Privacy
Privacy policy
How RBM Mineral Resources DMCC collects, uses, protects and keeps personal data, under UAE Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data.
01 · Who we are
The controller of your data
RBM Mineral Resources DMCC
DMCC registration DMCC198655, licence DMCC-912115. Unit 5430, Level 54, Almas Tower, Jumeirah Lakes Towers, Dubai, United Arab Emirates. A member of RBM Group.
Privacy questions and requests
Our Compliance Officer handles privacy questions and requests to exercise your rights.
compliance@rbmgroup.ae →02 · Whose data and what data
What we collect
Customers and online shop users
Name, date of birth, nationality, contact details, address, identity documents and their images, selfie and liveness check, Emirates ID or passport number, occupation, source of funds and wealth information, bank account details used for payment, order history, account login and device data.
Directors, owners, signatories and staff of corporate customers and suppliers
Name, identity documents, nationality, address, role, ownership percentage and PEP status.
Visitors to our website
Technical data (IP address, browser, pages visited) through essential cookies.
People who contact us or raise a concern
What they choose to tell us.
We also obtain data from sanctions, PEP and adverse media screening services, public registers and identity verification providers.
03 · Why we use it
Purpose and legal basis
04 · Who we share it with
Only where needed, never sold
UAE authorities where the law requires, including the Financial Intelligence Unit, the Ministry of Economy and Tourism, the Executive Office for Control and Non-Proliferation, the Federal Tax Authority and the courts.
Refiners and banks that need due diligence information on a supply chain or payment.
Identity verification, screening, secure logistics, hosting and IT providers acting on our instructions, under contracts that protect your data.
Other members of RBM Group, where needed for the purposes above.
05 · Retention, rights and security
How we look after it
How long we keep it
UAE anti-money laundering law requires us to keep due diligence and transaction records for at least five years after the end of the relationship or the transaction. We keep other data only as long as needed for the purpose it was collected for.
Your rights
You may ask to access, correct, restrict or object to the use of, receive in a portable form, or erase your data, and withdraw marketing consent at any time. Some rights are limited where the law requires us to keep data, and we cannot disclose certain information relating to anti-money laundering reports. We respond within 30 days. You may complain to the UAE Data Office.
How we protect it
Identity documents and due diligence files are stored in access-controlled systems with encryption in transit and at rest, audit logging, and access limited to staff who need it. We do not store payment card data, as we do not accept card payments. If a breach puts your data at risk, we will notify you and the UAE Data Office as the law requires.
Cookies
This website uses only essential cookies: to keep you signed in, hold your cart and remember your language. We do not use advertising or tracking cookies.
International transfers
We never sell personal data. Where data is transferred outside the UAE, we do so only where the law permits and with appropriate safeguards.
Changes
We review this policy at least annually. The current version is always published on this page.
Exercise your rights
Email our Compliance Officer to access, correct or erase your data, or to withdraw marketing consent. We respond within 30 days.