PRIVACY POLICY

kais is a representative of Propsuite. All services are provided to customers through Propsuite Commercial Broker FZCO.

This notice describes the privacy policy (“Privacy Policy” or “Policy”) of quinotaurfx.com (hereinafter referred to as the “website” or “Site”)

Propsuite is a Dubai-based proprietary trading technology partner that designs, operates, and manages challenge-driven funding programs across FX and CFD markets. When you use our platform, you provide us with certain personal details so we can verify your identity, process your payments, and give you access to your trading accounts. We take this responsibility seriously and are committed to protecting your personal data in accordance with the applicable laws.

Our goal is to be transparent about how your information is collected and used. This Policy outlines what types of data we collect, how we use it to operate our services, and under what circumstances it may be shared with trusted third parties. It also explains how you can access, update, or delete your personal data, and how we ensure it remains secure.

By using our website quinotaurfx.com or participating in our trading programs through kais, you agree to the terms outlined in this Privacy Policy. If you do not agree with any part of it, you must stop using our services. We encourage you to read this Policy carefully, as it contains important information about your privacy rights and how we safeguard your personal information.

1. INFORMATION WE COLLECT

We collect personal and technical information to provide our services, verify user identity, process payments, and maintain a safe and fair trading environment. The information we collect depends on how you interact with our website, participate in our evaluation programs, or communicate with us. Below are the main categories of data we collect:

• Personal Identification Details: When you create an account on Propsuite, we collect basic information such as your full name, email address, and country of residence. This information helps us set up and manage your user profile and communicate important account updates.
• Verification Data (KYC): To comply with anti-fraud and compliance requirements, we use trusted third-party service provider to perform identity verification. As part of this process, we collect and store copies of identification documents, such as a government-issued ID, passport, or proof of address. These documents are handled securely by our KYC provider in accordance with applicable privacy standards.
• Payment Information: All payments are processed by our approved payment processor. While we do not store your credit or debit card information, we receive confirmation details such as payment status, transaction amount, and reference ID to maintain accurate records of your purchases and account activity.
• Trading and Account Data: During your participation in the evaluation or funded phases, we collect and store trading-related data such as account performance, trade history, rule compliance, and other metrics. This information helps us assess your progress, enforce challenge rules, and manage payouts.
• Device and Usage Data: When you access our website, certain information is collected automatically, including your IP address, browser type, operating system, device identifiers, and pages visited. We also use cookies and analytics tools such as Google Analytics, Meta Pixel, and TikTok Pixel to understand website traffic and improve user experience.
• Communication Data: We keep records of communications between you and Propsuite, including support tickets, feedback forms, and email correspondence. This helps us respond to your queries, improve customer support, and maintain an audit trail of important interactions.
• Affiliate and Referral Data: If you join Propsuite through an affiliate or referral link, we may collect and share limited data (such as your name and email) with the affiliate who referred you, to track and manage their commission. No other personal data is shared beyond what is necessary for that purpose.
• Marketing and Cookies Data: We collect information on your preferences and interactions with our marketing campaigns. This includes data gathered through cookies used for personalised advertising, retargeting, and performance measurement. You can manage or disable cookies through your browser settings at any time.

We only collect the information necessary for operating our programs and providing a secure trading experience. Sensitive information such as your identity documents and account credentials are handled with strict confidentiality and are never disclosed except where required by law or necessary to provide our services.

1. COOKIES AND TRACKING TECHNOLOGIES

Our website uses cookies and similar tracking technologies to improve how you experience Propsuite, understand how visitors use our platform, and deliver relevant advertising. Cookies are small text files stored on your device when you visit a website. They help us recognise your browser, remember your preferences, and ensure that key functions of our site work properly.

We use several types of cookies:

• Essential Cookies: These are necessary for the website to function. They allow you to log in, access your account dashboard, make payments, and use secure areas of the site. Without these cookies, our platform cannot operate effectively.
• Performance and Analytics Cookies: These cookies help us understand how users interact with our website. We use tools like Google Analytics to monitor page visits, time spent on the site, and general navigation patterns. This data helps us identify issues, improve performance, and enhance user experience.
• Advertising and Retargeting Cookies: We use cookies from advertising partners such as Meta Pixel and TikTok Pixel to show relevant ads and measure the effectiveness of our campaigns. These cookies track your interactions with our site and allow us to display personalised ads when you browse other platforms. This helps us reach users who have shown interest in our programs and communicate offers more effectively.
• Functional Cookies: These cookies remember your preferences  -  such as language, region, and login details  -  so that you don’t have to re-enter them every time you visit. They make your experience smoother and more personalised.

By using our website, you consent to the use of cookies as described in this Policy. You can manage or disable cookies through your browser settings at any time, though doing so may affect certain features or limit your access to parts of the website.

We also use similar tracking technologies such as pixels and tags in our emails and marketing campaigns. These tools help us understand whether emails are opened, links are clicked, or specific actions are taken. This information allows us to improve our communication and deliver content that is more relevant to you.

Propsuite only uses cookies and tracking tools to the extent necessary to operate, secure, and improve our services. We do not use these technologies to collect sensitive personal data, nor do we sell any information collected through cookies.

1. LEGAL BASIS FOR WHICH WE USE YOUR INFORMATION

We rely on specific legal grounds to justify the collection and use of your information, depending on the nature of our relationship with you and the type of data involved.

• Contractual Necessity: We process your personal information when it is necessary to perform our obligations under a contract with you  -  for example, when you register for a trading challenge, verify your identity, process your payment, manage your account, and communicate important updates regarding your participation. Without this data, we would not be able to provide our services to you.
• Legal and Regulatory Compliance: Certain information must be collected and retained to comply with applicable laws, such as anti-money laundering (AML) regulations, record-keeping obligations, and identity verification requirements. We also process information when required by law enforcement authorities, regulators, or courts.
• Legitimate Business Interests: We process information as part of our legitimate business operations, including improving our platform, analysing performance, ensuring system security, detecting fraud, and maintaining the integrity of our trading programs. We ensure that such processing does not override your rights or freedoms.
• Consent: In some cases, we process your personal data based on your explicit consent. This includes sending marketing emails, using cookies for personalised advertising, or collecting optional information not strictly necessary for service delivery. You can withdraw your consent at any time by contacting us or adjusting your preferences.
• Protection of Rights and Prevention of Fraud: We may process your data to protect our legal rights, enforce our policies, investigate misuse, or prevent fraudulent activities. This ensures fairness and transparency across our evaluation programs and funded accounts.

1. HOW WE USE YOUR INFORMATION

• To Create and Manage Your Account: We use your name, email address, and login details to create and maintain your account, verify your identity, and give you access to your dashboard. These details also allow us to send important account-related updates, such as password resets, notifications about program changes, or service alerts.
• To Verify Your Identity and Maintain Compliance: Your KYC data is processed through our verification partner to confirm your identity and meet legal obligations, such as fraud prevention and anti-money laundering requirements. This ensures that only verified users can access our evaluation and funded programs.
• To Process Payments and Deliver Services: We use transaction details provided by our payment processor to confirm payments, activate accounts, and keep financial records. These records help us manage billing, resolve disputes, and meet record-keeping obligations.
• To Operate and Monitor Trading Programs: We use trading data to track your progress through the evaluation and funded phases, assess compliance with program rules, and calculate performance-based payouts. Certain aspects of this process may involve automated evaluation based on objective criteria, such as profitability and rule adherence. These automated decisions are never based on personal characteristics unrelated to trading performance.
• To Communicate With You: We use your contact information to respond to inquiries, provide support, and send updates about your account and performance. We may also send educational content, system announcements, or reminders about important deadlines.
• To Improve and Develop Our Platform: We use analytics, feedback, and usage data to understand how traders interact with the platform, identify issues, and improve system functionality. We may also use aggregated or anonymised data to analyse trends, enhance algorithms, and develop new features or products.
• To Send Marketing and Promotional Messages: With your consent, we may send marketing emails or offers related to Propsuite programs. You can opt out at any time by clicking the unsubscribe link in our emails or contacting us directly.
• To Prevent Misuse and Ensure Fair Trading: We monitor account activity to detect violations such as copy trading, hedging, arbitrage, or other prohibited practices. This helps maintain a transparent and fair environment for all traders.
• To Protect Our Platform and Legal Interests: We may use your information to detect and prevent fraud, unauthorised access, or technical abuse. We also process data when necessary to protect our rights, enforce our agreements, respond to legal claims, or comply with lawful requests from authorities.
• To Maintain Internal Records and Audits: Your information may be used internally for bookkeeping, dispute resolution, and quality audits to ensure the accuracy and integrity of our operations.
• To Manage Corporate Transitions: If Propsuite undergoes a merger, acquisition, or restructuring, your data may be transferred as part of that process. Any such transfer will continue to respect the commitments made in this Policy.
• Data Monetisation: We will never sell your personal data to anyone. However, we may analyse and monetise aggregated or anonymised trading data that does not identify individual users. Such data is used for research, performance analysis, and improving our products, without revealing any personal information.

1. RETENTION AND DELETION

We keep personal information only for as long as it is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to protect our legitimate business interests. Once data is no longer needed, it is securely deleted, anonymised, or archived in accordance with our internal policies.

• Active Accounts: For users with active trading accounts, we retain personal data for as long as the account remains open. This allows us to operate your account, process payments, verify identity, manage trading activity, and provide customer support.
• Closed or Inactive Accounts: When an account is closed, we keep limited data for a reasonable period for legal, tax, and compliance purposes, such as handling disputes, chargebacks, audits, or regulatory record-keeping. After this period, the data is deleted or permanently anonymised.
• KYC and Compliance Records: Verification records and identification documents are retained for as long as required under financial compliance standards and anti-fraud obligations. This ensures we can demonstrate proper due diligence if requested by authorities.
• Transaction and Accounting Data: Information related to payments, billing, and accounting is kept for the duration required by law or until financial reporting obligations are satisfied.
• Marketing Data: If you have consented to receive marketing emails, we retain your contact details until you withdraw consent or unsubscribe. Once you opt out, your details are added to a suppression list to ensure you do not receive further marketing communications.
• Technical and Log Data: Device information, cookies, and analytics data are typically retained for a shorter duration to monitor performance, detect security issues, and improve user experience.

When data is deleted, we ensure it cannot be recovered or used. In some cases, data may remain in secure backups for a limited time before being permanently removed.

We regularly review our data retention periods to ensure they remain appropriate and consistent with the purposes described in this Policy.

1. INFORMATION SHARING

• With Our Employees and Independent Contractors: Certain members of our team, including employees, consultants, and independent contractors, may have access to personal information when it is needed for their work. This may include tasks such as customer support, technical maintenance, compliance checks, or account management. All such personnel are bound by strict confidentiality and data protection obligations and receive guidance on handling data responsibly and securely.
• With Service Providers: We work with trusted third parties who assist us in delivering our services. These partners include our payment processor, KYC verification provider, hosting providers, analytics platforms, and communication systems. They only receive the information necessary to perform their tasks and must not use it for any other purpose.
• Payment Processor: All payments are handled by our processor, which receives essential transaction details to confirm purchases. We do not store full payment data such as card numbers or banking credentials.
• KYC Verification Provider: We use a specialised verification partner to confirm user identity and perform compliance checks. The provider stores and processes identification documents securely, and we receive only verification results or status updates.
• Customer Support and Communication Tools: We use secure platforms to send emails, handle support tickets, and manage account notifications. These systems may process basic user data such as name, email address, and account details solely for communication purposes.
• With Affiliates and Referral Partners: If you register through an affiliate or referral link, we may share limited information (such as your name or account ID) to confirm the referral and process their commission. We do not share any trading or financial information beyond what is necessary for this purpose.
• For Analytics and Advertising: We use analytics tools like Google Analytics and advertising pixels such as Meta Pixel and TikTok Pixel to measure website activity and campaign performance. These tools use cookies or similar technologies but do not personally identify users.
• For Legal and Compliance Reasons: We may share information if required by law, regulation, or court order, or to respond to lawful requests from government or regulatory authorities. We may also disclose information to protect our rights, prevent fraud, or enforce our Terms and Conditions.
• For Internal Corporate Needs: We may share data within Propsuite and its future affiliates or subsidiaries to operate, improve, and manage our services. Any such sharing is subject to the same confidentiality safeguards.
• In the Event of a Business Transaction: If Propsuite undergoes a merger, acquisition, or corporate restructuring, your information may be transferred as part of that process. Any successor entity will be bound by the same obligations under this Policy.

We do not sell personal information or disclose it to unrelated third parties for commercial gain. All sharing is done with legitimate purpose, under contractual safeguards, and with the same commitment to protecting your privacy.

1. DATA STORAGE AND SECURITY

We take the protection of your personal information seriously and apply technical, administrative, and organisational measures to safeguard it from unauthorised access, misuse, loss, or alteration. While no online platform can guarantee absolute protection, we make every reasonable effort to secure the data entrusted to us.

• Data Storage: All personal information collected through the Propsuite platform is stored on privately managed cloud servers maintained by us and our trusted hosting partners. These servers are protected through encryption, secure firewalls, and restricted access systems. Access to databases is strictly limited to authorised personnel who require it to perform their duties.
• Security Measures: We use a range of modern security technologies and best practices to protect your data. This includes:

• Encryption of data during transfer and at rest where appropriate.
• Firewalls and intrusion detection systems to block unauthorised access.
• Regular system monitoring and maintenance to identify and address vulnerabilities.
• Role-based access controls and strong authentication requirements for anyone handling sensitive data.
• Ongoing review and updates to our systems to adapt to new security threats.

• Employee and Contractor Obligations: Our employees, consultants, and independent contractors with access to personal data are bound by confidentiality agreements and internal data protection policies. They receive regular training and are expected to handle all information responsibly and securely.
• Incident Response: In the unlikely event of a data breach or security incident, we will investigate promptly, take immediate steps to contain the issue, and notify affected users and relevant authorities where required by law.
• User Responsibility: You also play an important role in protecting your data. We advise all users to keep their login credentials secure, use strong passwords, and avoid sharing account details with others.
• No Absolute Guarantee: While we use strong security systems and follow recognised best practices to protect your data, no electronic transmission or storage system can be completely secure. We cannot guarantee the absolute security of your information, and you share data with us at your own risk. However, once we receive your data, we take all reasonable precautions to protect it from unauthorised access, loss, or misuse.

1. INTERNATIONAL DATA TRANSFER

Because Propsuite serves traders and partners around the world, your personal information may be transferred to, stored on, or accessed from servers located in different countries. These locations may have data protection laws that differ from those in your home country.

Whenever information is transferred across borders, we take steps to ensure that your data remains protected to the same standard described in this Privacy Policy. This includes implementing technical safeguards, access controls, and contractual commitments with all parties who handle or store your data on our behalf. Where service providers or partners are located in regions without data protection laws equivalent to those in your country, we require them to follow strict confidentiality and security standards. We also ensure that appropriate protective measures are in place before any international transfer takes place.

Your data may be processed by Propsuite team members, contractors, or service providers located in various jurisdictions, but always under secure conditions and for legitimate business purposes such as account management, verification, compliance checks, and support.

By using our website and services, you understand that your information may be transferred, processed, or stored outside your country of residence, and you consent to such transfers in accordance with this Policy.

1. LINKS TO OTHER quinotaurfx.comS

Our website may contain links to third-party websites or services that are not operated or controlled by Propsuite. These links are provided for your convenience, but we are not responsible for the content, security, or privacy practices of those external sites. When you click a third-party link, you will be subject to that site’s own terms and privacy policy. We recommend reviewing those policies carefully before providing any personal information or engaging with those websites.

1. RIGHTS OF EU, EEA, SWITZERLAND, AND UK USERS

This section supplements the other provisions of this Privacy Policy and applies to users located in the European Union (EU), the European Economic Area (EEA), Switzerland, or the United Kingdom.

For the purposes of applicable law, your DATA CONTROLLER for the data collected by us to provide you with our services is:

Company Name: Propsuite Commercial Broker FZCO

Registered Office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai (United Arab Emirates)

Contact Email: support@propsuite.com

ALL YOUR USER INFORMATION WILL BE COLLECTED, STORED, PROCESSED AND SHARED STRICTLY IN ACCORDANCE, IN LINE AND FULL COMPLIANCE WITH THE FOLLOWING REGULATIONS:

EU and EEA:

• General Data Protection Regulation (GDPR)
• ePrivacy Regulation
• Law Enforcement Directive

Switzerland

• Federal Act on Data Protection (FADP)

United Kingdom (UK)

• UK General Data Protection Regulation (UK GDPR)
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR)

We process personal data under the lawful bases specified in Section 3 above.

Where we transfer personal data outside the EEA, UK, or Switzerland, we ensure an adequate level of protection by relying on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms approved by regulators.

Depending on the applicable law, you may have one or more of the following rights in respect of your personal information:

• Right to obtain information: to obtain information about how and on what basis your personal information is processed and to obtain a copy;
• Right to rectification: You have the right to have any incomplete or inaccurate information we hold about you rectified and corrected.
• Right of Erasure: to erase your personal information in limited circumstances where (a) you believe that it is no longer necessary for us to hold your personal information; (b) we are processing your personal information on the basis of legitimate interests and you object to such processing, and we cannot demonstrate an overriding legitimate ground for the processing; (c) where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; and (d) where you believe the personal information we hold about you is being unlawfully processed by us;
• Right of restriction: to restrict processing of your personal information where: (a) the accuracy of the personal information is contested; (b) the processing is unlawful but you object to the erasure of the personal information; (c) we no longer require the personal information for the purposes for which it was collected, but it is required for the establishment, exercise or defence of a legal claim or (d) you have objected to us processing your personal information based on our legitimate interests and we are considering your objection;
• Right to object: to object to decisions which are based solely on automated processing or profiling;
• Right to ask for a copy: where you have provided your personal information to us with your consent, to ask us for a copy of this data in a structured, machine-readable format and to ask us to share (port) this data to another data controller; or to obtain a copy of or access to safeguards under which your personal information is transferred outside of the UK or EEA.
• Right to withdraw your consent. You have the right to withdraw your consent on using your personal data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our services.
• Request the transfer of your Personal Data. We will provide to you, or to a third-party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, to the processing of your personal data by us and we may be required to no longer process your personal data. Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.

In addition to the above, you have the right to lodge a complaint with a supervisory authority for data protection. Please note that the right of access and the right to erasure do not constitute absolute rights and the interests of other individuals may restrict your right of access or erase in accordance with local laws.

We will ask you for additional data to confirm your identity and for security purposes, before disclosing data requested by you. We reserve the right to charge a fee, where permitted by law. We will decline to process requests that jeopardise the privacy of others, are extremely impractical, or would cause us to take any action that is not permissible under applicable laws. Additionally, as permitted by applicable laws, we will retain where necessary certain personal information for a limited period of time for record-keeping, accounting and fraud prevention purposes.

To make such requests, please contact us at support@propsuite.com.

Estimated Timeframe for Response: We aim to respond to all valid privacy-related requests within one (01) month of receipt, or within a longer period if the request is complex or involves multiple records. In such cases, we will inform you of the delay and explain the reason for it. Exercising your rights is free of charge, unless the request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable fee or refuse to act on the request.

Complaints

If you are located in the European Union, the European Economic Area, Switzerland, or the United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe your personal data has been handled in a way that breaches applicable laws. Examples of supervisory authorities include:

• United Kingdom: Information Commissioner’s Office (ICO) – www.ico.org.uk
• European Union: Data Protection Commission (Ireland) – www.dataprotection.ie
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) – www.edoeb.admin.ch
• Other EEA countries: You can find your national data protection authority via the official EU website at https://edpb.europa.eu/about-edpb/board/members_en

We encourage you to contact us first at support@propsuite.com so we can address your concern promptly before you reach out to a supervisory authority.

1. RIGHTS OF USERS FROM UNITED ARAB EMIRATES (UAE)

This section explains how Propsuite complies with the Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), which is the main national law governing personal data in the United Arab Emirates. It sets out the obligations of organisations that handle personal data and the rights of individuals whose information is collected.

Applicability of the Law: Propsuite is established in the UAE and therefore subject to the UAE PDPL. The law also applies to data processing carried out by any third parties acting on our behalf. All processing is done in line with the principles of fairness, transparency, and purpose limitation set out in the PDPL.

Your Rights under UAE Law: Under the UAE PDPL, the UAE residents have the following rights regarding their personal information:

• Right of Access: Request confirmation that we hold your data and obtain a copy of it.
• Right to Correction or Erasure: Ask us to correct inaccurate data or delete data no longer needed.
• Right to Restrict Processing: Request limits on how we use your data in certain cases.
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format.
• Right to Object: Object to processing if you believe your data is being used outside its original purpose or unlawfully.
• Right not to be subject to automated processing: You can request that decisions with significant effects (such as evaluation results) not be made solely through automated systems, unless necessary for service delivery or authorised by law.

We respond to verified requests within 30 days, or notify you if extra time is needed for complex matters. Requests that are manifestly excessive or compromise others’ privacy may be lawfully refused with reasons provided.

Sensitive Personal Data: We do not intentionally collect or process sensitive categories of personal data (such as biometric, health, religious, or criminal-record information) unless required by law or with your explicit consent.

Cross-Border Transfers: Your data may be transferred outside the UAE for hosting or operational purposes. Transfers are made only to destinations offering adequate protection or under safeguards such as contractual clauses, data-transfer agreements, or your explicit consent.

Data Security and Breach Notification: We maintain strong technical and organisational security measures to prevent unauthorised access, loss, or misuse of data. In the unlikely event of a breach affecting your information, we will promptly investigate and, where required, notify both you and the UAE Data Office without undue delay.

Record-Keeping, Retention, and Compliance: Propsuite keeps records of all data-processing activities as required by UAE law. Personal data is retained only for as long as necessary to fulfil the purposes described in this Policy or as legally required, after which it is securely deleted or anonymised. We review our practices regularly to ensure ongoing compliance.

Data Protection Officer: Propsuite may appoint a Data Protection Officer (DPO) to oversee compliance with the UAE PDPL and to act as a contact point for the UAE Data Office when required.

CONTACT AND COMPLAINTS:

Propsuite Commercial Broker FZCO

DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates

Email: support@propsuite.com

If you believe your data has been handled in a manner inconsistent with UAE data-protection law, you may contact us at the address above. You also have the right to lodge a complaint with the UAE Data Office, the national supervisory authority, once its formal procedures are operational.

1. RIGHTS OF RESIDENTS OF INDIA

If you are a resident of India, then as a user of the Propsuite platform, you have certain rights under the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) regarding your personal information. These rights are specified in this section.

For the purposes of the applicable law, your Data Fiduciary is:

• Company Name: Propsuite Commercial Broker FZCO
• Registered Office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai (United Arab Emirates)
• Contact Email: support@propsuite.com

Under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to your personal information:

1. Right to Access: You have the right to know if Propsuite is processing your personal data. Upon request, we must provide you with a copy of the personal data we hold about you, along with details about how we are using it, the purposes of processing, and with whom it has been shared. This right allows you to understand how your data is being used and verify its accuracy. We have already specified this information in this Privacy Policy.
2. Right to Correction: If you find that any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. This ensures that your information remains accurate and reliable.
3. Right to Erasure: Also known as the "right to be forgotten", this right allows you to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, if you withdraw your consent (where consent was the legal basis for processing), or if you believe your data is being processed unlawfully. However, this right may be subject to certain exceptions, such as where the data must be retained for legal reasons.
4. Right to Withdraw Consent: Where the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the legality of processing conducted before your consent was withdrawn. However, withdrawing consent may impact your ability to use certain features of the platform that rely on that data.
5. Right to Nominate: You have the right to nominate another individual who, in the event of your death or incapacity, may exercise your rights under the DPDP Act on your behalf. You can submit such nomination to us by emailing support@propsuite.com in the manner prescribed under applicable law.
6. Right to Grievance Redressal: If you have concerns or complaints about how your personal data is being handled, you have the right to file a grievance with our Grievance Officer whose details are provided below. We will acknowledge and respond to your grievance within 90 days from the date of receipt, as prescribed under the DPDP Act and Rules. You must first exhaust this grievance mechanism before approaching the Data Protection Board of India.

GRIEVANCE OFFICER:

• Name: Ryan Beasley
• Email: Support@propsuite.com

DATA PROTECTION BOARD OF INDIA

If you remain unsatisfied after receiving our response, or if no response is provided within the prescribed period, you may escalate your complaint to the Data Protection Board of India through its official digital portal.

LEGAL RETENTION AND ERASURE RULES:

• Under the DPDP Act and Rules, we erase personal data once the specified purpose is no longer served or consent is withdrawn, unless retention is required by law.
• All processing logs and related records are securely retained for a minimum period of one (01) year after processing.
• Where applicable, we will inform you at least 48 hours before erasing your personal data.
• When data is deleted, it is irreversibly destroyed or anonymised, though limited encrypted backups may remain temporarily before permanent removal.

DATA TRANSFER:

Your personal data may be transferred, processed, or stored in countries other than your country of residence, including jurisdictions where data-protection laws may differ or offer a different level of protection from those in India.

When your personal data is transferred outside India, we ensure that such transfers comply with the applicable provisions of the Digital Personal Data Protection Act, 2023 and the DPDP Rules 2025. We only transfer data to jurisdictions that are not restricted by the Central Government of India or that are otherwise lawfully permitted.

REQUESTS: To make requests for exercising any of your rights, please contact us at support@propsuite.com. Please note, we reserve the right to reject the request if you are not entitled to the right that you request to enforce.

1. RIGHTS OF USERS FROM CALIFORNIA

This privacy notice section for California residents supplements the information contained in our Privacy Policy. It applies solely to all visitors, users, and others who reside in the State of California where and to the extent that the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to Propsuite.

If the CCPA/CPRA applies to us, California residents are entitled to certain additional rights regarding their personal information, as explained below. If the law does not apply to us, we will still handle your information in line with our Privacy Policy and industry best practices – however the additional rights specified in this Section will then not be available to you.

“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes.

California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA): The CCPA, as amended by the CPRA, provides California residents and/or their authorised agents with specific rights regarding the collection and processing of their personal information.

In compliance with the California Consumer Privacy Act (CCPA), we are required to disclose the categories of personal information we collect from users. The following outlines the categories of information we collect, along with examples and purposes for which the information is used.

Categories of Personal Information We Collect

The following outlines the categories of personal information we collect, along with examples and how we use them:

We do not collect sensitive personal information such as government-issued identification numbers, racial or ethnic origin, political opinions, or biometric data unless required for identity verification during KYC checks.

Your Right to Know: California residents have the right to request that we disclose the following information to you about our collection and use of your personal information over the past twelve (12) months. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Upon verification, we will disclose to you:

• The categories of personal information we have collected about you.
• The categories of sources for the personal information we have collected about you.
• The specific pieces of personal information we have collected about you.
• Our business or commercial purpose for collecting or “selling” your personal information as defined by the CCPA.
• The categories of third parties to whom we have sold or shared your personal information, if any, and the categories of personal information that we have shared with each third-party recipient.

Your Right to Opt-Out of “Sale” or “Sharing” of Personal Information: California residents have the right to opt-out of the “sale” or “sharing” of their personal information as defined by the CCPA by contacting us at support@propsuite.com.

Please note that we do not knowingly “sell” the personal information of any individuals.

If and where we are “sharing” your personal information with third parties for the purposes of cross-context behavioural advertising or profiling, you may opt-out of such sharing at any time by submitting a request at support@propsuite.com.

Your Right to Limit Use of Sensitive Personal Information: California residents may have the right to request that businesses limit the use of any sensitive personal information to those uses which are necessary to perform the Services or for other specifically-enumerated business purposes under the CCPA, as amended by the CPRA. Please note that we do not use sensitive personal information other than as necessary to perform the Services or as specifically permitted under the CCPA.

Your Right to Delete: California residents have the right to request that we delete any of the personal information collected from you and retained by us, subject to certain exceptions. We may ask you to provide certain information to identify yourself so that we may compare it with our records in order to verify your request. Once your request is verified and we have determined that we are required to delete the requested personal information in accordance with the CCPA, we will delete, and direct our service providers to delete your personal information from their records. Your request to delete personal information that we have collected may be denied if we conclude it is necessary for us to retain such personal information under one or more of the exceptions listed in the CCPA.

Your Right to Correct: Under the CCPA, as amended by the CPRA, California residents have the right to request that we correct any inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes for which we are processing such personal information. We will use commercially reasonable efforts to correct such inaccurate personal information about you.

Non-Discrimination: You will not receive any discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA.

To exercise any of your rights, please contact us at support@propsuite.com.

Authorised Agent: California residents may designate an authorised agent to submit CCPA/CPRA requests on their behalf. If you use an authorised agent, we may require proof of your authorisation and may still ask you to verify your own identity before we act on the request.

Response Time and Verification: We will acknowledge receipt of your request within ten (10) business days and respond to verified requests within forty-five (45) days of receiving them. If additional time is required, we will notify you and explain the reason for the delay, which will not exceed an additional forty-five (45) days. We may need to verify your identity before fulfilling your request by asking for limited information to match against our records. If you submit a request through an authorised agent, we may require proof of your authorisation.

1. NOTICE FOR USERS FROM NEVADA

Under Nevada law (NRS Chapter 603A), certain Nevada residents have the right to opt out of the sale of their “personally identifiable information” for monetary consideration to a person who then licenses or sells such information to additional persons.

“Personally identifiable information” includes details such as your first and last name, address, email address, phone number, Social Security number, or any identifier that allows a specific person to be contacted physically or online.

Propsuite does not sell your personal information to anyone. However, if you are a Nevada resident and wish to exercise your statutory right to opt out of any future potential sale of your personal information, you may submit a request to support@propsuite.com.

1. RIGHTS OF USERS FROM OTHER STATES AND COUNTRIES

Your data controller with respect to the personal information collected on the website is:

Company Name: Propsuite Commercial Broker FZCO

Registered Office: DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai (United Arab Emirates)

Contact Email: support@propsuite.com

Depending upon the laws of your specific country, you may be eligible for some or all the following rights in respect of your personal information:

1. Right to obtain information: You may have a right to obtain information about how and on what basis your personal information is processed and to obtain a copy.
2. Right to rectification: You may have the right to have any incomplete or inaccurate information we hold about you rectified and corrected.
3. Right of Erasure: You may have the right to erase your personal information in limited circumstances where (a) you believe that it is no longer necessary for us to hold your personal information; (b) we are processing your personal information on the basis of legitimate interests and you object to such processing, and we cannot demonstrate an overriding legitimate ground for the processing; (c) where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; and (d) where you believe the personal information we hold about you is being unlawfully processed by us.
4. Right of restriction: You may have the right to restrict processing of your personal information where: (a) the accuracy of the personal information is contested; (b) the processing is unlawful but you object to the erasure of the personal information; (c) we no longer require the personal information for the purposes for which it was collected, but it is required for the establishment, exercise or defence of a legal claim or (d) you have objected to us processing your personal information based on our legitimate interests and we are considering your objection.
5. Right to object: You may have the right to object to decisions which are based solely on automated processing or profiling.
6. Right to ask for a copy: Where you have provided your personal information to us with your consent, you may have the right to ask us for a copy of this data in a structured, machine-readable format and to ask us to share (port) this data to another data controller; or to obtain a copy of or access to safeguards under which your personal information is transferred outside of your jurisdiction.
7. Right to withdraw your consent. You may have the right to withdraw your consent on using your personal data. If you withdraw your consent, we may not be able to provide you with access to certain specific functionalities of our services.
8. Request the transfer of your Personal Data. If you so have this right, we will provide to you, or to a third-party you have chosen, your personal data in a structured, commonly used, machine-readable format. Please note that this right may only apply to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

To make such requests, please contact us at support@propsuite.com. Please note, we reserve the right to reject the request if you are not entitled to the right that you request to enforce.

1. RESPONDING TO LEGAL REQUESTS

We may access, preserve, or disclose your personal information if we are required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that such action is necessary to comply with applicable legal obligations, enforce our Terms and Conditions, protect our rights and property, investigate fraud or security concerns, or ensure the safety of our users and the public. Any disclosure will be limited to what is legally required, and we will make reasonable efforts to notify you where permitted by law before releasing your information.

1. CHILDREN PRIVACY

The website is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete such information as soon as possible. Please contact us at support@propsuite.com if you believe we knowingly or unknowingly collected information described in this Section.

1. OPTING OUT

You have full control over how your personal information is used for marketing, analytics, and communications. The following options are available to help you manage or withdraw consent at any time:

• Email Marketing: You can opt out of promotional or marketing emails by clicking the “unsubscribe” link included at the bottom of our emails or by contacting us directly at support@propsuite.com.
• SMS or Messaging Campaigns: If you receive text messages or WhatsApp notifications from us, you can stop them at any time by replying “STOP” or following the opt-out instructions included in the message.
• Cookies and Tracking Technologies: You can disable or manage cookies through your browser settings. Please note that some features of the website may not function properly if cookies are disabled.
• Targeted Advertising: If you prefer not to receive personalised or retargeted ads, you can adjust your ad settings on platforms such as Google, Facebook, or TikTok, or use opt-out tools provided by your device or browser.
• Affiliate or Partner Communications: If you were referred by an affiliate or partner, you can opt out of any future promotional contact from that affiliate by following the instructions in their communications or contacting us.
• Account Deletion: You may request to close your Propsuite account and delete your data at any time by emailing support@propsuite.com. Once processed, your account will be permanently deleted, subject to legal and compliance retention requirements.

Opting out of marketing communications or cookies will not affect essential service-related communications, such as account verification, transaction confirmations, or important updates about your participation in our trading programs.

1. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy and any dispute arising out of or relating to it shall be governed by and construed in accordance with the laws of the United Arab Emirates, as applied within the Emirate of Dubai. In the event of any disagreement, both parties shall first attempt to resolve the issue amicably through direct communication. If no resolution is reached within a reasonable period, the dispute shall be submitted to the exclusive jurisdiction of the competent courts in Dubai, UAE, and each party irrevocably agrees to submit to those courts for any claims or proceedings arising from this Policy.

1. QUESTIONS ABOUT THIS PRIVACY POLICY

In the event you have any grievance regarding anything related to this Privacy Policy, or with any content or service of Propsuite, in that case you may freely write your concerns through your registered email to Grievance Officer/Designated Representative at below:

• Name: Ryan Beasley
• Email: support@propsuite.com

1. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or the way we handle your personal information. When we make changes, we will revise the “Last updated” date at the bottom of the Policy and, if the changes are significant, we may notify you by email or through a notice on our website. We encourage you to review this Privacy Policy periodically so you stay informed about how we protect your information and your rights. Your continued use of the website after any changes to this Policy will constitute your acceptance of those changes.

1. WELCOMING OF SUGGESTIONS

We welcome your comments regarding this Privacy Policy. Please write to us at support@propsuite.com.

Last updated on December 01, 2025