Privacy Policy

1. General provisions

This Policy describes how Nurion Holdings (“Nurion”, “we”) processes personal data when you use the website nurion.org and related services.

By using the site you confirm that you have read and accept this Policy. If you do not agree, please do not use the site and do not provide us with personal data.

2. What data we collect

Contact data you provide voluntarily: name, email, phone, company, position, short description of the project.

Technical data: IP address, browser and device type, operating system, referral source, pages visited, time and duration of the visit.

Cookies and similar technologies — for basic site functionality, analytics and saving language preferences.

3. Purposes of processing

Responding to your enquiries and requests related to projects and deals.

Conducting negotiations, due diligence and preparation of contractual structures.

Analytics and improvement of the website, content and platform products.

Compliance with applicable laws and regulatory requirements.

4. Legal grounds

Your consent — for contact forms and marketing communications.

Performance of a contract or pre-contractual steps — for requests related to participation in projects.

Legitimate interests of Nurion — site and infrastructure security.

Statutory requirements — KYC/AML, tax and corporate reporting.

5. Data sharing

We do not sell your data. Data may be shared with legal, tax and audit advisors, banks and payment systems, IT contractors — only to the extent necessary to provide services.

Cross-border transfers are protected by standard contractual clauses (SCC) and equivalent mechanisms within UAE, Kazakhstan and Cyprus jurisdictions.

6. Retention periods

Contact data — until consent is withdrawn or 3 years from the last interaction.

Deal and KYC documents — within the periods set by the legislation of the relevant jurisdiction (typically 5–10 years).

Technical logs and analytics — up to 24 months in anonymised form.

7. Your rights

Request access to, a copy of, correction or deletion of your data.

Restrict processing or object to it.

Withdraw previously given consent at any time.

File a complaint with the competent data protection authority in your jurisdiction.

8. Security

Access to data is granted only to employees and contractors who need it to perform their tasks, under written confidentiality obligations.

We use TLS encryption, access controls, audit logs and regular security reviews.

9. Data contact

For any questions about personal data processing, please write to privacy@nurion.ae. We respond within 10 business days.

Data controller: Nurion Holdings DMCC, Dubai, UAE.