Legal
Privacy Policy
Last updated: June 2026 — Working draft. Please have reviewed by data protection counsel before publishing.
1. Who we are
First Boston Capital Ltd is a company established in the Dubai International Financial Centre and regulated by the Dubai Financial Services Authority (DFSA), Firm Reference No. F012938. For the purposes of the DIFC Data Protection Law No. 5 of 2020, First Boston Capital Ltd is the data controller for personal data collected through this website. Our registered office is at DIFC Fund Centre, Level 1, Precinct Building 4, Dubai International Financial Centre, Dubai, UAE.
2. What personal data we collect
- Identifying information you provide — name, company, job title, contact details.
- Information you submit through our contact form or by email.
- Information collected automatically when you visit our website — IP address, device information, browser type, pages visited (see our Cookie Policy).
3. How we use personal data
- To respond to your enquiry.
- To provide our advisory services to clients, where we are engaged.
- To comply with our legal and regulatory obligations — AML, sanctions screening, KYC, suitability.
- To improve our website and services.
- For business development, in accordance with applicable marketing rules.
4. Legal basis for processing (DIFC Data Protection Law)
- Consent — where you have given consent.
- Contract — where processing is necessary to perform a contract with you.
- Legal obligation — where required by law (e.g. AML, sanctions, DFSA requirements).
- Legitimate interests — for business development, balanced against your rights.
5. Sharing your data
We may share personal data with: regulators (including the DFSA and DIFC Commissioner of Data Protection), professional advisers (lawyers, auditors), service providers acting on our behalf (under data processing agreements), and law enforcement where required by law. We do not sell personal data.
6. International transfers
Personal data may be transferred to service providers in third countries. Where required, we put in place appropriate safeguards in accordance with the DIFC Data Protection Law No. 5 of 2020.
7. Retention
We retain personal data for as long as necessary to fulfil the purposes set out above and to comply with our legal and regulatory obligations — including as required under DFSA rules. Where no specific retention period applies, we keep data for no longer than necessary.
8. Your rights
Under the DIFC Data Protection Law No. 5 of 2020, you may have rights to access, rectify, erase, restrict, port, or object to the processing of your personal data. To exercise these rights, contact privacy@firstbostoncapital.co.
9. Complaints
You may make a complaint to the DIFC Commissioner of Data Protection if you believe we have not handled your personal data in accordance with applicable law.
10. Contact
Privacy enquiries: privacy@firstbostoncapital.co.