1. Who we are
Cedarstone Research LLC ("Cedarstone Research") is the controller of personal data collected through this website and in providing our services. Registered with the Dubai Multi Commodities Centre (DMCC) Free Zone Authority, United Arab Emirates; registered office Office 1801, Churchill Tower, Business Bay, Dubai, United Arab Emirates.
Contact for privacy matters: info@cedarstoneco.co.uk
2. The data we collect
- Contact and identity data: name, email, phone number, country of residence, organisation.
- Enquiry data: information you provide in forms or correspondence, including your interests and approximate currency exposure.
- Client data: information needed to provide our services, including financial circumstances, objectives and risk appetite, and identity verification documents.
- Technical data: IP address, device and browser information, and usage data collected through cookies (see our Cookie Policy).
- Marketing preferences: your choices about receiving our newsletter and communications.
3. How we use your data, and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and arranging consultations | Legitimate interests; steps prior to entering a contract |
| Providing research and advisory services | Performance of a contract |
| Identity verification and anti-money-laundering checks | Legal obligation |
| Sending our newsletter and marketing | Consent (you can withdraw at any time) |
| Improving our website and services | Legitimate interests; consent for optional cookies |
| Keeping records and meeting regulatory requirements | Legal obligation |
4. Sharing your data
We share personal data only where necessary with: service providers (hosting, email, CRM, client portal, analytics); banking and liquidity partners, where you ask us to arrange execution; professional advisers; and regulators, law enforcement or other authorities where required by law. We do not sell your personal data.
5. International transfers
As we work with clients in the United Kingdom, Europe, the Middle East and elsewhere, and use service providers who may be based outside the UAE, including in the United Kingdom where we continue to operate, your data may be transferred outside the UAE. Where it is, we ensure appropriate safeguards are in place, consistent with the UAE Personal Data Protection Law.
6. Retention
We keep enquiry data for up to 24 months if you do not become a client. Client data is kept for the duration of the relationship and for a minimum of 5 years after it ends, to meet legal and regulatory obligations. Marketing data is kept until you unsubscribe.
7. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) you have the right to: access your data; correct it; erase it; restrict or object to its processing; data portability; and withdraw consent at any time. To exercise these rights, contact info@cedarstoneco.co.uk. You also have the right to complain to the UAE Data Office (u.ae).
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption, access controls and secure client portal authentication.
9. Changes
We may update this policy. The latest version will always be on this page.