Luminar Invest Capital DMCC ("Luminar Invest") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have. We comply with the EU General Data Protection Regulation (GDPR), the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, and the DIFC Data Protection Law No. 5 of 2020.
1. Data controller
The data controller is Luminar Invest Capital DMCC, registered in DMCC, Dubai. Our Data Protection Officer can be reached at contact@luminarinvest.com.
2. Data we collect
- Identity data: name, date of birth, nationality, ID document
- Contact data: email, phone, postal address
- Financial data: source of funds, tax residency, bank/wallet information
- Transactional data: deposits, withdrawals, portfolio holdings
- Technical data: IP address, device, browser, session logs
3. Why we use your data
- To open and operate your account (contractual basis)
- To comply with KYC/AML obligations (legal basis)
- To execute investment decisions and produce reports (contractual basis)
- To prevent fraud and ensure platform security (legitimate interest)
- To send service updates and, with your consent, marketing communications
4. Data sharing
We share data only with parties strictly necessary to deliver our services: regulated custodians, KYC providers, payment processors, cloud infrastructure providers, and regulatory authorities upon valid request. We never sell your data.
5. International transfers
Some of our service providers operate outside the UAE and the EEA. When personal data is transferred, we rely on appropriate safeguards: Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms.
6. Retention
We retain personal data for the duration of the contractual relationship and for an additional period of 10 years after account closure, as required by anti-money laundering regulations.
7. Your rights
- Right of access
- Right to rectification
- Right to erasure (subject to legal retention obligations)
- Right to restriction and objection
- Right to data portability
- Right to withdraw consent at any time
To exercise any of these rights, contact contact@luminarinvest.com.
8. Security
We implement strong technical and organisational measures: encryption in transit and at rest, multi-factor authentication, segregated environments, role-based access, regular penetration testing, and 24/7 security monitoring.
9. Complaints
If you consider your rights have not been respected, you may file a complaint with the UAE Data Office, the DIFC Commissioner of Data Protection, or your local EU supervisory authority.