Privacy Policy

Zurani Advisory ("Zurani", "we", "us", "our") respects the privacy of individuals we engage with. This Privacy Policy describes how we collect, use, store, and protect personal data in accordance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and applicable regulations.

This policy applies to personal data collected through our website (zurani.com), through enquiries, consultations, client onboarding, and the course of our advisory services.

Zurani is an art investment management and advisory firm based in Abu Dhabi and Dubai, United Arab Emirates, and acts as the controller of personal data we collect about you.

We may collect the following categories of personal data:

• Identification data — full name, date of birth, nationality, identification documents (passport, Emirates ID) where required for client verification.
• Contact data — email address, telephone number, postal address, professional affiliation.
• Financial data — limited to information necessary for client onboarding, fee invoicing, and anti-money laundering compliance.
• Professional data — business affiliation, role, and source of wealth where relevant to advisory engagements.
• Technical data — IP address, browser type, operating system, device identifiers, referring URL, and pages visited on our website.
• Communications — records of correspondence, meeting notes, and instructions exchanged during an engagement.

We do not knowingly collect sensitive personal data other than where necessary for client identification and AML compliance under UAE law.

We process personal data on the following lawful bases under the PDPL:

• Consent — where you have given clear, specific consent.
• Contractual necessity — to perform our services and engagements with you.
• Legal obligation — to comply with UAE laws including anti-money laundering, counter-terrorism financing, and tax reporting.
• Legitimate interests — to operate, develop, and protect our business, provided this does not override your rights.

Specifically, we use personal data to respond to enquiries and arrange consultations; conduct client identification, due diligence, and ongoing monitoring; provide and administer our advisory services; invoice and process payment; maintain confidential records of advice and engagements; comply with regulatory and legal obligations; and improve our website and services.

We treat personal data as confidential and do not sell, rent, or trade it. We may share personal data only with:

• Regulatory and government authorities where legally required;
• Professional advisers (legal, accounting, audit) bound by confidentiality;
• Service providers acting on our instructions (secure cloud storage, IT, payment processing) under confidentiality and data protection obligations;
• Parties to a transaction at your direction (galleries, auction houses, custodians, insurers) and only with your prior consent.

Where personal data is transferred outside the UAE, we ensure such transfers comply with Article 22 of the PDPL, including transfers to countries with adequate protection or where appropriate safeguards (such as contractual clauses) are in place.

We retain personal data only for as long as necessary for the purposes for which it was collected, including the duration of any active engagement and a reasonable period thereafter; periods required by UAE law for AML record-keeping (typically five years from the end of the business relationship); and periods required for tax, accounting, or regulatory record-keeping.

Subject to the PDPL, you have the right to: request information about the personal data we hold about you; request correction of inaccurate or incomplete data; request erasure of personal data, subject to our legal retention obligations; restrict or object to certain types of processing; request transfer of data to another controller where technically feasible; and withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, please contact us using the details below. We will respond within 30 days. You may also lodge a complaint with the UAE Data Office.

We implement appropriate technical and organisational measures to protect personal data, including secure storage, restricted access, encryption in transit, and confidentiality obligations on personnel. No method of transmission or storage is completely secure, but we work to maintain industry-standard safeguards.

Our website uses cookies and similar technologies. Please refer to our Cookie Policy for full details.

Our services and website are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be notified through our website.

For any questions about this Privacy Policy or to exercise your rights, please contact: