Privacy Policy
Your data. Our responsibility.
Arkē takes the privacy of its clients, prospects, and website visitors seriously. This policy explains what personal data we collect, how we use it, how we protect it, and what rights you have over it.
This policy applies to all individuals who interact with our website, our services, or our team. It covers our operations across all jurisdictions in which Arkē is active.
What we collect, and why.
We collect personal data only when there is a clear reason to do so. The categories of data we may collect include:
- Identity data
- your name, date of birth, nationality, and government issued identification where required for regulatory onboarding.
- Contact data
- your email address, phone number, WhatsApp contact, and physical address.
- Financial data
- information about your investment objectives, risk tolerance, assets, and income, collected as part of the advisory and onboarding process.
- Usage data
- how you interact with our website, including pages visited, time on site, device type, and IP address. This is collected automatically via cookies and analytics tools.
- Communications data
- records of correspondence between you and Arkē, including email, WhatsApp, and meeting notes.
We do not sell personal data. We do not share it with third parties for marketing purposes.
What we do with it.
We use personal data for the following purposes:
- To deliver our services, including portfolio management, financial planning, and investment advisory.
- To meet our regulatory obligations, including KYC, AML, and suitability assessments required by regulators in each jurisdiction we operate in.
- To communicate with you, responding to inquiries, sending market updates, and keeping you informed about your investments or relevant developments.
- To improve our website and tools, using anonymised usage data to make our digital experience more useful.
Our legal bases for processing depend on the use case and include contractual necessity, legitimate interests, legal obligation, and consent.
Where this applies.
Arkē operates across multiple regulated jurisdictions. Data protection obligations in each are as follows:
- UAE, DIFC
- regulated under the DIFC Data Protection Law, DIFC Law No. 5 of 2020. Data processed by our DIFC entity is subject to DFSA oversight.
- Bahrain
- regulated under the Personal Data Protection Law, Law No. 30 of 2018, overseen by the Central Bank of Bahrain, CBB.
- Saudi Arabia
- regulated under the Personal Data Protection Law, PDPL, issued by the Saudi Data and AI Authority, SDAIA.
- Singapore
- regulated under the Personal Data Protection Act 2012, PDPA, overseen by the Personal Data Protection Commission, PDPC.
- European Union and EEA
- where applicable, data processing complies with the General Data Protection Regulation, GDPR.
For the specific entity responsible for processing your data and the applicable regulatory framework, refer to the Regulatory Disclosures page or contact us directly.
What you can ask us to do.
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, subject to our regulatory retention obligations.
- Object to or restrict how we process your data.
- Withdraw consent where processing is consent based.
- Receive your data in a portable format where technically feasible.
To exercise any of these rights, contact us.
We will respond within the timeframe required by applicable law in your jurisdiction.
Cookies and tracking.
Our website uses cookies to function properly and to help us understand how visitors use the site. We use the following categories:
- Essential cookies
- required for the site to work. These cannot be disabled.
- Analytics cookies
- help us understand traffic patterns and usage. These are anonymised.
- Preference cookies
- remember your language selection and other settings.
We do not use advertising or tracking cookies for third party marketing.
You can manage cookie preferences through your browser settings or via our cookie consent tool, if implemented.
Data retention
We retain personal data for as long as required to fulfil the purpose for which it was collected, or as required by regulatory or legal obligation.
For client records, we retain data for the minimum period required by applicable regulation in each jurisdiction following the end of the client relationship.
Contact and complaints
If you have questions about this policy or how your data is handled, contact us.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.