Privacy Policy

The data controller for personal data processed through this website (the “Site”) is Infinite Momentum Holdings L.L.C-FZ, a free zone company licensed in the Meydan Free Zone, Dubai, United Arab Emirates, Trade Licence 2541211.01, registered office Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Privacy enquiries, requests and complaints: corporate@im-holdings.co.

This Policy is issued under the UAE Personal Data Protection Law — Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data — together with the regulations of the Meydan Free Zone and applicable UAE federal law. No other data protection regime is asserted or adopted by the controller.

The Site does not operate user accounts, advertising trackers, behavioural profiling or automated decision-making.

INVESTOR REGISTRATION SUBMISSIONS

Where a visitor completes the investor access registration, the controller collects the data provided: name, business email address, organisation, investor type, country and telephone number, together with the submission timestamp.

GENERAL ENQUIRY SUBMISSIONS

Where a visitor completes the general enquiry form, the controller collects name, email address, organisation where provided, and the content of the enquiry.

ENTITY DISCLOSURE UNLOCK

Where a visitor requests access to group entity registration numbers and incorporation dates, the controller collects the business email address provided. A single browser session key (imh_entities_unlocked) records that the disclosure has been unlocked for the duration of the browsing session.

TECHNICAL CONNECTION METADATA

Hosting infrastructure may log connection metadata — IP address, timestamp, user agent and requested URL — for security, integrity and abuse prevention. Such logs are not used for profiling or marketing.

CONSENT — ARTICLE 4(1)

Form submissions and the entity disclosure unlock are processed on the basis of the consent given by the data subject at the point of submission. Consent may be withdrawn at any time by written notice to corporate@im-holdings.co.

NECESSARY FOR THE CONTROLLER'S LEGITIMATE INTEREST — ARTICLE 4(7)

Short-retention connection logs are processed solely for the security and integrity of the Site, with no profiling or marketing use.

COMPLIANCE WITH LEGAL OBLIGATION — ARTICLE 4(3)

Personal data may be processed where required to comply with a mandatory request or obligation imposed by a competent UAE authority.

Personal data is disclosed only to processors engaged to operate the Site and to respond to enquiries, and only under written instruction limited to the purposes set out in this Policy. Processors comprise the hosting and content delivery provider serving the Site, the electronic mail provider used to route enquiry and registration correspondence to the controller, and the bot-mitigation service applied to the Site's forms.

Personal data is not sold, licensed, rented or disclosed for advertising purposes.

Certain processors operate infrastructure outside the United Arab Emirates. Transfers are made in accordance with Articles 22 and 23 of the PDPL, on the basis of an adequate level of protection in the recipient jurisdiction where recognised, or otherwise on the basis of contractual undertakings imposing protections equivalent to the PDPL, or the explicit consent of the data subject.

The Site sets no advertising or analytics cookies. The only client-side storage used is a single browser session entry recording that the group entity disclosure has been unlocked. It expires when the browser session ends and may be cleared at any time through browser site-data controls.

RIGHT TO INFORMATION AND ACCESS — ARTICLE 13

Obtain confirmation of processing and a copy of the personal data held.

RIGHT TO REQUEST TRANSFER — ARTICLE 14

Receive personal data in a structured, machine-readable format.

RIGHT TO CORRECTION — ARTICLE 15

Require correction of inaccurate or incomplete personal data.

RIGHT TO ERASURE — ARTICLE 15

Require deletion of personal data where the conditions of the PDPL are met.

RIGHT TO RESTRICT OR STOP PROCESSING — ARTICLES 16 AND 17

Require restriction of, or object to, processing in the circumstances prescribed by the PDPL.

RIGHT TO WITHDRAW CONSENT — ARTICLE 9

Withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

RIGHT TO COMPLAIN — ARTICLE 23

Submit a complaint to the controller, and thereafter to the UAE Data Office, where a request is not resolved.

Registration and enquiry records are retained for as long as necessary to respond to the matter and to evidence the consent relied upon, and are deleted on request unless retention is required by UAE law. Connection logs are retained for no longer than thirty days. The session unlock key persists only for the browsing session.

All traffic is served over HTTPS. The controller applies organisational and technical measures proportionate to the risk, in accordance with Article 20 of the PDPL, to protect personal data against unauthorised access, alteration, disclosure and loss. No method of transmission over the internet is entirely secure and absolute security cannot be guaranteed.

Where a personal data breach would prejudice the privacy, confidentiality or security of a data subject's personal data, the controller will notify the UAE Data Office, and the affected data subject where required, in accordance with Article 9 of the PDPL.

The Site is directed at institutional and professional audiences. It is not directed at persons under eighteen years of age and the controller does not knowingly collect their personal data.

Material changes are indicated by an updated “Last Updated” date at the head of this page. Continued use of the Site following publication constitutes acceptance of the revised Policy.

Infinite Momentum Holdings L.L.C-FZ · Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Privacy enquiries: corporate@im-holdings.co.