Privacy policy
How Royal Golden handles personal data on the website and in the client portal.
Data controller
ROYAL GOLDEN MARKETING MANAGEMENT L.L.C (trading as Royal Golden), licence No. 1017243, commercial registration No. 2161112, Office T35, Arab Bank Building, Port Saeed, Dubai, United Arab Emirates, is the controller of the personal data described in this policy. Privacy contact: info@royalgoldinvest.com (subject "Data protection") or a secure message in the client portal.
Personal data we process
- Identity and contact data: name, e-mail address, telephone number, nationality and country of residence.
- Account and security data: your password (stored only as a one-way hash), sign-in and security records, IP address and browser information.
- Application data: details about you and the family members in your application, such as dates of birth, passport details and civil status, and the documents you upload.
- Financial data: payment requests and payment status, the transaction IDs (TXID) and TRON addresses of the USDT transfers you make to us or we make to you, refund records, and the payment references needed to match payments to your contract.
- Communications: messages, enquiries, consultation requests and e-mails exchanged with us.
- Consents, acceptances and signatures: your acceptance of the terms and notices (the exact version and its fingerprint, the times it was shown and accepted, IP address and browser), the electronic signature of your services contract, your cookie choice and your language.
- Website use: technical logs needed to run and protect the website. Visit statistics are collected only with your permission.
Purposes
- to open and protect your account and provide the client portal;
- to prepare, check and follow your application and the services you order, including the identity and source-of-funds checks that the programme and the applicable law require;
- to issue invoices, record payments and meet accounting obligations;
- to answer enquiries and consultation requests;
- to send service messages about your account and application;
- to send news and offers, only if you have opted in separately;
- to protect the website, prevent fraud and misuse, and keep audit records;
- to meet legal obligations and answer lawful requests from competent authorities.
Legal bases
We process personal data in accordance with the laws of the United Arab Emirates, in particular Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and with the data protection laws of other countries where they apply to our processing — for example because of where you live or where the processing takes place; you keep the rights those laws give you. We process personal data where it is necessary to conclude and perform the services contract or to take the steps you ask for before it, to comply with our legal obligations, to establish, exercise or defend legal claims, and on the basis of your consent where the law requires it (for example for newsletters and visit statistics). Health information or criminal record certificates required for an application are sensitive personal data and are processed only under the conditions the law sets for them.
Recipients
- the competent authorities of the Republic of Vanuatu and their designated agents, as far as your application requires;
- service providers who process data for us under contract: hosting and backups (Hetzner Online GmbH, data centre in Germany) and e-mail delivery (Resend, European Union region). To check USDT payments we query the public TRON network through TronGrid and send it only public addresses and transaction IDs, never your name;
- professional advisers, banks and payment service providers where the service requires;
- public authorities where the law requires. The map on the contact page loads from OpenStreetMap only when you ask for it, and the WhatsApp button opens WhatsApp (Meta) only when you click it; those services then receive your IP address under their own policies.
Transfers abroad
Your application has to be submitted to the authorities of the Republic of Vanuatu, and our servers are in Germany (European Union). Personal data is transferred outside the United Arab Emirates only as the UAE data protection law and other applicable law allow — in particular where the transfer is necessary to perform the services contract you concluded with us (the submission of your application to the Vanuatu authorities) or to the service providers named above, who process it for us under contract.
Retention
We keep personal data only as long as the purposes above require. Account data is kept while your account is open. Application files, contracts, acceptance and signature records, payment and refund records are kept for the duration of the contract and afterwards for the periods the law sets for commercial, accounting and anti-money-laundering records and for as long as a legal claim may be brought. Technical logs are kept for 14 days, raw visit statistics for 90 days, and encrypted backups are replaced after about 35 days. Data is then deleted, destroyed or anonymised.
Security
We protect personal data with technical and organisational measures, including encrypted connections, role-based access, two-step verification for staff, malware scanning of uploads, encrypted backups and audit records. Uploaded documents are never published or shared through public links.
Your rights
Under the UAE data protection law you may ask for information about the personal data we process about you and for a copy of it; ask for incomplete or inaccurate data to be corrected; ask for data to be erased when it is no longer needed or was processed unlawfully, unless we must keep it; ask us to restrict or stop processing in the cases the law provides; object to a decision based solely on automated processing; receive your data in a structured, machine-readable form where the law provides it; and withdraw a consent at any time, without affecting earlier processing. Where the law of another country applies to our processing, you also have the rights it gives you. Send your request to info@royalgoldinvest.com or through the client portal; we answer within thirty days at the latest. You may also complain to the UAE Data Office or to the data protection authority of the country whose law applies.
Cookies
Our use of cookies is explained in the cookie policy.
Changes
We may update this policy. The version in force is published on this page.