Privacy Notice

Who is responsible for your information

Marsh Capital Banking Consultancy LLC, Dubai, United Arab Emirates, is the controller of the personal information described in this notice. Questions about it, or any request concerning your information, can be sent to info@marsh-capital.com.

This notice covers three things: the public website, the approval-gated client area, and the Marsh Capital newsletter. It does not cover any separate engagement, which is governed by its own agreement.

What we collect, and when

We collect only what a given interaction requires. We do not buy personal information, and we do not collect it from third-party data brokers.

• Enquiries. The contact form asks for your name, professional email address, organisation, the requirement you are writing about and your message. This information is sent to Marsh Capital by email and is not written to any database by this website.
• Requests for client-area access. Registration asks for your full name, organisation, job title, organisation type, country and business email address, and optionally your mobile number and LinkedIn profile. You also select the areas you are interested in and may add a note. No password is collected at this stage.
• Use of the client area. Once an account is approved we record the documents you open, any request you make for information or document access, items you add to your watchlist, and an administrative log of actions taken on your account.
• Newsletter. We record your email address, your name if you give one, your chosen language, the exact consent wording shown to you at the time, and the dates you subscribed and confirmed.
• Technical information. Our hosting and email providers keep standard server and delivery logs, which include IP addresses, for security and troubleshooting.

Cookies

This website sets one cookie on the public pages: a record of whether you are reading in English or Arabic. Signing in to the client area sets additional cookies that keep you signed in and protect the session.

There is no analytics, advertising or tracking on this website. We do not use third-party trackers, advertising pixels or cross-site profiling, which is why you are not asked to accept cookies.

Why we use it

We rely on your consent for the newsletter and for the enquiry you choose to send; on steps taken at your request and the performance of an engagement for the client area; and on our legitimate interests in running and securing the platform. Where the law of a jurisdiction that applies to you requires a different basis, we rely on that basis.

• To answer your enquiry and, where relevant, to continue a professional conversation you began.
• To assess a request for client-area access, and to decide the level of access and the categories appropriate to it.
• To operate the client area — showing you what you are entitled to see and nothing else, and keeping a record of what was shared with whom.
• To send the newsletter, where you have asked for it.
• To keep the platform secure, to investigate misuse and to meet legal and regulatory obligations.

Who else handles it

We do not sell personal information and we do not share it for advertising. A small number of service providers process it on our instructions so that the platform can work:

• Supabase — the database, sign-in system and document storage behind the client area. Data is held on servers in the European Union.
• Twilio SendGrid — delivery of the emails this platform sends, including confirmations, access decisions and the newsletter.
• Vercel — hosting and delivery of the website itself.

Where it is held

Marsh Capital is established in the United Arab Emirates, and the database and document storage behind the client area are located in the European Union. Personal information may therefore be transferred outside your own country. Where it is, we rely on the contractual protections in our agreements with those providers.

How long we keep it

Where a longer period is required by law, regulation or an unresolved dispute, we keep the information for that period and no longer.

• Enquiries are not stored by this website. They live in the Marsh Capital mailbox and are kept for as long as the correspondence is relevant.
• Client-area account information is kept while the account is open. If access is declined or an account is closed, we keep a limited record of the decision.
• Newsletter details are kept until you unsubscribe. We then keep a minimal record that you unsubscribed, so that we do not contact you again by mistake.

Your choices and rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, object to a particular use, or ask us to restrict what we do with it. You can withdraw consent at any time — every newsletter carries a one-click unsubscribe link that needs no sign-in, and you can write to us instead if you prefer.

Write to info@marsh-capital.com and we will respond. If you are not satisfied with our response, you may complain to the UAE Data Office or to the data protection authority in your own country.

How it is protected

• Traffic to and from this website is encrypted in transit.
• The client area requires an authenticator app in addition to a password, on every sign-in. Codes are never sent by SMS.
• Documents are held in private storage. They are never served by a public address; an entitled reader is given a link that expires within a minute.
• What each account may see is enforced by the database itself, not only by the screens, so a record outside your entitlement is not returned at all.

Children

This website and the client area are intended for professional and business use. They are not directed at children, and we do not knowingly collect information about them.

Changes to this notice

If we change how this platform handles personal information, we will update this notice and change the date at the top of it. Where a change is significant, we will say so directly to the people it affects.