Effective date: 01 JULY 2026 Last updated: 01 JULY 2026
1. Introduction
City Commerce Finance LLC ("City Commerce Finance", "we", "us" or "our") is committed to protecting the privacy and personal data of everyone who interacts with us and with this website (citycommercefinance.com, the "Website").
This Privacy Policy explains what personal data we collect, how and why we use it, who we share it with, how long we keep it, how we protect it, and the rights you have under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 and its Executive Regulations, the "PDPL").
By using the Website or submitting your information to us, you acknowledge that you have read and understood this Privacy Policy.
2. Who we are (the Data Controller)
| Legal entity | City Commerce Finance LLC |
| Registered address | Office No. 504, 5th Floor, Nouf Tower, Port Saeed, Deira, Dubai, United Arab Emirates |
| Telephone | +971 4 552 5640 |
| General email | info@citycommercefinance.com |
| Data protection contact / DPO | legal@citycommercefinance.com |
We act as the Data Controller in respect of the personal data described in this policy.
3. Scope
This policy applies to personal data we process about: visitors to the Website; prospective and existing clients; individuals who contact us by phone, email, WhatsApp or our enquiry forms; and representatives of businesses and partners we deal with. It does not apply to third-party websites we link to (see Section 13).
4. The personal data we collect
Depending on how you interact with us, we may collect:
- Identity & contact data — name, job title, company, email address, telephone number and similar details you provide.
- Enquiry & financial-interest data — the financing requirement you tell us about (for example service of interest, indicative amount, sector, country, preferred date) submitted through our forms or in correspondence.
- Know-Your-Customer (KYC) data — where we proceed with a client relationship, identification and due-diligence information required by applicable anti-money-laundering (AML) and KYC obligations, such as identity documents, proof of address, company ownership details and source-of-funds information.
- Communications data — the content of your messages, emails and call notes.
- Technical & usage data — IP address, browser and device type, pages viewed and similar analytics data collected automatically via cookies and similar technologies (see Section 11).
We do not intentionally collect special-category or sensitive personal data through the Website. Please do not send us such data unless we specifically request it.
5. How we collect personal data
- Directly from you — when you complete an enquiry form, call or message us, or correspond with us.
- Automatically — through cookies and similar technologies when you use the Website.
- From third parties — for example banks, financial institutions, business partners, KYC/AML screening providers or publicly available sources, where relevant to a transaction.
6. Why we use your personal data, and our lawful basis
Under the PDPL we must have a lawful basis for each processing activity. The table below summarises ours:
| Purpose | Lawful basis (PDPL) |
|---|---|
| Respond to your enquiry and provide information you request | Your consent, and/or steps taken at your request prior to a contract |
| Assess and arrange financing facilities for you with banks/financial institutions | Performance of a contract / pre-contract steps at your request |
| Carry out KYC, AML and sanctions checks | Compliance with a legal obligation |
| Manage our client relationship and provide ongoing service | Performance of a contract / legitimate business interest |
| Improve and secure the Website (analytics, fraud/abuse prevention) | Legitimate business interest, and consent for non-essential cookies |
| Send you updates or marketing you have asked for | Your consent (you may withdraw it at any time) |
Where we rely on your consent, you may withdraw it at any time (see Section 12). Withdrawing consent does not affect processing already carried out.
7. Who we share your personal data with
We share personal data only where necessary, and with appropriate safeguards, including with:
- Banks and financial institutions / funding partners — to assess, structure and arrange the financing you ask us to facilitate.
- Service providers — IT, hosting, communications and professional advisers acting on our instructions.
- Regulators, authorities and law-enforcement — where required to comply with a legal or regulatory obligation (including AML/KYC).
- Professional advisers — lawyers, auditors and consultants, where relevant.
We do not sell your personal data.
8. International / cross-border transfers
Some recipients may be located outside the UAE. Where we transfer personal data abroad, we do so only in accordance with the PDPL — that is, to a jurisdiction recognised as providing an adequate level of protection, or subject to appropriate safeguards, or with your explicit consent, or where another PDPL condition for transfer is met.
9. How long we keep your personal data
We keep personal data only for as long as necessary for the purposes set out above, including to meet legal, regulatory, tax, accounting and AML record-keeping requirements, after which it is securely deleted or anonymised. AML records retained for the period required by UAE law.
10. How we protect your personal data
We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction, taking into account the nature and risks of the processing. These measures include access controls, encryption in transit, staff confidentiality, secure storage.
11. Cookies and similar technologies
The Website uses only the cookies and similar technologies needed for it to function and to keep it secure. Any non-essential cookies are used only with your consent, which you can manage or withdraw at any time via your browser settings. The Website loads Google Fonts (to display the Playfair Display and Inter typefaces), which involves a request to Google's servers and may expose your IP address to Google for that purpose. We do not currently use advertising or analytics cookies. If we introduce analytics or other third-party scripts in future, we will update this policy and, where required, ask for your consent.
12. Your rights under the PDPL
Subject to the conditions and exceptions in the PDPL, you have the right to:
- Be informed about how your personal data is processed;
- Access your personal data and obtain a copy;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten") in the circumstances allowed by law;
- Restrict or stop certain processing;
- Data portability — receive your data in a structured, machine-readable format and have it transferred where technically feasible;
- Object to processing in the circumstances allowed by law;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with the UAE Data Office.
To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframe required by the PDPL. We may need to verify your identity before acting on a request. Exercising these rights is free of charge in most cases.
If you are not satisfied with our response, you may complain to the UAE Data Office (the federal supervisory authority). +971 800 12 or email Info@tdra.gov.ae.
13. Third-party links
The Website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties; please review their own privacy policies.
14. Children
The Website and our services are intended for businesses and adults. We do not knowingly collect personal data from children.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was last revised. Material changes will be notified by posting on the Website.
16. Governing law
This Privacy Policy and any matter relating to the processing of your personal data are governed by the federal laws of the United Arab Emirates, including the PDPL, and are subject to the jurisdiction of the competent courts of Dubai, UAE.
17. Contact us
For any questions about this Privacy Policy or your personal data, contact:
City Commerce Finance LLC
Office No. 504, 5th Floor, Nouf Tower, Port Saeed, Deira, Dubai, UAE
Tel: +971 4 552 5640
Email: legal@citycommercefinance.com