Privacy Policy & Client Consent

SKY Capital Limited· Tower 3, Office 503, DIFC Square, DIFC, Dubai, UAE.  

Last updated: April 2026

Who we are

SKY Capital Limited (“we”, “us”) is a Data Controller registered in the DIFC, Dubai. This policy governs how we collect, process, use, and disclose personal data, in accordance with the DIFC Data Protection Law No. 5 of 2020 (DPL). It applies to clients, website visitors, and all individuals who interact with us.

What we collect

• Identity & contact — name, date of birth, passport/ID, address, contact details
• Financial & KYC — source of funds, account details, transaction records, AML/PEP screening
• Communications — correspondence, enquiries, meeting notes
• Technical — IP address, browser data, and cookies collected via www.sky-capital.ae

We do not routinely collect sensitive personal data unless required by law or with your explicit consent.

Why & how we use it

• Client onboarding and service delivery — performance of contract
• AML, KYC, and regulatory compliance — legal obligation
• Internal governance and audit — legitimate interests
• Marketing communications — your consent
• Website analytics — consent / legitimate interests

Where we rely on legitimate interests, we carry out a balancing test to ensure your rights are not overridden (DPL Art. 10). Where we use service providers to process personal data on our behalf, we require them to act only on our instructions, maintain confidentiality, implement appropriate security measures, assist with data subject rights and breach obligations, and comply with applicable data protection requirements.

Who we share it with

We do not sell your data. We may share it with regulators (DFSA, DIFC Commissioner), service providers under data processing agreements, and professional advisers under confidentiality obligations. Where data is transferred outside the DIFC, appropriate safeguards apply under DPL Arts. 26–28.

How long we keep it

Client and compliance data is retained for the duration of the relationship plus six years (or as required by the DFSA). Marketing data is held until consent is withdrawn.

Your rights

Under the DPL you have the right to access, rectify, erase, restrict, port, and object to the processing of your data, and to withdraw consent at any time. We will respond within 30 days. Contact us at contact@sky-capital.ae.

Cookies

We use cookies for functionality and analytics. You may manage preferences via your browser or our cookie banner.

Security & breach

We maintain appropriate technical and organisational measures to protect your data. In the event of a reportable breach, we will notify the DIFC Commissioner and, where required, to you directly.

Changes

We may update this policy at any time. Material changes will be communicated before they take effect. The current version is always available at www.sky-capital.ae.

Contact

SKY Capital — DIFC, Dubai, United Arab Emirates
contact@sky-capital.ae