Privacy Policy

1. Introduction

Numu Financial Technology LLC ("Numu", "we", "us", or "our") is committed to protecting the privacy and security of your personal and business data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

We comply with the UAE Federal Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), DIFC Data Protection Law No. 5 of 2020, and other applicable data protection regulations.

2. Information We Collect

2.1 Information You Provide

• Business Information: Company name, registration number, trade license details, business address
• Contact Information: Name, email address, phone number, job title
• Financial Information: Bank account details, financial statements, invoices, transaction history
• Authentication Data: Username, password, security questions

2.2 Information We Collect Automatically

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, time spent, features used, clickstream data
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies

2.3 Information from Third Parties

• Credit Bureaus: Credit reports from Al Etihad Credit Bureau (AECB)
• ERP Systems: Business data from connected accounting and ERP platforms
• Banks: Transaction data and account verification information
• Public Records: Company registration details from government sources

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Processing financing applications and credit decisions
• Providing ERP-connected business insights and analytics
• Delivering AI-powered CFO recommendations
• Managing your account and providing customer support

3.2 Risk Management & Compliance

• Conducting credit checks and fraud prevention
• Verifying identity and business legitimacy
• Complying with regulatory requirements and legal obligations
• Monitoring for suspicious activity and security threats

3.3 Improvement & Communication

• Improving our services and developing new features
• Analyzing usage patterns and customer behavior
• Sending service updates and important notifications
• Marketing communications (with your consent)

4. Data Sharing and Disclosure

4.1 We Share Your Information With:

• Service Providers: Cloud hosting, payment processors, analytics providers
• Financial Partners: Banks and lending institutions (for financing services)
• Credit Bureaus: AECB and other credit reporting agencies
• Regulatory Authorities: DIFC Authority, UAE Central Bank (as required by law)
• Professional Advisors: Legal, accounting, and consulting firms

4.2 We Do NOT:

• Sell your personal or business data to third parties
• Share data with advertisers without consent
• Use your data for purposes beyond what's disclosed in this policy

5. Data Security

We implement bank-level security measures to protect your data:

• Encryption: AES-256 encryption at rest, TLS 1.3 in transit
• Access Controls: Multi-factor authentication, role-based access
• Infrastructure: UAE-based data centers with ISO 27001 certification
• Monitoring: 24/7 security monitoring and threat detection
• Audits: Regular security audits and penetration testing

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Active Accounts: For the duration of your relationship with Numu
• Financial Records: 7 years (as required by UAE law)
• Marketing Data: Until you withdraw consent
• Closed Accounts: 90 days after closure (unless legally required longer)

7. Your Rights

Under UAE PDPL and DIFC data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing for marketing purposes
• Withdraw Consent: Withdraw consent for data processing (where applicable)

To exercise these rights, contact us at privacy@numufinance.com

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality (login, security)
• Analytics Cookies: Understand how you use our services
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling cookies may affect service functionality.

9. International Data Transfers

Your data is primarily processed and stored in the United Arab Emirates. If we transfer data outside the UAE, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by DIFC authorities
• Transfers to countries with adequate data protection laws
• Your explicit consent where required

10. Children's Privacy

Our services are intended for businesses and individuals aged 21 and above. We do not knowingly collect information from individuals under 21 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through prominent notice on our platform. The "Last Updated" date at the top reflects when changes were made.

12. Contact Us

For privacy-related questions or to exercise your rights, contact:

Data Protection Officer
Numu Financial Technology LLC
Dubai International Financial Centre
United Arab Emirates
Email: privacy@numufinance.com
General Inquiries: hello@numufinance.com

13. Complaints

If you believe we have not handled your data in accordance with this policy or applicable law, you have the right to lodge a complaint with:

• DIFC Commissioner of Data Protection (for DIFC matters)
• UAE Data Office (for UAE PDPL matters)