TRIPLE 4 HOLDING is committed to protecting personal data and respecting privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our website, communications, and broader business activities as an investment holding group.

As an Abu Dhabi-based investment holding group, we process personal data in a manner that reflects our commitment to responsible business practices, confidentiality, and compliance with applicable law.

This Privacy Policy explains how personal data is handled when you access our website or interact with our services. It also outlines your rights and how your information may be accessed or updated.

By using this website, you acknowledge that you have read and understood this Privacy Policy. We may update this Privacy Policy from time to time. Any updates will be published on this page and, where appropriate, notified through other suitable means.

We collect and process personal data only where necessary for legitimate business, operational, legal, regulatory, or compliance purposes. This may include information used to support our website, maintain security, respond to enquiries, manage stakeholder and business communications, and support our broader group activities. Where technical or usage data is capable of identifying an individual, it will be treated as personal data in accordance with applicable law.

Collection of Information

We may collect personal data that you voluntarily provide to us, including your name, email address, telephone number, company details, job title, and any information submitted through contact forms, email communications, business enquiries, or other interactions with us.

We may also collect certain technical information automatically when you use our website, such as your IP address, browser type, device information, operating system, pages visited, referring URLs, and website usage data. Such information may be used for website administration, security, analytics, and performance monitoring.

Use and Processing of Information

We process personal data only where we have a lawful basis to do so under applicable law. This may include where processing is necessary for:
(i) investment and operational activities;
(ii) compliance with legal and regulatory obligations;
(iii) our legitimate business interests, provided such interests are not overridden by applicable rights and interests of the individual;
(iv) the performance of a task carried out in the public interest, where applicable; or
(v) consent, where consent is required.

Disclosure of Information

We may disclose personal data to our affiliates, portfolio companies, service providers, professional advisers, regulators, and competent authorities where necessary for operational, administrative, legal, regulatory, governance, investment-related, security, or compliance purposes and in accordance with applicable law.

We do not sell personal data to third parties. Any third parties acting on our behalf are authorised to use personal data only as necessary to provide services to us or to comply with legal obligations.

Retention of Information

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, reporting, or compliance requirements. Retention periods may vary depending on the nature of the personal data and the purpose of processing.

Where personal data is no longer required, we will take reasonable steps to securely delete, destroy, or anonymise it in accordance with applicable law and internal retention practices.

Information Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure. Access to personal data is limited to authorised personnel and service providers with a legitimate need to know.

While we take reasonable steps to protect personal data, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.

Data Breach

In the event of a personal data breach, we will assess the incident and take such steps as may be required under applicable law, including investigation, containment, remediation, and notification where necessary.

Your Rights

Subject to applicable law, you may have the right to request access to personal data we hold about you, request correction of inaccurate or incomplete data, request deletion of your personal data, object to or request restriction of certain processing activities, and withdraw consent where processing is based on consent.

To exercise any such rights, please contact us using the details set out below.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page and will take effect from the date of posting unless otherwise stated.

Acceptance of This Policy

By using this website, you acknowledge that you have read and understood this Privacy Policy.

Contact

If you have any questions about this Privacy Policy or our handling of personal data, please contact us at: +971 2 5837900