Who controls your data
Just Gold LLC-FZ acts as the data controller for information processed through the website, mobile application, and digital gold platform. The company states that it follows applicable UAE data protection requirements, including Federal Decree Law No. 45 of 2021.
Information collected
- Identity and contact details, including name, email, phone number, address, passport, Emirates ID, nationality, and proof of address.
- Financial and transaction information needed to process purchases, sales, withdrawals, and account verification.
- Device, browser, IP address, usage, authentication, analytics, and cookie information.
- Messages, support requests, feedback, and communication preferences.
Why information is used
- To provide the service and execute requested transactions.
- To meet legal, KYC, AML, audit, and regulatory obligations.
- To prevent fraud, protect accounts, improve the service, and operate the business.
- To send marketing where consent or another valid legal basis applies.
Legal basis for processing
- Contractual necessity, to deliver the service a user has signed up for.
- Legal compliance, including UAE AML and KYC regulations.
- Consent, for marketing communications.
- Legitimate business interests, including fraud prevention.
International transfers
Data may be processed outside the UAE. The published policy describes safeguards for these transfers, including Standard Contractual Clauses (SCCs) with third parties, encryption in transit and at rest, and security assessments of vendors.
Your privacy rights
- Request access to or correction of your personal information.
- Request deletion where legal and regulatory retention duties allow it.
- Ask for processing to be restricted and withdraw consent where applicable.
- Change marketing preferences or opt out of promotional messages.
Retention
The published policy states that KYC and AML records may be kept for five years after account closure, transaction information for seven years for tax and audit purposes, and marketing information until consent is withdrawn. Legal obligations may require longer retention in specific cases.
Security and children
The published policy describes AES-256 encryption for sensitive data, role-based access controls, secure infrastructure, and annual penetration testing. No internet transmission or storage system can be guaranteed to be completely secure.
The services are not directed to people under 18, and JustGold states that it does not knowingly collect personal data from children.
Requests and complaints
Privacy requests can be directed to JustGold's Data Protection Officer at support@justgold.app, or by post to Just Gold LLC-FZ, Meydan Grandstand, 6th Floor, Nad Al Sheba, Dubai, UAE, or by phone at +971 589361909. The published policy also identifies the UAE Data Office as a route for eligible complaints.