1. Data Controller

First Numismatic Tech Consultants – FZCO
IFZA Business Park, Dubai, UAE
IFZA License 54413 · VAT TRN 104868001900003
Email: info@firstnumismatic.tech

2. Legal Framework

This Privacy Policy complies with:

• UAE Federal Decree-Law No. 45 of 2021 — Personal Data Protection Law (PDPL)
• EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
• ISO/IEC 27001:2022 — Information Security Management
• ISO/IEC 27018:2019 — Protection of PII in Public Clouds

3. Data We Collect

FNTC processes the following categories of personal data:

• Contact Information: Name, email, phone number (provided via contact forms)
• Technical Data: IP address, browser type, device information (via server logs)
• Usage Data: Pages visited, time spent, interactions (via analytics)

4. Purpose and Legal Basis

We process personal data for:

• Responding to inquiries and providing services (legitimate interest)
• Complying with UAE legal obligations (legal obligation)
• Improving our dashboard and services (legitimate interest)
• Marketing communications (consent — opt-in required)

5. Data Subject Rights

Under UAE PDPL and GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact: dpo@firstnumismatic.tech

6. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes described, or as required by UAE law. Server logs: 90 days. Contact inquiries: 2 years.

7. Data Sharing

FNTC does not sell personal data. Data may be shared with:

• Microsoft Azure — Cloud infrastructure (EU data centers)
• Infomaniak — Email services (Switzerland)
• Cloudflare — CDN and security (global network)

8. International Transfers

Data may be transferred to countries with adequate protection levels as recognized by UAE PDPL or under Standard Contractual Clauses (GDPR).

9. Security Measures

FNTC implements ISO 27001-certified security controls including AES-256 encryption, MFA, zero-trust architecture, and 24/7 SIEM monitoring via PALADIN defense system.

10. Contact & Complaints

Data Protection Officer: Olga Reyes
Email: dpo@firstnumismatic.tech

UAE Data Office: You have the right to lodge a complaint with the UAE Data Office established under PDPL.

11. Updates

This policy may be updated periodically. The latest version will always be available at this URL.

FNTC FZCO · IFZA 54413 · Dubai, UAE · BV Stage 2: 30 OCT 2026 · ISO 9001/14001/27001/27017/27018/42001 in processing