Introduction

The website will not collect personal information (name, email address, phone number etc.), unless explicitly volunteered by a user of the website as part of a contract form or agreed to as part of a cookie (approved to be used by the site in conjunction with a user), about you when accessing the website. If you do, we shall use the details only to process your form for obtaining information or services. By using this website, you accept the Privacy Policy.

Nebras Open Finance (Nebras) reserves the right to make any minor or major change of its privacy policy from time to time, without any prior notice.

This website, and those in charge of it, shall follow the comprehensive and strict Nebras Information Security policy. Authorized staff may only access the personal identity information after contracting to maintain the confidentiality of the information provided. Personal identifiable information that is received/recorded by Nebras will be subject to all data privacy safeguards as mandated by the Nebras Information Security policy.

User Data

User data is stored in UAE-based (cloud) computer services with strict security measures in compliance with applicable laws. However, Nebras is not liable for any damages resulting from privacy violations related to data transferred to its website.

Cookies

Cookies are used exclusively for functional and security purposes, including session management, language preferences, and other similar features.

Protection

Nebras may take the appropriate measures to protect its website against any loss, abuse or change of information available on the website, on the condition that Nebras cannot guarantee to maintain confidentiality of the website contents.

Users can request, where relevant:

• Confirmation of data processing
• Access, correction, or deletion of their data
• Information on data sharing
• While individuals may request access to their personal data, we reserve the right to decline such requests in certain circumstances, including but not limited to:
• When disclosure would violate legal, regulatory, or security obligations.
• When the request is manifestly unfounded, excessive, or technically unfeasible.
• When granting access would infringe on the privacy or rights of others.
• When data must be retained due to contractual, regulatory, or compliance reasons.
• Requests for data access will be reviewed on a case-by-case basis in accordance with applicable laws.