Privacy Policy
Last updated: 23 August 2026
EXA Capital DMCC (“EXA Capital”, “we”, “us”, “our”) is a free zone company registered in the Dubai Multi Commodities Centre, United Arab Emirates. This policy explains what personal data we collect, why, how we use it, who we share it with, and the rights available to you.
1. Who we are
EXA Capital DMCC is a free zone company registered in the Dubai Multi Commodities Centre, United Arab Emirates, under Licence No. DMCC-883542 and Registration No. DMCC190950, with its registered address at Unit No. 1JLT-Nook-031, One JLT, Plot No. DMCC-EZ1-1AB, Jumeirah Lakes Towers, Dubai, United Arab Emirates.
We are the controller of the personal data described in this policy. This policy explains what personal data we collect through our website at exacapital.ae and in the course of our business, why we collect it, how we use it, who we share it with, and the rights available to you.
2. Scope
This policy applies to personal data we process in connection with:
- your use of our website;
- enquiries you send us, including investment proposals and business enquiries;
- our dealings with founders, business owners, advisers, intermediaries, investors and service providers;
- our assessment of potential investments and our management of portfolio companies.
It does not apply to the websites of our portfolio companies or partners, each of which operates its own privacy policy.
3. The personal data we collect
Information you give us. When you contact us through the website, by email or otherwise, we collect the information you choose to provide. This typically includes your name, email address, telephone number, employer or company, your role, and the content of your message or submission. If you send us a business plan, pitch deck, financial information or similar material, we collect the personal data contained in it.
Information we collect automatically. When you visit our website we may collect technical information including your IP address, browser type and version, device type, operating system, referring page, the pages you view, and the date and time of your visit. This is collected through server logs and, where enabled, analytics tools.
Information from other sources. In assessing an investment opportunity or a counterparty, we may collect personal data from public registers, company records, professional networking platforms, credit and sanctions screening providers, our advisers, and other third parties, to the extent permitted by applicable law.
We do not knowingly collect personal data from children, and our website is not directed at children.
4. Why we use your personal data, and on what basis
| Purpose | Basis |
|---|---|
| Responding to your enquiry and corresponding with you | Your consent; our legitimate interest in responding to enquiries; steps at your request prior to entering a contract |
| Evaluating investment opportunities and conducting due diligence | Our legitimate interest in assessing and making investments |
| Managing our investments and our relationships with portfolio companies, partners and advisers | Performance of a contract; our legitimate interests |
| Complying with legal, regulatory, tax, anti-money-laundering and sanctions obligations | Compliance with a legal obligation |
| Operating, securing and improving our website | Our legitimate interest in maintaining a functional and secure website |
| Establishing, exercising or defending legal claims | Our legitimate interests; compliance with a legal obligation |
Where we rely on consent, you may withdraw it at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Cookies and analytics
Our website uses cookies and similar technologies that are strictly necessary for the site to function. Where we use analytics or other non-essential cookies, we will ask for your consent before they are set, and you may change or withdraw that choice at any time.
Most browsers allow you to refuse or delete cookies through their settings. Blocking strictly necessary cookies may affect how parts of the website work.
6. Who we share personal data with
We do not sell personal data. We may share it with:
- our professional advisers, including legal, tax, accounting and audit advisers;
- service providers who act on our instructions, including IT, hosting, email and analytics providers;
- our portfolio companies and co-investors, where relevant to a transaction or an ongoing investment;
- screening and verification providers, where required for due diligence or compliance;
- competent authorities, regulators and courts, where required by law or to protect our legal rights;
- a purchaser or prospective purchaser in connection with a corporate transaction.
We require those acting on our behalf to protect personal data appropriately and to use it only for the purposes we specify.
7. International transfers
We operate across the United Arab Emirates, Europe, Eastern Europe and Asia, and personal data we hold may be transferred to and processed in countries outside the UAE, including within the European Economic Area. Where we transfer personal data internationally, we take steps to ensure it is protected to a standard consistent with applicable law, including by using contractual protections with recipients where appropriate.
8. How long we keep it
We keep personal data only as long as necessary for the purposes described above.
- Website enquiries that do not lead to a relationship: normally up to 24 months.
- Investment proposals we decline: normally up to 24 months, so we can recognise a re-approach and explain our previous decision.
- Records relating to investments, transactions and counterparties: for the life of the investment and afterwards for as long as required to meet legal, tax, accounting and limitation-period obligations.
- Server and security logs: normally up to 12 months.
Where personal data is no longer needed, we delete it or anonymise it.
9. Security
We maintain technical and organisational measures appropriate to the risk, including access controls, encryption of data in transit, and restrictions on who within EXA Capital can access personal data. No system is completely secure, and we cannot guarantee the security of information transmitted to us over the internet.
10. Your rights
Subject to applicable law, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data in certain circumstances;
- object to, or request restriction of, our processing;
- request transfer of data you provided to us, in a structured, commonly used format;
- withdraw consent where we rely on it;
- request that we stop using your data for direct marketing;
- lodge a complaint with the competent supervisory authority.
To exercise any of these, email info@exacapital.ae. We may need to verify your identity before responding. We aim to respond within 30 days; if a request is complex we will tell you and explain the delay.
11. Changes to this policy
We may update this policy from time to time. The current version is always available at exacapital.ae/privacy, and the date at the top shows when it was last changed. Material changes will be highlighted on this page.
12. Contact
EXA Capital DMCC
Unit No. 1JLT-Nook-031, One JLT, Plot No. DMCC-EZ1-1AB, Jumeirah Lakes Towers, Dubai, United Arab Emirates
Email: info@exacapital.ae · Telephone: +971 4 283 7090
This policy forms part of our Terms of Use.