Privacy Policy
IVMAR Group LLC ('IVMAR', 'we', 'us') is the Data Controller of the personal data processed through this website. This notice is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and Cabinet Decision No. 10 of 2023, and — where applicable — with Regulation (EU) 2016/679 (GDPR), the ADGM Data Protection Regulations 2021 and the DIFC Data Protection Law No. 5 of 2020.
Data Controller
IVMAR Group LLC — Dubai, United Arab Emirates — TRN 104780483400001. Contact: info@ivmargroup.com.
Data Protection Contact
Requests concerning personal data and the exercise of the rights listed below can be sent to privacy@ivmargroup.com. Response times comply with Art. 13 PDPL.
Lawful basis and purposes
We process personal data on the following bases: (a) execution of pre-contractual and contractual measures with clients; (b) legal obligations (AML, tax, ADGM/DIFC regulatory); (c) legitimate interest in the security and operation of the site; (d) explicit consent for analytics and non-essential cookies. Categories processed: identity, contact, professional profile, technical metadata, communications sent to IVMAR.
Retention
Advisory-mandate data is retained for the mandate's duration and for the periods required by AML/CTF law (10 years by default). Contact-form data is retained for up to 24 months from the last interaction. Aggregated analytics is retained for up to 14 months.
Sharing and processors
Personal data may be processed by carefully selected providers who act as Data Processors under written agreements: hosting infrastructure (Cloudflare / Supabase — EU/US), payment provider (Stripe, PCI-DSS Level 1), and AI provider used inside the client portal (Google/OpenAI via the Lovable AI Gateway). We do not sell or share personal data with any third party for advertising purposes.
International transfers
Cross-border transfers take place only towards jurisdictions offering an adequate level of protection, or under Standard Contractual Clauses and equivalent safeguards recognised by UAE regulation and — where applicable — by the European Commission.
Your rights
Under PDPL Articles 13-19 and, where applicable, GDPR Articles 15-22, you can at any time: (i) obtain confirmation and a copy of your data; (ii) rectify or update inaccurate data; (iii) request erasure; (iv) restrict or object to processing; (v) request portability; (vi) withdraw a previously granted consent; (vii) lodge a complaint with the UAE Data Office or another competent authority.
Security measures
The site enforces HTTPS/TLS 1.3, Row-Level Security on all client data, encryption at rest, principle of least privilege and audit logging on the client portal. Access to the portal is protected by password, one-time code and, on request, multi-factor authentication.
Cookies and technologies
Only strictly necessary cookies (session, language, security) are stored by default. Analytics or marketing cookies are activated only after explicit consent expressed through the banner. Consent can be withdrawn at any time from the 'Cookie settings' link in the footer.
Changes to this policy
IVMAR may update this policy to reflect regulatory or operational changes. The current version and its effective date are always shown at the top of the page.