Privacy policy

At GSC Investment, we are committed to protecting the privacy and security of our clients, partners, and employees. This Privacy Policy outlines how we collect, use, store, and safeguard personal data when engaging with our website, platforms, and services. We comply with all relevant privacy laws and regulations, including UAE PDPL, GDPR, UK GDPR, CCPA, and other applicable data protection laws in jurisdictions where we operate.

1. Information Collection & Use
We collect personal data that is voluntarily provided to us, as well as information automatically collected through interactions with our digital platforms.

Types of Information We Collect:
Personal Information: Name, contact details, and other identifiers provided through forms, inquiries, or service interactions.
Cookies & Tracking Data: We use both essential and non-essential cookies to enhance user experience and site functionality. Non-essential cookies (e.g., analytics, marketing) are used only with your consent.
Operational & Financial Data: For compliance verification, fraud prevention, and investment structuring related to catastrophe finance markets.
-Purpose of Data Collection:
-To provide and improve our services.
-To ensure regulatory compliance in financial transactions.
-To personalize user experiences and engagement with our platforms.

2. Data Sharing & International Transfers
GSC Investment does not sell or rent personal data to third parties. However, we may share personal data with:

Trusted service providers for operational, compliance, or security purposes.
Regulatory authorities if legally required under UAE PDPL, GDPR, or other applicable laws.
Sovereign funds, financial institutions, and insurers when required for risk compliance and investment structuring.
-International Data Transfers:
When transferring data outside the EEA, UK, UAE, or other jurisdictions, we ensure compliance through Standard Contractual Clauses (SCCs), adequacy decisions, or other legal safeguards to maintain data protection integrity.

3. Data Security
We employ institutional-grade security measures to protect personal and financial data from unauthorized access, breaches, or loss.

Our Security Measures Include:
Encryption: All data is encrypted both in transit and at rest.
Access Controls: Restricted access to sensitive data through multi-factor authentication (MFA).
Continuous Monitoring: Advanced cybersecurity systems detect vulnerabilities and ensure ongoing compliance with international data protection laws.

4. Your Data Rights
As a data subject, you have the following rights under applicable privacy laws:

Access: Request a copy of the personal data we hold about you.
Correction: Rectify inaccurate or incomplete information.
Deletion: Request the removal of personal data when no longer required for legal or operational purposes.
Data Portability: Receive your data in a structured format for transfer to another service provider.
Objection & Restriction: Restrict or object to the processing of personal data under certain conditions.

To exercise your rights, contact us at: [[email protected]]

5. Data Retention
We retain personal data only as long as necessary to fulfill operational, regulatory, and legal obligations.

Retention Periods:

Personal & Financial Data: Retained as required under financial regulations.
Cookies & Tracking Data: Stored based on user consent preferences.
Archived Data: Securely retained for audit, legal, or compliance purposes, then permanently deleted or anonymized.

6. Data Breach Notification
In the event of a data breach affecting your personal information, we will:
-Notify affected individuals and relevant authorities within legally mandated timeframes.
-Implement corrective measures to prevent future incidents.
-Maintain full transparency regarding potential risks and recommended actions.

We comply with GDPR, UAE PDPL, UK GDPR, and other applicable data breach notification laws.

7. Children's Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect or process data from minors without verifiable parental consent. If such data is identified, we will take immediate steps for deletion.

8. Updates to This Policy
This Privacy Policy may be updated periodically to reflect regulatory changes, operational enhancements, or technological advancements. When significant modifications occur, we will provide notice through our website or direct communication.

We encourage all users to review this policy regularly to stay informed.

9. Contact Information
For questions regarding this Privacy Policy or to exercise your rights, please contact our Data Protection Officer (DPO):

-Email: [[email protected]]
-Postal Address: GSC Investment, Dubai, UAE

GSC Investment remains committed to upholding the highest standards of data privacy, security, and regulatory compliance in all jurisdictions where we operate.