Privacy Policy

Last updated: 24 July 2026

Introduction

Thank you for engaging with us at Tinia Capital Partners – FZCO ("TCP"). We are committed to ensuring that your privacy is protected. This Privacy Policy explains how we use the personal information that we collect and process as a business and outlines the procedures which are in place to safeguard your privacy. It also explains how you can update or change how your data is used to reflect your preferred relationship with us.

If we ask you to provide any information by which you can be identified either when visiting our website or engaging in a relationship with us, you can be assured that it will only be used in accordance with this privacy statement.

We are a data controller in respect of the data that we hold about you. As a company registered in the IFZA free zone, Dubai, United Arab Emirates, we manage personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"). Where we process personal data of individuals located in the European Economic Area or the United Kingdom — for example, European investors, partners, or counterparties — we also apply data protection standards consistent with the EU General Data Protection Regulation ("GDPR") and, where applicable, the UK GDPR.

What types of data do we collect and hold?

The personal data that we hold about you will be specific to you and your relationship with us at TCP and may include some of the following types of data and other data relevant to the transaction:

• Personal identifiers: such as your name, gender, title, and date of birth;
• Contact information: such as your work address, work email, work telephone number; we do not ask for a home contact address, but you may provide this to us or this data may be obtained as part of our due diligence into your business;
• Business details: such as your company name, job title, and specialism;
• Your business financials including details of shareholders, copies of business accounts, financial forecasts, and business plans;
• Information to assist us to verify your identity including anti-money laundering documentation which may include a certified copy of your passport or driving license and copies of recent utility bills; and
• Information about your visits to our website, and any engagement with our online information services.

In order to provide our services, we will collect and process personal data relating to third parties who are engaged in transactions that involve our clients (including other shareholders; professionals; or individuals in a target business).

How do we collect this personal data?

We collect most of our information directly from you, as this enables you to have as much control over the data you share with us. We do this when you contact us directly or through our website, when you subscribe to any of our information services, or when you interact with us through social media; or email or call us.

We use the information to manage our anti-money laundering obligations or other regulatory requirements.

We also collect information that is publicly available such as information on any company website, news articles, or other multimedia sources as well as any records held on the Companies House website.

If you have a business relationship with one of our professional contacts, they may collect data that is passed on to us to facilitate a specific transaction or make an introduction in our mutual interest.

For our professional business contacts, we also collect data from any networking events you may attend; from any of our employee business contacts, from current or past transactions, and from any publicly available source such as a company website.

Where we need to research prospective buyers we subscribe to business research databases such as D&B Hoovers to aid particular transactions.

We also process information about our employees which is covered by a separate privacy policy.

What do we use your personal data for?

Our primary use of your data is to be able to deliver our services to you and complete your business transactions. Where we have a contract with you, it is necessary for us to process personal data in order to deliver that contract to you.

If you are a professional contact with whom we have a business relationship, we will use your data to enable us to liaise with you on current or future transactions.

We also use personal data for our legitimate business interests in monitoring, developing, and promoting our products and services. For example, using the data for our e-marketing campaigns, managing invitations, introducing potential transaction opportunities, and registrations for corporate events, publicising our services; supporting quality and risk management reviews; and administrating our website and reviewing the efficacy of our online services and communications.

We may also need to process your data in order for compliance and auditing reasons and to monitor or enforce our terms and conditions or user policies.

Communicating with you: we also use your data to communicate with you and keep you up to date with company news; informing you of completed transactions and providing you with information on our services. We will also provide information about the events we are hosting. We may contact you by email, post, or via the telephone. We encourage you to sign up to receive these messages but if you do not wish to receive these communications, please let us know by contacting us at info@tinia-cp.com.

We may also use the information to support us in enforcing our terms and conditions, protecting our legal rights and responsibilities.

Sharing personal data with third parties

We will only share our client's personal data with those other parties involved in the specific transaction – which may include other professionals working on the transaction, the other party, and their advisors, whether within the data room or in the usual course of a transaction. We will discuss with you how to manage communication within your business, to ensure that disclosure is appropriately managed.

Where we are facilitating introductions with other professionals or organisations, we will seek your permission to share contact details, or arrange a meeting in person.

We may disclose information where necessary to undertake client identification checks or other regulatory obligations.

Occasionally, we share your data with our third-party suppliers who manage our website and e-marketing, IT, and other outsourced services. All of our third-party suppliers are based in the UK or Europe and therefore they will be obliged by law to have the same level of protection of your personal data as we do.

How we protect your information

We are committed to ensuring that your personal information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. For example, your personal information is stored on secure cloud-based computer files or computer servers within our secure premises; any hard copy client files are kept within our secure premises, and our staff is trained about the secure handling of personal information.

Your rights under data protection law

As an individual, you have a number of rights under applicable data protection law. Depending on your location, these rights arise under the UAE PDPL, the GDPR, or both, and broadly include:

• the right to request from us access to your own personal information;
• the right to ask us not to process your personal data for personalised direct marketing;
• the right to request any inaccurate information we hold about you is corrected;
• the right to request your information is deleted in certain circumstances;
• a right to request that we stop using your personal information for certain purposes; and
• a right to object to decisions taken by wholly automated means.

These rights may be limited to certain defined circumstances and we may not be able to comply with your request in every case. If you request to exercise these rights, we aim to respond to you within one month.

If you are located in the UAE, you may direct enquiries or complaints regarding our handling of your personal data to the competent UAE data protection authority. If you are located in the EU or UK, you have the right to lodge a complaint with your local data protection supervisory authority.

If you wish to receive a copy of your personal data or exercise these rights, please email us at info@tinia-cp.com or write to us at the address below.

Tinia Capital Partners – FZCO, IFZA Business Park, DDP, Dubai Silicon Oasis, PO Box 342001, Dubai, United Arab Emirates.