[The Capital Co. W.L.L.] is the data controller for personal data collected through this platform, in accordance with Kuwait PDPL and CMA Module Nineteen.

• Identity: Full name, Civil ID, nationality, date of birth, passport
• Contact: Email, phone, residential address
• Financial: IBAN, income/net worth declarations, employment
• Compliance: FATCA/TIEA declarations, PEP status, source of funds
• Investment: Subscription records, portfolio, transaction history
• Technical: IP address, browser type, session data, login timestamps

• To verify identity and complete KYC as required by Module Nineteen
• To assess your investor category and enforce investment limits
• To facilitate subscriptions and process distributions
• To comply with AML, FATCA, TIEA, and other regulatory obligations
• To communicate about your investments and regulatory matters

We share data with: the Subscription Agent for KYC verification; the CMA Authority as required; AML/sanctions screening providers; and technology partners under data processing agreements. We do not sell personal data.

We retain personal data for a minimum of 10 years from your last transaction as required by Kuwaiti regulatory requirements.

You have the right to access, correct, or request deletion of your data (subject to retention obligations). Contact: info@thecapital.me