Privacy Policy

Last updated: September 2026

1. Introduction

EXE Capital Group ("EXE Capital," "we," "us," or "our") is a Dubai-based independent capital advisory group operating across traditional finance and digital assets, registered at Dubai World Trade Centre, Dubai, United Arab Emirates.

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit exe-capital.com (the "Site"), engage with us through our contact channels or meeting booking tools, or become a prospective or active client across any of our practice areas: Capital & Credit Advisory, Licensing & Regulation Advisory, Asset & Wealth Management, Tokenisation & RWA, Payment Solutions, and M&A Advisory.

By using this Site or engaging with EXE Capital, you acknowledge the data practices described in this Policy. This Policy applies to our Site and general prospective-client intake; any active advisory mandate will additionally be governed by data handling terms set out in your engagement letter, particularly where AML/KYC, banking, or regulatory disclosure obligations apply.

2. Information We Collect

We collect information in the following ways:

Information you provide directly: name, job title, company name, email address, phone number, and any details submitted through contact forms, meeting booking tools, or direct correspondence (for example, describing a raise, a licensing need, a portfolio mandate, a tokenisation project, or an M&A objective).
Prospective client and onboarding information: where a conversation progresses toward a mandate, we may request additional corporate, ownership, financial, or identification information relevant to know-your-customer (KYC), anti-money laundering (AML), sanctions screening, and suitability checks appropriate to the practice area involved.
Technical and usage data: IP address, browser type, device information, pages visited, referral source, and general usage patterns, collected automatically through cookies and similar technologies (see Section 5).
Communications: records of calls, meetings, and correspondence exchanged in the course of evaluating or progressing an engagement.

We do not knowingly collect sensitive personal data (such as health or biometric information) through the Site, and we do not collect financial account credentials through any Site form.

3. How We Use Your Information

We use collected information to:

respond to enquiries and schedule introductory or advisory meetings;
assess suitability and conduct AML/KYC, sanctions, and conflicts-of-interest checks ahead of a prospective mandate;
prepare, structure, and deliver advisory work across Capital & Credit Advisory, Licensing & Regulation, Asset & Wealth Management, Tokenisation & RWA, Payment Solutions, and M&A Advisory engagements;
maintain the relationship-level coordination described under EXE Concierge, where a client's work spans more than one practice area;
operate, secure, and improve the Site, including diagnosing technical issues and understanding how content is used;
meet our own legal, regulatory, and record-keeping obligations under UAE law; and
communicate updates relevant to an active or prospective engagement, where you have not opted out of such communications.

4. Legal Basis for Processing

Where applicable data protection law requires a stated legal basis, we rely on one or more of the following: your consent (for example, submitting a contact form); the necessity of processing to take steps toward, or perform, an engagement at your request; our legitimate interests in operating and securing the Site and maintaining client relationships; and compliance with legal or regulatory obligations, including AML/CFT requirements applicable to regulated and regulated-adjacent advisory activity in the UAE.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to remember preferences, understand aggregate usage, and support site performance and security. This may include:

Essential cookies: required for the Site to function correctly.
Analytics cookies: used to understand how visitors interact with the Site so we can improve content and structure.
Functional cookies: used to support features such as meeting booking tools.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of the Site.

6. How We Share Information

We do not sell personal data. We may share information in the following circumstances, and only as needed:

Regulators and authorities: where required in connection with licensing, regulatory, or compliance work involving bodies such as VARA, ADGM, DFSA, CMA, or CBUAE.
Banks and financial counterparties: where an engagement under Capital & Credit Advisory or Payment Solutions involves lender outreach, banking access, or settlement infrastructure, and disclosure is necessary to progress that mandate.
Professional advisors and service providers: legal counsel, auditors, technology vendors, and other parties supporting an engagement, bound by confidentiality obligations.
Corporate transactions: in connection with a merger, acquisition, restructuring, or sale involving EXE Capital itself, subject to appropriate confidentiality protections.
Legal requirements: where disclosure is required by law, court order, or a competent UAE authority.

Any sharing beyond these categories, for a specific mandate, will be addressed in the relevant engagement documentation.

7. International Data Transfers

Given the cross-border nature of capital advisory, licensing, and tokenisation work, personal data may be transferred to, and processed in, countries outside the UAE, including where a lender, regulator, co-investor, or technology partner is located abroad. Where such transfers occur, we take reasonable steps to ensure an appropriate level of protection consistent with applicable UAE data protection requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including meeting our AML/CFT record-keeping obligations, which may require retention for a set period following the conclusion of an engagement, consistent with applicable UAE regulatory requirements. Site usage and analytics data is retained for a limited period sufficient for the analytical purposes described above.

9. Data Security

We apply reasonable administrative, technical, and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, or loss. No system is completely secure, and we cannot guarantee absolute security of information transmitted to us, particularly over the internet.

10. Your Rights

Depending on applicable law, you may have the right to:

request access to the personal data we hold about you;
request correction of inaccurate or incomplete data;
request deletion of your data, subject to our legal and regulatory retention obligations;
object to, or request restriction of, certain processing activities;
withdraw consent, where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before actioning a request, and certain requests may be limited where retention is required for AML/CFT or other regulatory purposes.

11. Children's Privacy

The Site and our services are directed at corporate entities, institutional counterparties, and sophisticated private clients. We do not knowingly collect personal data from individuals under the age of 18, and any such data identified will be deleted.

12. Third-Party Links

The Site may reference or link to third-party websites, including regulators (VARA, ADGM, DFSA, CMA, CBUAE), banking partners, and industry sources. This Policy does not extend to those third-party sites, and we encourage you to review their respective privacy practices independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, regulatory environment, or data practices. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected on this page; continued use of the Site after changes are posted constitutes acceptance of the revised Policy.

14. Contact Us

Questions regarding this Privacy Policy, or requests relating to your personal data, can be directed to:

EXE Capital Group
EXE, 212, Convention Tower, Dubai World Trade Centre, Dubai, UAE
info@exe-capital.com