1. Purpose of this Privacy Policy

2. Collection of Personal Data

This Privacy Policy Statement sets out the basis on which any information, including any Personal Data, we collect from you, or you provide to us, will be processed by the Muhammad BinGhatti Associates. Each time you access or use our services, website, apps or otherwise provide us with information, by doing so you are accepting and, where possible, consenting to the practices described in this Privacy Policy Statement. From time to time, the Muhammad BinGhatti Associates may receive customers’ personal information via the various channels through which customers communicate with us, including through: use or access of our websites and other web-based products, information or services; third-party social media networks;

telephone, e-mail, text messaging services, chat bots, or any other digital or electronic form or communication; online or off-line registration or application forms, surveys, questionnaires, contracts, agreements, identification documents and other documents submitted to us; transactions with us (e.g., letter of credit issuance, cheques, account enquiry, bank or money transfer); and verification of the validity and accuracy of customers’ personal and/or relevant corporate details by any third party.

We obtain most of the information directly from our customers through direct interaction, applications or other forms, and from maintaining records of information provided in the course of ongoing customer service. We may also obtain information from various other sources such as credit information or identity group checks. Finally, we may collect Personal Data through automated technologies or interactions through your interaction with our websites and apps, using cookies or similar technologies.

A cookie is a small text file that is unique to the web browser on your computer or mobile device, which is used to retain user preferences, and enhance browsing experience. We use cookies to track overall site usage and to enable us to provide a better user experience. We do not use cookies to “see” other data on your computer or determine your email address. Refer to our Website Terms of Use for more details.

3. Processing, Storage and Transfer

Before using the Muhammad BinGhatti’s websites, apps or services, customers must understand and agree that customers’ Personal Data may be disclosed, transferred or shared: within the Muhammad Binghatti Associates and to other relevant authorized service providers which are registered and/or incorporated in UAE during back-office processing procedures;

with vendors, consultants, marketing and advertising partners, and other service providers who need access to such Personal Data to carry out work on our behalf or to perform a contract we enter into with them; in response to a request for information by a competent authority or government entities if we determine that such disclosure is in accordance with, or is otherwise required by, any applicable law, regulation, or legal process;

with law enforcement officials, government entities or authorities or other third parties as required by applicable law; with third parties in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company; with third parties in an aggregated and/or anonymized form which cannot reasonably be used to identify you;

and with third parties with whom you choose to let us share your Personal Data, for example other apps or websites that integrate with our API or Website Services, or those with an API or Service with which we integrate. We will take all steps reasonably necessary to ensure your data is processed fairly and lawfully, in accordance with applicable laws and this Privacy Policy Statement. By submitting your Personal Data, you agree to such transfer, storing or processing in order for us to perform our operational, administrative and regulatory func

You agree that we have the right to transfer the Personal Data described in this Privacy Policy Statement to and from, and process and store it in, the United Arab Emirates and (where applicable or required) with Data Processors in other countries, some of which may have less protective privacy laws than those where you reside. Where this is the case, we will take appropriate security measures to protect your Personal Data in accordance with this Privacy Policy Statement.

We retain Personal Data submitted by you for a reasonable length of time unless otherwise prescribed by applicable law, and only for as long as reasonably necessary to fulfil the purposes for which we collected it. Muhammad BinGhatti is not responsible for the accuracy of the information you provide, and will modify or update your Personal Data in our databases upon your request, as further outlined below. We will erase or archive from active use your Personal Data upon request unless we are required to retain it in accordance with DIFC or other applicable laws or to perform agreed services. By accessing or using our apps and websites or otherwise providing us with Personal Data, you thereby represent and warrant that you understand that all information submitted by you to us may be used by us in accordance with applicable laws and our policies.

4. Use of Personal Data

We may use the Personal Data which you provide to us, or we collect from you to: respond to any queries or expressions of interest made by you; register you as a customer and provide you with products or services, including managing payments, fees, charges and collecting monies owed to us; manage our relationship with you;

to enter into or conclude or perform any contract we have entered into with you; process your payments to us and protect against fraudulent transactions comply with our legal obligations and defend legal claims;

5. Protection of Personal Data

The Muhammad BinGhatti Associates maintains strict security standards and procedures for the purpose of protecting customers’ Personal Data. When accessing the Muhammad BinGhatti’s services, customers must go a through verification and authorization process to confirm each customer’s identity through our KYC Process We make every effort to ensure that your Personal Data is secure on our systems. The Muhammad BinGhatti Associates has staff dedicated to maintaining our data protection and security policies, periodically reviewing them and making sure that our employees are aware of our data protection and security practices. Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, the Muhammad BinGhatti Associates cannot warrant or guarantee the security of any PersonalData you transmit to us, and you do so at your own risk. If a customer’s browser is appropriately configured it should tell the customer whether the information the customer is sending will be secure (generally by displaying an icon such as a padlock). The combination of a secure browser at the customer’s end and the Muhammad BinGhatti Associates’ security measures provide customers with the best security currently available. Once the Muhammad BinGhatti Associates receives a customer’s information, the Muhammad BinGhatti Team will take all reasonable steps to protect that information. If the Muhammad BinGhatti Associates no longer needs a customer’s information, the Muhammad BinGhatti Team will destroy or de-identify it, subject to the extant record retention guidelines.

6. Your Rights

You have the right to access information held about you. Your right of access can be exercised in accordance with DIFC and other applicable laws. Any access request generally comes at no cost to you, but may, where permissible, be subject to a fee to meet any extraordinary administrative costs in providing you with details of the information we hold about you. When you contact us about a potential Personal Data error, we will endeavor to confirm or verify the information in question, then correct verified inaccuracies and respond to the original inquiry. We will endeavor to send a correction notice to businesses or others whom we know to have received the inaccurate data, where required and / or appropriate. However, some third parties and third party sites may continue to process inaccurate data about you until their databases and display of data are refreshed in accordance with their update schedules, or until you contact them personally to ensure the correction is made in their own files. You may also request that we restrict, erase or otherwise process your Personal Data in line with your rights as set out in the DIFC Data Protection Law.

7. Liability

The Muhammad BinGhatti Associates is not liable for any potential loss or damages under the following conditions: Natural disaster, war, terrorist attack, interruption of electric power, fire, water, etc. which is beyond the Muhammad BinGhatti Team’s control; Disclosure, misuse, lending/delegation to any third party, transfer of the OTP Token/security password and/or user password by the customer; Telecommunication problems which are beyond the Muhammad BinGhatti Team’s control; Functionality problems with customers’ electronic devices; Misuse of the Muhammad BinGhatti Associates’ services; and Any other circumstances which are beyond the Muhammad BinGhatti Team’s control.

8. Governing Law

This notice is prepared and maintained by the Muhammad BinGhatti Associates and is governed by the laws of DIFC, including the Data Protection Law DIFC No. 5 of 2020, and may for certain types of Personal Data processing, be subject to laws from other jurisdictions. From time to time, information and/or services may be amended in accordance with changes of the governing law.

9. Changes to this Policy

Customers agree that the Muhammad BinGhatti Associates may amend and/or change this Privacy Policy Statement and other relevant policies from time to time and without notice. We encourage you to periodically review this Policy for the latest information on our privacy practices.

10. Contact

We keep this Privacy Policy Statement under regular review. It was last updated 18 August 2025.