Privacy & Cookie Policy

This Privacy & Cookie Policy explains how Amanah FZE LLC ("Amanah Gold", "we", "us", or "our") collects, uses, protects, and processes your personal information when you use our website at www.amanah.gold, our mobile applications, our e-commerce services, and our digital vaulting platform (collectively, the "Services").

By accessing or using the Services, you agree to the practices described in this Policy. We are committed to respecting your privacy, protecting your data, and ensuring transparency in how information is handled.

1Information We Collect

We may collect the following categories of information:

• Personal identification: Name, email address, phone number, nationality, date of birth.
• Account and authentication data: Login credentials, Firebase auth tokens, device identifiers.
• Identity verification (KYC): Emirates ID, passport details, proof of address, and documents required for anti-money laundering compliance.
• Transaction information: Orders, gold/silver purchases, vaulting requests, payment confirmations.
• App usage data: Pages viewed, actions taken, device type, IP address, browser type, and interaction logs.
• Analytics and behaviour data: Event tracking, session duration, app performance metrics.

2How We Collect Your Information

• When you create an account or update your profile.
• When you purchase products or request vaulting services.
• When you upload identity documents for verification.
• Automatically through cookies, analytics tools, and device logs.
• Through customer support conversations or feedback submissions.

3Technologies We Use

To operate securely and efficiently, Amanah uses trusted global technology partners, including:

No biometric data, payment card numbers, or similarly sensitive data is ever stored in these tools.

4How We Use Your Information

Your information is used only for legitimate purposes, including:

• Creating and managing your Amanah account;
• Processing orders for gold, silver, minting, and vaulting services;
• Verifying customer identity (KYC) for legal compliance;
• Providing secure storage, vaulting updates, and certifications;
• Detecting and preventing fraud, suspicious activity, or unauthorised access;
• Improving the user experience and app performance;
• Communicating order updates, support messages, and service notifications.

6Cookie Policy

Cookies are small text files placed on your device when you visit our website. We use them to make the website function correctly, understand how it is used, and improve your experience over time.

Types of Cookies We Use

Managing Your Cookie Preferences

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Note that disabling certain cookies may affect website functionality.

For more information on managing cookies in your browser:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Third-Party Cookies

Some cookies on our website are placed by third-party services we use. These include Google Analytics, Google Tag Manager, and our payment processor (Tap Payments). These third parties have their own privacy policies governing their use of such information. We do not control these third-party cookies.

We do not use advertising cookies or any cookies that track you across third-party websites for marketing purposes.

7Data Security & Storage

We employ industry-leading security practices to protect your information, including:

• Encryption in transit (HTTPS, TLS);
• Secure Google Cloud and Firebase infrastructure;
• KYC storage in compliance with UAE regulatory requirements;
• SIRA-certified vaulting and protection standards for gold and silver;
• Access controls to prevent unauthorised data access;
• Regular audits and security monitoring.

While no system is perfectly secure, we take all reasonable measures to safeguard your data.

8Your Rights & Choices

You may request the following at any time:

• Access to the data we hold about you;
• Correction of inaccurate or incomplete information;
• Deletion of your account (subject to legal retention obligations);
• Opt-out from marketing notifications.

Certain data — such as KYC documentation or transaction history — may be legally required to be retained under UAE AML/CFT laws and cannot be deleted on request.

9Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, meet legal obligations, or maintain compliance with UAE regulations.

10Children's Privacy

Our Services are not intended for children under the age of 18. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, please contact us immediately.

11Third-Party Links

Our platform may contain links to external websites. We are not responsible for their content, privacy policies, or data practices. We encourage you to review the privacy policy of any third-party site you visit.

12Changes to This Policy

Amanah may update this Privacy & Cookie Policy at any time. Updates will be posted on this page with a revised "Last Updated" date. Continued use of the Services after any update constitutes acceptance of the revised policy. We will notify registered users of material changes by email.

13Contact Information

Last Updated: 17 November 2025