Effective date: 15 June 2026
1. About this Privacy Policy
This Privacy Policy explains how Hamilton International Mortgage Consultant — a civil company licensed by the Government of Dubai, Department of Economy and Tourism, under Professional Licence No. 748683, authorised to carry on the activities of Financing Broker and Mortgage Consultant — which owns and operates the Finance Market platform (the website at financemarket.ae, related sub-domains, and any mobile applications, together the "Platform") collects, uses, shares, stores and protects your personal data. "Finance Market" is a brand and registered trademark of Hamilton International Mortgage Consultant.
In this Policy, "Finance Market", "we", "us" and "our" refer to Hamilton International Mortgage Consultant in its capacity as operator of the Platform. "You" and "your" refer to any individual who visits the Platform, creates an account, submits an enquiry, or uses our services.
We are committed to processing your personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing Executive Regulations as and when issued, and with all other applicable laws of the United Arab Emirates.
For the purposes of the PDPL, Finance Market acts as a data controller in respect of the personal data described in this Policy. Where we share your data with banks, lenders, insurers and other product providers (each a "Provider"), each Provider acts as an independent data controller in respect of the data it receives and is governed by its own privacy policy.
By using the Platform or submitting your information to us, you acknowledge that you have read and understood this Privacy Policy.
2. What Finance Market does (and what it is not)
Finance Market is a licensed Financing Broker and Mortgage Consultant that operates an online platform to help you discover, compare and apply for financial products — such as home loans, personal loans, credit cards, insurance and other products — offered by third-party banks, lenders and insurers (each a "Provider").
- As a licensed mortgage broker and consultant, we may arrange and facilitate your application to Providers and provide mortgage consultancy in connection with our licensed activities.
- We are not a bank, lender, finance company or insurer, and we do not provide credit, lend money or underwrite insurance. The decision to approve, decline, price or issue any product rests solely with the relevant Provider, subject to its own eligibility criteria, terms and approvals.
- General information, comparisons and calculators on the Platform are for information only and do not constitute investment, tax or legal advice. See our separate Disclaimers.
Understanding this role matters for your privacy: to deliver the service you request, we share the information you give us with the Providers you ask us to approach, and they will process it under their own privacy policies.
3. The personal data we collect
We collect the following categories of personal data, depending on how you use the Platform.
3.1 Information you provide to us
Identity and contact data — full name, date of birth, nationality, gender, residency status, Emirates ID number, passport details, residential address, email address, and mobile/telephone number.
KYC and verification documents — copies of your Emirates ID, passport and visa page, salary certificates, employment letters, trade licences (for self-employed applicants), and similar identity/eligibility documents.
Financial information — employment status and employer details, income and salary, existing liabilities and obligations, bank statements, credit-card and loan details, declared expenses, and information about the product you are seeking (e.g., loan amount, property value, tenor).
Application and enquiry data — the products you compare, calculator inputs, the enquiries and applications you submit, and your correspondence with us.
Account data — your login credentials and account settings, where you create an account.
3.2 Information we collect automatically
Technical and usage data — IP address, device and browser type, operating system, language settings, the pages you view, referring URLs, and the dates/times of your visits.
Cookies and similar technologies — see our separate Cookies Policy for full details and your choices.
3.3 Information we receive from third parties
We may receive information about you from Providers (e.g., application status and outcomes), from credit information agencies such as Al Etihad Credit Bureau (AECB) where you have consented to a credit check, from identity-verification and fraud-prevention services, and from analytics and advertising partners.
3.4 Sensitive personal data
We do not seek to collect special-category/sensitive data (such as health, biometric, genetic, religious or similar data) unless it is strictly necessary for a specific product (for example, certain insurance products) and you have given your explicit consent, or another lawful basis under the PDPL applies.
4. How and why we use your personal data (purposes and lawful bases)
Under the PDPL we must have a lawful basis for processing your personal data. The table below sets out what we do, why, and the lawful basis we rely on.
| Purpose | Examples | Lawful basis (PDPL) |
|---|---|---|
| Provide the comparison and marketplace service you request | Showing products, running calculators, creating and managing your enquiry/account | Performance of a contract / your request for our services |
| Share your enquiry and documents with the Provider(s) you select so they can assess and process your application | Passing your KYC and financial information to a chosen bank, lender or insurer | Your consent |
| Carry out credit checks where applicable | Submitting a credit enquiry to AECB or a Provider | Your consent |
| Identity verification, fraud prevention and security | Verifying documents, detecting suspicious activity | Legitimate operation of our service / compliance with a legal obligation |
| Comply with legal and regulatory obligations | Anti-money-laundering (AML/CFT), record-keeping, responding to authorities | Compliance with a legal obligation |
| Communicate with you about your enquiry | Status updates, requests for further documents, support | Performance of a contract / your request |
| Send you marketing and offers (where you have opted in) | Newsletters, product offers, promotions | Your consent (separate, opt-in — see Section 9) |
| Improve and analyse the Platform | Analytics, troubleshooting, product development | Legitimate operation of our service / consent for non-essential cookies |
Consent is granular and separate. Where we rely on consent, we ask for it separately for distinct purposes — for example, separate consent for (i) sharing your data with Providers, (ii) credit-bureau checks, and (iii) marketing. You can withdraw any consent at any time (see Section 8); withdrawal is as easy as giving consent, and it does not affect processing carried out before withdrawal.
4.1 Authority to represent you to Providers
When you submit an enquiry or application, you authorise Finance Market to represent you to the relevant Providers and credit information agencies — to pass on your information and documents and to receive information back about the status and outcome of your application — for the purpose of obtaining the quotations and products you have requested. You may withdraw this authority at any time by contacting us, although doing so may prevent us from progressing an enquiry already in motion.
4.2 Automated processing and AI tools
We use software tools, including artificial-intelligence tools, to help us operate the Platform efficiently — for example, to organise enquiries, verify documents and route applications to suitable Providers. We do not use AI to make automated decisions about your eligibility for any product; credit and underwriting decisions are made solely by the relevant Provider. Where any processing would produce a legal or similarly significant effect on you, you have the right to object and to request human review (see Section 8).
4.3 Information about other people; call recording
If you submit personal data about another person (for example, a co-applicant or guarantor), you confirm that you have their permission to do so and that you have informed them how their data will be used. Telephone calls with our team may be monitored or recorded for training, quality and compliance purposes; where required, we will tell you at the start of the call.
5. Who we share your personal data with
We share your personal data only as described below, and we do not sell your personal data.
Providers you select. When you submit an enquiry or application, we share the relevant information — including your KYC and financial documents — with the bank(s), lender(s), insurer(s) or other Provider(s) you have asked us to approach. Each Provider is an independent controller and uses your data under its own privacy policy.
Credit information agencies. Where you consent, we facilitate credit checks with agencies such as the Al Etihad Credit Bureau (AECB).
Service providers and processors. Trusted third parties who process data on our behalf and under contract — including cloud hosting and storage, identity-verification and fraud-prevention vendors, communications (SMS/email) providers, analytics providers, and customer-support tools.
Group companies. Members of the Hamilton International group, where relevant to operating the Platform, under appropriate safeguards.
Professional advisers and authorities. Our auditors, lawyers and insurers; and government authorities, regulators, courts or law-enforcement bodies where we are required or permitted by law to disclose data (including under AML/CFT and cybercrime legislation).
Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality protections.
6. International transfers of personal data
Your personal data is primarily processed and stored in the United Arab Emirates. Some of our service providers (for example, cloud and analytics providers) may process data outside the UAE.
Where we transfer personal data outside the UAE, we do so in accordance with the PDPL — that is, to jurisdictions recognised by the UAE Data Office as providing an adequate level of protection, or, where no such recognition applies, on the basis of your explicit consent and/or appropriate contractual safeguards designed to protect your data. Because the UAE Data Office has not yet published its list of adequate jurisdictions or its standard contractual clauses, we currently rely principally on your consent and contractual safeguards for any transfer abroad. You may contact us at any time for more information about the safeguards we apply.
7. How long we keep your personal data (retention)
We keep your personal data only for as long as necessary for the purposes set out in this Policy, after which we delete or anonymise it.
Important — legal retention overrides deletion. Where your information relates to a financial product or an enquiry that engages anti-money-laundering and counter-terrorist-financing obligations, applicable UAE law (including Federal Decree-Law No. 20 of 2018) requires KYC, identification and transaction records to be retained for a minimum of five (5) years from the end of the relationship or the completion of the relevant transaction, and sometimes longer. During this period we will retain your data to meet our legal obligations even if you ask us to delete it, and we may also retain data where needed to establish, exercise or defend legal claims, or to comply with tax, regulatory or court requirements. After the applicable retention period ends, we securely delete or anonymise your data.
8. Your rights
Subject to the PDPL and to the legal limits described in this Policy (including the AML retention rule in Section 7), you have the right to:
- Be informed about how we process your personal data (this Policy);
- Access the personal data we hold about you;
- Rectify or correct inaccurate or incomplete data;
- Request erasure / deletion of your data;
- Restrict or object to certain processing;
- Data portability — receive your data in a structured, commonly used, machine-readable format;
- Object to direct marketing at any time;
- Object to automated decision-making and profiling that produces legal or similarly significant effects; and
- Withdraw consent at any time, where processing is based on consent.
How to exercise your rights. Contact us using the details in Section 13. We may need to verify your identity before acting on a request. We will respond within one (1) month of receiving a valid request; for complex or multiple requests we may extend this by up to two (2) further months and will tell you if we do.
Complaints. If you are unhappy with how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the UAE Data Office.
9. Marketing communications
We will send you marketing communications only where you have given your prior, specific consent, and your marketing consent is always separate from (and not a condition of) using our core services.
- Every marketing message includes an easy way to unsubscribe / opt out, and you can manage your preferences in your account or by contacting us.
- We send marketing messages only within the hours permitted by UAE regulation (currently 07:00–21:00 UAE time) and in line with the rules of the Telecommunications and Digital Government Regulatory Authority (TDRA).
- Withdrawing marketing consent will not affect service-related communications we must send you about your enquiries or account.
10. How we protect your personal data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure — including encryption in transit, access controls, secure storage of documents, and staff confidentiality obligations. Unauthorised access to or disclosure of personal data is also a criminal offence under Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes.
No method of transmission or storage is completely secure. In the event of a personal-data breach, we will act in accordance with the PDPL, including notifying the UAE Data Office and, where the breach is likely to result in a high risk to you, notifying you.
11. Cookies and tracking
We use cookies and similar technologies to operate the Platform, remember your preferences, analyse usage, and (with your consent) for advertising. Non-essential cookies are used only with your consent. Please see our separate Cookies Policy for full details and controls.
12. Children
The Platform and our services are intended for individuals aged 18 years or older. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.
13. Data Protection Officer and contact details
For any privacy question, to exercise your rights, or to contact our Data Protection Officer, please use the details below:
Hamilton International Mortgage Consultant — operator of Finance Market
Professional Licence No. 748683 (Government of Dubai, Department of Economy and Tourism)
Attn: Data Protection Officer / Legal
Office 201, Al Masaood Building, 54 Al Maktoum Road, Riggat Al Buteen, Deira, Dubai, United Arab Emirates — P.O. Box 12875
Email: [email protected]
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time — for example, to reflect changes in our services or in the law (including when the PDPL Executive Regulations are issued). We will post the updated Policy on the Platform with a new "Last updated" date, and where changes are material we will take reasonable steps to notify you. Your continued use of the Platform after an update constitutes acknowledgement of the revised Policy.
15. Governing law
This Privacy Policy is governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai, and any dispute relating to it is subject to the jurisdiction of the competent courts of Dubai.
16. Governing language
This Privacy Policy is drafted in English; the Arabic version is provided for convenience only. In the event of any inconsistency between the two, the English version shall prevail.