Privacy notice: United Arab Emirates
Applies together with the main Privacy Policy. Governing privacy law: Federal Decree-Law No. 45 of 2021 (PDPL), DIFC and ADGM data protection laws.
Version 2026-10-08 · Effective 8 October 2026 · IAEX NETWORK (proprietor: Abhishek Tiwari)
This notice supplements Part A for people in the United Arab Emirates and for anyone whose personal data we process in connection with services offered to them in the UAE. It follows Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its implementing rules as they apply from time to time. Where you are in the Dubai International Financial Centre or the Abu Dhabi Global Market, DIFC Data Protection Law No. 5 of 2020 or the ADGM Data Protection Regulations 2021 apply to processing by establishments there; we apply their standards to your data as well.
Controller and contact
The controller is IAEX NETWORK (proprietor: Abhishek Tiwari). Contact: connect@iaexnetwork.com. Data protection contact: Abhishek Tiwari, connect@iaexnetwork.com.
Lawful basis
We process personal data with your consent where we ask for it, and without consent where the PDPL allows: to perform a contract with you or take steps at your request, to comply with the UAE's legal obligations (including anti-money-laundering and counter-terrorism-financing law and sanctions orders), to protect the public interest, to establish or defend legal claims, and for other grounds the PDPL lists. You can withdraw consent at any time; this does not affect earlier processing.
Your rights
| Right | How we honour it |
|---|---|
| Information and access | What data we process, why, with whom we share it, where it is stored, and for how long. |
| Correction and erasure | We correct inaccurate data and erase data that is no longer needed, unless a law requires us to keep it. |
| Restriction | We restrict processing while accuracy or lawfulness is disputed, or where you need data for a claim. |
| Objection and withdrawal | You may object to processing based on our legitimate interests, to direct marketing, and to profiling. |
| Portability | A copy of data you provided in a structured, commonly used, machine-readable form. |
| Automated decisions | You may object to a decision made solely by automated processing that has legal or serious effect, and ask for a person to review it. Sanctions and risk flags are always reviewed by a person before any refusal. |
We respond within 30 days. Use the data-request form or email connect@iaexnetwork.com.
Transfers out of the UAE
We transfer data outside the UAE to a country with adequate protection, or where a contract with the recipient provides it, or with your consent, or where needed to perform a contract or for the establishment or defence of legal claims. Where DIFC or ADGM law applies we use their approved transfer tools.
Breach notification and complaints
If a breach could prejudice the privacy, confidentiality or security of your data we notify the UAE Data Office (and the DIFC Commissioner of Data Protection or the ADGM Office of Data Protection where they have jurisdiction) and affected individuals as the law requires. You may complain to us, and to the UAE Data Office, or, where it applies, the DIFC Commissioner of Data Protection or the ADGM Office of Data Protection.
Records, language and sector rules
We keep identification and transaction records for at least five years after the relationship ends as UAE anti-money-laundering law requires. The licensed partners that hold money for UAE customers are subject to Central Bank of the UAE rules, including its consumer protection standards, which apply to them. This notice is published in English; if you need an Arabic translation, ask us.