Privacy notice

GTI GLOBAL GOLD FZCO is a company registered in Dubai, United Arab Emirates (registration no. DMCC205415), with its registered office at Units 2601-B & 2609-B, JBC 5, Plot No. JLT-PH2-W1A, Jumeirah Lakes Towers, Dubai, UAE. We are the controller of the personal data described in this notice. You can reach us at info@gti.gold.

Depending on how you interact with us, we may collect:

• Contact details — name, email address, telephone number and company name when you submit an inquiry.
• Account data — email address and sign-in credentials when you create a portal account.
• Onboarding data — company identity and registration details, ownership and control information, details of directors, signatories and beneficial owners, and information about the source of funds or metal.
• Identity documents — trade licences, incorporation documents, identification documents and address evidence uploaded during onboarding.
• Technical data — basic server logs such as IP address, browser type and pages visited, used to keep the site secure and running.

• To respond to inquiries and communicate with you.
• To create and manage your portal account.
• To carry out customer due diligence, identity verification, sanctions and related checks required for our business and by applicable law.
• To prepare and administer commercial quotations and fulfil agreed transactions.
• To meet legal, regulatory, tax and record-keeping obligations.
• To protect the security and integrity of our systems.

We do not sell personal data, and we do not use it for advertising or automated marketing profiling.

We share personal data only where necessary: with service providers that host or operate our systems under contract; with professional advisers; with screening, registry or identity-verification providers where such checks are performed; and with regulators, law enforcement or courts where the law requires it. We do not disclose the existence or outcome of any compliance review to unauthorised parties.

Our systems may store or process data outside your country of residence. Where data is transferred across borders, we take steps to ensure it remains protected in line with applicable data-protection law.

We keep personal data only for as long as needed for the purposes above, including any retention periods required by applicable laws and regulations. Records subject to a legal hold are retained until the hold is lifted. When data is no longer required, it is securely deleted or anonymised.

Depending on the law that applies to you, you may have the right to access your personal data, correct inaccuracies, request deletion, restrict or object to processing, and request a copy of your data in a portable format. To exercise any of these rights, contact us at info@gti.gold. Some rights may be limited where we are required by law to retain records.

We apply technical and organisational measures to protect personal data, including encrypted connections, access controls, private document storage and audit logging. Access to onboarding records is limited to authorised personnel on a need-to-know basis.

We may update this notice from time to time. The current version is always published on this page. This notice was last updated in October 2026.