Privacy Policy

1. Introduction

Fikra Ventures (“Fikra,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit our website, submit information through our forms, or otherwise interact with us online (the “Website”).

This policy is intended to reflect applicable data protection requirements in the United Arab Emirates, including the data protection frameworks in the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM), as applicable to the relevant Fikra entity and processing activity.

2. Who We Are

Fikra Ventures operates through the following entities (together, the “Fikra Entities”):

• FikraAI Venture Studio Ltd. (DIFC),Dubai, United Arab Emirates
  RegisteredNumber: 8509

• Fikra Ventures Holdings Limited. (ADGM), Abu Dhabi, United Arab Emirates
  Company Number: 31118

3. Data Controller

The Fikra Entity acting as the data controller depends on the context of your interaction with us:

• In most Website interactions (including general inquiries and talent outreach), the controller will be Fikra AI Venture Studio Ltd. (DIFC).

• In certain holding-company or investor-related interactions (where applicable), the controller may be Fikra Ventures Holdings Limited (ADGM).

• In some cases, Fikra Entities may act as joint controllers where they jointly determine the purposes and means of processing.

If you want confirmation of the controller for a specific interaction, contact us at privacy@fikra.ventures.

4. Personal Data We Collect

5. How We Use Personal Data

6. Legal Basis for Processing

7. Sharing and Disclosure

We may share personal data with the following categories of recipients, where necessary for the purposes described in this policy:

• Serviceproviders and vendors thatsupport our operations (for example, website hosting, analytics,email and collaboration tools, CRM systems, cloud storage anddocument management, e-signature tools, scheduling, and otherbusiness systems). These providers process personal data on ourbehalf under appropriate contractual safeguards.
  
  Examplesof such providers may include cloud and collaboration platforms,document-sharing and e-signature providers, and CRM vendors. Thespecific providers we use may change over time.

• Professionaladvisers (includinglegal, accounting, and audit) subject to confidentiality obligations.

• Authorities,regulators, and courts whererequired by law or where necessary to protect our rights and thesecurity of our business and users.

• Transactioncounterparties inconnection with a merger, acquisition, restructuring, or similartransaction (subject to appropriate protections).
  
  We do not sell personal data.

8. International Data Transfers

Some service providers we use may process or store personal data outside the UAE. Where personal data is transferred internationally, we take steps designed to ensure an appropriate level of protection consistent with applicable DIFC/ADGM requirements, which may include contractual safeguards and vendor due diligence.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, including to comply with legal, regulatory, accounting, and audit requirements. Retention periods vary depending on the nature of the interaction (for example, general inquiries, recruitment, or investor/partner discussions). When data is no longer needed, we delete, anonymize, or securely archive it in accordance with our internal retention practices.

10. Your Rights

Subject to applicable law, you may have rights to:

• Access personal data we hold about you.

• Correct inaccurateor incomplete data

• Delete personaldata in certain circumstances

• Restrict or object tocertain processing

• Withdrawconsent whereprocessing is based on consent

To exercise your rights, contact privacy@fikra.ventures. We may request information to verify your identity before responding.

You may also have the right to raise a concern with the relevant data protection authority depending on the applicable framework (DIFC or ADGM).

11. Security

We maintain reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No system is completely secure, and we cannot guarantee absolute security.