Privacy Policy

This Privacy Policy describes how STAR SKY GOLD TRADING L.L.C ("we", "us", or "our") collects, uses, shares, stores, and protects the personal and corporate data of representatives of our B2B counterparties, website visitors, and business contacts in accordance with United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"). 1. Data Controller The data controller responsible for your personal data is: STAR SKY GOLD TRADING L.L.C Commercial License Number: 1167256 Commercial Register Number: 1940941 Registered Office: The Plaza Al Khor, 37 Baniyas Road, 3rd Floor, Office 322, Al Rigga, Deira, Dubai, United Arab Emirates. 2. Data Protection Contact For any privacy-related inquiries, requests to exercise your rights, or questions, please contact: - Contact Person: SHAH NAWAZ HAJI NAZIR AHMED - Email: info@starskygold.ae 3. Categories of Data We Collect We collect corporate and personal data submitted through our B2B Sourcing Inquiry form and passive technical data, including: - Identity Information: Full name of representative, company legal name, corporate role. - Contact Information: Business email address, business telephone/WhatsApp number. - Geographical Data: Corporate registration country, country of origin/destination of commodities. - Transaction Parameters: Precious metal type (gold/silver), estimated transaction volume, detailed trade request specifications. - Communication Language: Preferred language of communication. - Technical Meta-data: IP address, User Agent, device type, and security token (Cloudflare Turnstile). 4. Purposes and Legal Basis of Processing We process your personal data under the following legal bases: - Performance of Pre-contractual Measures (Art. 11, UAE PDPL): Processing is necessary to evaluate your B2B trade request, establish contact, align transaction parameters, and prepare corporate agreements. - Consent (Art. 6, UAE PDPL): Where you have explicitly consented to data processing by submitting our B2B inquiry form. - Compliance with Legal Obligations (Art. 10, UAE PDPL): To perform mandatory sanctions screening, trade compliance and compliance checks according to UAE regulations. 5. Data Retention Period We store your corporate and contact data securely within encrypted environments for a period of seven (7) years from the date of the last interaction or B2B contract termination. This retention period is mandatory under the UAE Commercial Companies Law and tax regulations for audit and compliance purposes. After this period, data is securely erased or irreversibly anonymized. 6. Receivers and Third-Party Processors We do not sell, rent, or trade your personal data. We may share your data with: - Cloudflare Inc. to process Turnstile security checks (anti-spam). - Zoho Corporation (Zoho CRM) to manage and organize corporate lead information. We seek to ensure appropriate safeguards, including data processing terms where applicable. - UAE Federal Authorities exclusively when required by federal law or official judicial orders. 7. Cross-border Transfers Your data is primarily stored on our secure servers hosted on Amazon Web Services (AWS) in the United Arab Emirates. When transferring data to third-party processors (such as Zoho CRM), we seek to ensure appropriate safeguards, including data processing terms where applicable. 8. Your Data Subject Rights (Data Subject Access Requests - DSAR) Under the UAE PDPL, you have the following rights regarding your personal data: - Right to Access: Request confirmation of data processing and get a copy of your data. - Right to Rectification: Request correction of inaccurate or incomplete data. - Right to Deletion (Right to be Forgotten): Request erasure of your data under specific statutory conditions. - Right to Restrict Processing: Request restriction of processing under certain disputes. - Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent. - Right to Object: Object to marketing communications. To submit a Data Subject Access Request (DSAR), please email info@starskygold.ae. We will respond within 30 days. Your request should include: - Your full name and the name of the company you represent. - The email address used in your initial inquiry. - The type of request (access, correction, deletion, withdrawal). - A clear description of the data involved. - Proof of authority if you are acting on behalf of a company.