1. Introduction
Welcome to FISO. As a leading provider of financial and advisory products and services, we understand the importance of your trust. This Privacy Policy is designed to uphold that trust by ensuring that your personal data is handled with the utmost care, transparency, and integrity. Our commitment to your privacy means we continually strive to maintain high data protection standards, keeping abreast of global data protection norms. We invite you to familiarize yourself with this policy, which sheds light on how we collect, use, and protect your information. If you ever have any questions or concerns about your privacy with FISO, we’re here to address them.2. Scope
This Privacy Policy applies to: Digital Platforms: Our official website, dedicated mobile applications, and any other digital services or platforms we may provide. Social Media: Any interactions you may have with our official profiles on social media platforms such as Facebook, Twitter, LinkedIn, and others. Financial and Advisory Services: This encompasses our range of offerings, including, but not limited to, Personal Loans, Auto Loans, Credit Cards, and any advisory or consulting services we might provide. Offline Interactions: Any personal data we might collect from you during physical events, consultations, or any other offline touchpoints. By engaging with any of the above, you fall within the purview of this Privacy Policy. The terms defined here will guide our interactions and define the boundaries of our commitment to your privacy.3. Data Collection
At FISO, we believe in transparency. When you engage with our platforms or services, we may collect certain types of personal data to enhance your experience and to ensure the smooth functioning of our services. The data we collect includes, but is not limited to: Identification Data: Such as your name, address, phone number, and email address. Financial Information: Including your bank account details, credit score, income details, and any other data pertinent to the financial services you seek from us. Transaction Data: Records of your interactions, payments, and usage of our services. Technical Data: Information about the devices you use to access our platforms, including IP address, browser type, location data, and other relevant technology on the devices you use. Profile Data: Your username, password, purchases, preferences, feedback, and survey responses when applicable. Usage Data: Information on how you use our website, applications, products, and services. Communication Data: Records of any correspondence if you contact us. Social Media Interaction: Any information shared with us directly through our official social media channels. The aforementioned data can be collected directly from you or through automated technologies like cookies. Always remember, we only collect data that is essential to provide and improve the services offered to you.4. Data Usage
The primary reason we collect your personal data is to offer you a seamless and personalized experience with FISO. We use the information collected for the following purposes: Service Provisioning: To register you as a new customer, process your transactions, and deliver our services. Communication: To notify you about changes to our services, products, terms, conditions, or privacy policy. Also, to communicate any other pertinent information related to our services or your account. Personalization: To provide content and services tailored to your individual needs and preferences. This includes offering you personalized financial advice or product recommendations. Security: To protect our platforms and services from fraud, unauthorized access, or any potential threats. This includes troubleshooting, data analysis, and system testing. Improvement: To ensure our platforms and services are presented in the most effective manner for you and your device, and to refine our overall product and service offerings. Legal Obligations: To comply with any legal requirement or to enforce our terms of service, including investigations of potential violations. Your trust is paramount, and as such, your data will only be used in ways that are consistent with your expectations and the commitments laid out in this policy.5. Data Sharing and Transfers
a. Partners and Third Parties: We collaborate with trusted third-party financial and non-financial institutions to offer you a comprehensive range of services. In some circumstances, this necessitates sharing your personal data with these entities. This sharing is solely for the purpose of facilitating the products and services you request or to improve our service offerings.b. Service Providers: We may employ external companies and individuals to facilitate our service (“Service Providers”), to provide the service on our behalf, or to assist us in analyzing how our service is used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
c. International Transfers: Due to the global nature of our operations, your personal data may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws might differ from your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.
d. Legal Requirements: We might disclose your personal data in the good faith belief that such action is necessary:
- To comply with a legal obligation or court order.
- To protect and defend our rights or property.
- To prevent or investigate potential wrongdoing in connection with the service.
- To protect the personal safety of users or the public.
- To protect against legal liability.
6. Data Retention and Deletion
a. Retention Period: We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. This duration varies depending on the nature of the information and the purposes for which it is used. For instance, your transactional data might be retained longer than your profile data to comply with financial regulations and for audit purposes.b. Data Deletion: Once the retention period has expired, we will securely delete or anonymize your personal data. If direct deletion is not possible due to technical restrictions, we will ensure that necessary measures are in place to prevent any further use of such data.
c. Request for Data Deletion: You have the right to request the deletion of your personal data at any time. Upon such a request, and where no legal or compliance obligations prevent us, we will ensure that your data is deleted from our systems. For deletion requests or any related concerns, please contact us at the provided contact details.
d. Backups: For security, technical, or disaster recovery reasons, your personal data might remain in backups for an additional period after deletion. However, it will not be available for operational purposes and will be deleted entirely after a predefined period.
7. User Rights
7. User Rights
a. Right to Access: You have the right to request details about the personal data we hold about you and how we process it.b. Right to Rectification: If you believe that any personal data we hold about you is incorrect or incomplete, you can request that we correct or supplement such data.
c. Right to Erasure: You can request the deletion of your personal data, as long as there are no legal obligations or legitimate business reasons for retaining it.
d. Right to Restriction: You have the right to request the restriction of processing your personal data, under certain conditions.
e. Right to Object: In certain circumstances, you have the right to object to the processing of your personal data, such as for direct marketing purposes.
f. Right to Data Portability: You have the right to request the transfer of your personal data that you provided us with, in a structured, commonly used, and machine-readable format.
g. Right to Withdraw Consent: If our processing is based on your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of the processing carried out before the withdrawal.
h. Right to Lodge a Complaint: If you believe that we have not complied with the relevant data protection laws, you have the right to lodge a complaint with a supervisory authority.
8. Data Protection
a. Technical Measures: We use advanced technology and encryption to protect your personal data against unauthorized access, modification, or deletion.b. Organizational Measures: Only authorized personnel have access to your personal data, and they are required to treat the information as confidential.
c. Training: Our staff receives regular data protection training to ensure the safe handling of your personal data.
d. Incident Management: In case of a data breach or other security incidents, we have an established incident management process to address and mitigate the impact on affected individuals and ensure that similar incidents don't reoccur in the future.
e. Secure Partnerships: We choose partners and third-party service providers who prioritize data protection and agree to treat your personal data in a manner consistent with our policies and legal obligations.
f. Continuous Review: Our data protection measures are continuously reviewed and updated to ensure they are effective and in line with best practices and regulatory requirements.
9. Cookies and Tracking
a. Use of Cookies: Our website, mobile application, and social media platforms utilize cookies to enhance user experience, analyze site usage, and offer tailored content. Cookies are small files stored on your device to record your preferences and other information that helps facilitate your interactions with our platforms.b. Types of Cookies: We employ different types of cookies:
Session Cookies: Temporary cookies that remain until you leave our website or app. They are automatically deleted when you close your browser.
Persistent Cookies: These remain on your device for a predetermined period and can be used by our platforms each time you return.
Third-party Cookies: Placed by third parties we do business with; these may be used to track your browsing habits or optimize advertising for you across different websites.
c. Managing Cookies: Most browsers offer settings that allow you to choose whether to accept cookies or reject them. You can also delete cookies already stored on your device. Please note that disabling cookies may negatively affect your online experience on our platforms.
d. Tracking: Beyond cookies, we may use web beacons, pixel tags, and other tracking technologies to gather information about your behavior on our platforms and assess the effectiveness of our advertising and content.
e. Consent: By using our platforms, you consent to our use of cookies and tracking technologies as described above. Should you not agree, you can adjust your browser settings or cease using our platforms.
10. Third-party Links and Services
a. External Links: Our platforms may contain links to third-party websites and services. This policy does not apply to those external sites, and we cannot control or be held responsible for the privacy practices or content of such sites.b. Responsibility: We encourage you to be aware when leaving our platform and to read the privacy policies of each third-party website or service that you visit or utilize.
c. Service Integration: Our platforms may offer integrations with third-party services. If you choose to use these integrations, we might share information with these third parties. Make sure to review their terms and privacy policies to understand how they process your data.
d. No Endorsement: The inclusion of third-party links or services on our platforms does not imply an endorsement of the third parties or their services. We are not responsible for any damages or losses arising from your use of these third-party sites or services.
11.Children’s Privacy
a. Age Limitation: Our platforms and services are not intended for or directed at children under the age of 13 (or the relevant age in your jurisdiction). We do not knowingly collect, maintain, or use personal data from children under this age.b. Parental Consent: If we become aware that a child under the defined age has provided us with personal data without parental consent, we will take steps to remove such information and terminate the child's account, if applicable.
c. Parental Rights: Parents or guardians who believe that their child has submitted personal information to us and wish to have it deleted may contact us at the specified contact method referenced herein. We commit to assisting parents in protecting their children’s privacy.
12. Changes to the Privacy Policy
a. Updates: We reserve the right to update or modify this Privacy Policy at any time and for any reason. The date of the latest revision will be indicated at the top of the policy.b. Notification: In the event of material changes to this policy, we will notify our users via a prominent notice on our platforms, and where appropriate, by direct notification to users via email or other communication methods.
c. Responsibility to Review: We encourage you to periodically review this Privacy Policy to be informed about how we are protecting your data and to check for any updates. Your continued use of our platforms after the posting of changes will indicate your acceptance of such changes.
13. Complaints and Redress
a. Voicing Concerns: If you have any concerns or complaints about how we handle your personal data or our privacy practices, we encourage you to contact us. We are committed to working with you to resolve any complaints.b. Procedure: Should you feel that your complaint has not been adequately resolved by us, you have the right to escalate the matter. Depending on your jurisdiction, you may have a right to lodge a complaint with your local data protection authority or another regulatory body.
c. Time Frame: We will aim to respond to and resolve complaints within 30 days. If it will take us longer than this time frame due to the complexity of the complaint, we will notify you of the expected time frame for resolution.
14. Contact Information
a. Reaching Out: For any questions, comments, requests, or complaints related to this Privacy Policy or our data practices, please contact us through the methods provided below.b. Email: You can send an email to our Data Protection Officer at fiso@fsmss.com.
c. Postal Address: M-05 & M-06 Business Atrium Building Oud Metha Dubai, United Arab Emirates. P.O. Box 78030
14. Consent and Agreement
a. Granting Consent: By using our services, platforms, and applications, you are granting us consent to process your personal data as described in this Privacy Policy. If we seek to use your personal data in a manner not described in this Privacy Policy, we will request your explicit consent.b. Withdrawal of Consent: You have the right to withdraw your consent at any time. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. If you choose to withdraw your consent, we may not be able to provide certain products, services, or features to you.
c. Periodic Acknowledgement: From time to time, we may require you to confirm or update your consent regarding our data practices, especially when we introduce new services or features that may affect the way we handle your personal data.
d. Age Limitation: By using our services, you affirm that you are at least the age of majority in your country or region, or that you have given us your consent to allow any of your minor dependents to use this site. We do not knowingly solicit or collect personal data from individuals under the age of majority without appropriate consent.
e. Agreement: Your continued use of our services after any updates or changes to this Privacy Policy constitutes your agreement to such changes. If you do not agree to such changes, please discontinue use of our services.