Privacy Policy

CERTY collects and processes personal data strictly to the extent necessary to provide its services and operate its Platform within a business-to-business context. Such data may include identifying information, professional contact details, corporate affiliation, and other information required to enable access to the Platform, manage client relationships, and facilitate the provision of services.

In addition, CERTY may collect technical and usage-related data, including but not limited to internet protocol (IP) addresses, browser types, system configuration, access logs, and interaction data generated through the use of the Platform. CERTY may also process data relating to transactions, counterparties, and financial or operational activities, to the extent such data contains or relates to identifiable individuals.

CERTY processes personal data for the purposes of providing its services, including but not limited to the delivery of credit intelligence, risk analytics, and financial insights; facilitating interactions between users, financial institutions, and counterparties; maintaining and improving the functionality, security, and performance of the Platform; responding to user inquiries and support requests; and ensuring compliance with legal and regulatory obligations.

Processing of personal data is carried out on the basis of one or more lawful grounds, including where such processing is necessary for the performance of a contract, compliance with legal obligations, the legitimate interests pursued by CERTY, or, where required, the consent of the data subject.

CERTY may disclose personal data to third parties where such disclosure is necessary for the purposes described in this Policy or otherwise permitted by Applicable Data Protection Laws.

Such third parties may include service providers engaged by CERTY for the purposes of hosting, maintaining, and securing the Platform; financial institutions and commercial partners involved in the provision of services or execution of transactions; and professional advisors, including legal, financial, and compliance consultants.

CERTY may also disclose personal data to regulatory authorities, law enforcement bodies, or other competent authorities where required by applicable law, regulation, or legal process, or where such disclosure is necessary to protect CERTY’s legal rights or the rights of third parties.

In the event of a corporate transaction, including a merger, acquisition, or sale of assets, personal data may be transferred to relevant third parties, subject to appropriate confidentiality safeguards.

Given the global nature of CERTY’s operations and partnerships, personal data may be transferred to and processed in jurisdictions outside of the DIFC and the United Arab Emirates.

Where such transfers occur, CERTY ensures that appropriate safeguards are implemented in accordance with the DIFC Data Protection Law and the UAE PDPL, including the use of contractual protections, standard data protection clauses, or reliance on adequacy determinations where applicable.

CERTY retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements.

Personal data may be retained for longer periods where required to comply with applicable laws, including retention obligations under commercial, tax, or financial regulations, or where necessary for the establishment, exercise, or defense of legal claims.

Where personal data is no longer required, CERTY will take reasonable steps to ensure that such data is securely deleted or anonymized.

CERTY may use advanced analytical tools, including artificial intelligence and machine learning models, to process data for the purposes of generating insights, including credit risk assessments, behavioural analysis, and predictive analytics.

Such processing may involve profiling techniques based on aggregated datasets and operational indicators. However, such profiling is used solely to support business decision-making processes and does not produce legal or similarly significant effects on individuals without appropriate human oversight.

CERTY implements appropriate safeguards to ensure that such processing is fair, transparent, and compliant with Applicable Data Protection Laws.

CERTY uses cookies and similar tracking technologies on its Website and Platform to enhance user experience, improve functionality, and analyze usage patterns.

Cookies are small text files stored on a user’s device that enable the recognition of that device and facilitate navigation. CERTY may use analytics tools, performance monitoring systems, and security technologies to collect information regarding user interaction with the Platform.

Users may control or restrict the use of cookies through their browser settings, although doing so may affect the availability or functionality of certain features of the Platform.

Subject to Applicable Data Protection Laws, You have the right to request access to your personal data, request rectification or erasure of such data, restrict or object to its processing, and request data portability.

Where processing is based on consent, You have the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

Requests to exercise these rights may be submitted to CERTY using the contact details provided below. CERTY reserves the right to verify the identity of the requester prior to responding to any such request.

CERTY reserves the right to amend or update this Policy at any time to reflect changes in its practices, legal requirements, or operational needs.

Any material changes will be communicated through appropriate channels, including the Platform or via electronic communication.

For any questions, requests, or concerns regarding this Policy or the processing of personal data, You may contact CERTY at michel@gocerty.com, or vlad@gocerty.com, or nour@gocerty.com.