Privacy Policy

1. About this policy

This policy explains how HCW Middle East handles personal information when you use this website, register your email or ask about the Investment Centre and its opportunities. It covers this registration website and its hand-off to the Investment Centre, not every service offered by an investment provider.

For privacy enquiries or requests, write to HCW Middle East, Level 7, Unit 702, Building Emaar Square 6, Burj Khalifa Community, Dubai, UAE. You may also reply to an email from the team to request that email contact stops. Do not send passwords, payment details or identity documents with a general privacy enquiry.

2. Information collected

• Registration information: your email address, submission time, the email-contact notice and its version, and a record of your agreement when you submit.
• Visit and campaign information: page and referring addresses, campaign parameters, browser information and time zone. Advertising click and cookie identifiers are collected only when advertising measurement is allowed.
• Form activity: a random form-session identifier and events indicating the first interaction, submission taps and email-validation failures. Validation events contain the field name, not the email you typed.
• Operational records: delivery outcomes, error reports and advertising-event responses needed to operate and troubleshoot the service. Where permitted, advertising reporting can include an IP address and browser information obtained from the request.
• Correspondence: information you choose to provide when contacting the team.

The registration form asks for an email address only. It does not ask for a phone number, payment information or identity documents. Please do not put personal or confidential information in campaign links or page addresses.

3. How information is used

Your information is used to record your registration, facilitate access to the Investment Centre, contact you by email about the Investment Centre and its opportunities, respond to enquiries, administer privacy choices, diagnose faults and protect the service. Registration notifications are sent to the team and its website administrator so they can process your enquiry.

Form activity helps assess registration drop-off. Where allowed, advertising events help measure Facebook advertising and support ad optimisation. Registration is not a commitment to invest, and the website’s “unscreened” registration label is not an assessment of your suitability or eligibility.

Where applicable privacy law requires a legal basis, processing is based on your requested registration, your email-contact agreement, legitimate interests in operating and protecting the service where permitted, or legal obligations. Advertising consent, where required, is separate from agreement to email contact.

4. Sharing and the Investment Centre hand-off

Information is available to authorised HCW Middle East personnel and service providers supporting hosting, data storage, email delivery, site administration and measurement. Lovable supplies the website infrastructure, registration storage, email-delivery service and internal analytics. These providers process information to supply and operate those services.

After successful registration, the website directs you to the Investment Centre with your email address and an invitation code in the destination address. Your name, phone number and registration classification are not included in that address. An email in a destination address may appear in your browser history and destination-service logs; avoid sharing that personalised link.

If a registration-forwarding integration is enabled, registration details may be sent to the team’s connected processing system. Information may also be disclosed where legally required or necessary to establish, exercise or defend legal rights.

Providers of individual investment opportunities may collect additional information directly and have their own privacy obligations. This policy does not grant permission to share sensitive information or customer matching data for advertising.

5. Cookies, session storage and advertising

Session storage holds a random form-session identifier and whether the form has already been started during that browser-tab session. Local storage holds an advertising refusal so it persists between visits. These records do not store the email field’s value.

When permitted, the Meta Pixel uses the _fbp cookie to identify a browser and may use _fbc to record an advertising click. Meta, the company providing Facebook, receives page visits, form starts and successful registration events through the Pixel and Conversions API for advertising measurement and optimisation. Events can include cookie or click identifiers, IP address, browser information, page address, event identifiers and event times. Browser and server registration events use a shared event identifier to reduce duplicate counting.

The current setup does not share your email address or a customer matching identifier with Meta. The email-contact notice is not consent to advertising matching. Advertising tracking is blocked in consent-required or unresolved regions; no advertising-consent banner is currently enabled. Global Privacy Control and saved advertising refusals are honoured. A blocked event is not replayed if tracking becomes allowed later.

You can stop future advertising measurement on this browser using the control below. The choice applies immediately to this site and other open tabs. It does not delete information already received by Meta, stop email contact or remove your registration. Clearing local storage removes the saved refusal; Global Privacy Control continues to apply when enabled. You can also manage cookies in your browser settings.

6. Retention and security

Information is retained for as long as reasonably needed to handle your registration and correspondence, maintain privacy-choice records, operate the service and meet applicable legal obligations. The website does not currently apply an automatic deletion schedule to registration records. A deletion request is considered subject to any information that must be retained by law or for legitimate legal claims.

Registration storage is not publicly readable or writable; submissions are processed on the server. Access is restricted to authorised service operations. No internet transmission or storage system can be guaranteed completely secure.

7. International processing

HCW Middle East is based in Dubai. Hosting, email, measurement and other service providers may process information outside your country, including in countries with different privacy protections. Where applicable law requires safeguards for international transfers, those requirements apply. Contact the team at the postal address above for information about the arrangements relevant to your data.

8. Your rights and choices

Depending on the law that applies, you may request access to your personal information, correction, deletion, restriction, portability or object to processing. You may withdraw email-contact permission at any time by replying to a team email or writing to the postal address above. Withdrawal does not affect processing that was lawful before withdrawal.

Tell the team which email address you registered and what you are requesting. Proportionate identity checks may be needed to prevent disclosure to another person. Requests will be handled within applicable legal time limits, subject to lawful exceptions. You may complain to the privacy regulator competent for your location if you believe your information has been handled improperly.

9. Children and policy updates

This website is intended for adults considering private-market opportunities, not children. Do not submit a child’s information. If you believe a child’s information has been submitted, contact the team using the postal address above.

Changes to this policy will be published on this page with an updated date. Material changes to processing or consent requirements will be communicated where required by applicable law.