Privacy Policy

Data Controller

Vestora is the data controller in respect of personal information collected through the Website and processed for the purposes described in this Policy. Data-protection queries and requests may be directed to compliance@vestora.ae.

Information gathered

The Website collects certain anonymous data regarding the usage of the website. This information does not personally identify users, by itself or in combination with other information, and is gathered to improve the performance of the Website. The anonymous data collected by the Website can include information such as the type of browser you are using, and the length of the visit to the Website. You may also be asked to provide personally identifiable information on the Website, which may include your name, address, telephone number and e-mail address. This information can be gathered when feedback or e-mails are sent to the Website, when you register for services, or make purchases via the Website. In all such cases you have the option of providing us with personally identifiable information.

Where we collect personal information from you, we do so on the basis of your explicit consent obtained at the time of account registration or your interaction with the Website, or on such other lawful basis as is permitted under applicable UAE data-protection laws, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

Use and disclosure of information

Except as otherwise stated below, we do not sell, trade or rent your personally identifiable information collected on the Website to others. The information collected by our Website is used to provide and administer our services, to process registrations, purchases and subscriptions, to deliver reports, newsletters, webinars, events and learning programmes, to respond to enquiries and support requests, to improve the functionality and performance of the Website, to analyse usage trends and user engagement, to communicate updates, publications and services that may be of interest to you and to comply with legal, regulatory and operational requirements.

Marketing communications

Where you have given your consent, or where otherwise permitted by applicable law, we may send newsletters, research updates, event invitations and other communications relating to Vestora's activities and services. We will not use your personal information for marketing purposes without obtaining your consent where such consent is required by law.

You may unsubscribe from marketing communications at any time by using the unsubscribe link contained within our emails or by contacting us directly.

Sharing of information

We do not sell, rent or trade personal information to third parties.

We may share personal information with trusted service providers who assist us in operating the Website and delivering services, including providers of payment processing, learning management systems, event registration platforms, email and newsletter services, website analytics and performance monitoring, customer support and administration.

We may also disclose information where required by law, regulation, court order or governmental authority.

In the event of a merger, acquisition, restructuring or sale of assets, personal information may be transferred as part of the transaction.

Online Payments

Payments made through the Website are processed by authorised third-party payment service providers.

Vestora does not store credit card or debit card details on its systems.

All payment information is processed in accordance with applicable security standards and the policies of the relevant payment provider.

Cookies and analytics

The Website uses cookies and similar technologies to improve functionality, analyse website usage, enhance user experience and support security measures.

Cookies may be used to remember user preferences, maintain login sessions, measure website performance and understand how visitors interact with the Website.

Users may choose to disable cookies through their browser settings, although certain Website features may not function properly as a result.

Where required by applicable law, we obtain your consent through the Website's cookie consent-management mechanism before setting non-essential cookies. You may review and manage your cookie preferences at any time via the consent-management tool available on the Website.

International data transfers

Some of our service providers may process or store information in jurisdictions outside the United Arab Emirates.

Where personal information is transferred outside the UAE, we will do so only where the conditions for cross-border transfer under the PDPL are met, including where the destination jurisdiction provides an adequate level of protection or where appropriate safeguards (such as contractual protections) are in place, so that information is handled securely and in accordance with applicable laws.

For reasons of platform stability, security, resilience, business continuity and operational protection, we may host certain elements of our infrastructure in jurisdictions outside the United Arab Emirates, including (at the date of this Policy) the Federal Republic of Germany. We reserve the right to store and process personal information outside the United Arab Emirates where necessary or appropriate for these purposes.

Where personal information is transferred outside the United Arab Emirates, we rely on the contractual route provided for under Article 23(1)(a) of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), supported by appropriate contractual, technical and organisational safeguards, and we maintain an internal record of the legal and operational basis for any such transfer.

Data security

We take reasonable technical, organisational and administrative measures to protect personal information against unauthorised access, disclosure, alteration, misuse or destruction.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security of information transmitted to or stored by the Website.

Retention of information

We retain personal information only for as long as reasonably necessary to fulfil the purposes outlined in this Policy, comply with legal obligations, resolve disputes and enforce our agreements. When personal information is no longer required for these purposes, we will securely delete, destroy or anonymise it in accordance with the PDPL and our retention practices.

Your rights

Subject to applicable law, you may have the right to request access to your personal information, request correction of inaccurate information, request deletion of personal information, withdraw consent to marketing communications, request restriction of certain processing activities, object to certain processing, and request the transfer (portability) of personal information you have provided to us. You also have the right to lodge a complaint with the UAE Data Office. We will respond to verified requests within the period required by the PDPL.

Requests relating to personal information may be submitted to compliance@vestora.ae.

In addition to submitting a request as above, you may directly edit or erase certain personal information at any time through your Website account settings.

Minors

The Website is intended for individuals aged 18 years and above.

We do not knowingly collect personal information from individuals under the age of 18. If we become aware that personal information has been collected from a minor, we will take reasonable steps to delete such information.

Third-Party websites

The Website may contain links to third-party websites. Vestora is not responsible for the privacy practices, content or security of such websites.

Users are encouraged to review the privacy policies of any third-party websites they visit.

Modification of this Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or operational practices.

Any updates will be posted on this page and will become effective upon publication.

Contact Us

If you have any questions regarding this Privacy Policy or our handling of personal information, please contact: compliance@vestora.ae