "Effective" date at the top reflects the latest revision. Material changes will be communicated via email or in-app notification at least 14 days before taking effect.

For privacy questions or requests, contact our Data Protection Officer:

Nazrah Financial
Dubai Silicon Oasis, Dubai, UAE
Email: privacy@nazrahfinancial.com