Privacy Policy
Last updated: 26 October 2026
Capitals28 ("Capitals28", "we", "us") advises on asset ownership, corporate structuring and residency from our office at Empire Heights, Downtown Dubai, UAE. This policy explains what personal data we collect when you visit capitals28.com or contact us, why we use it, who we share it with and the choices you have.
Who is responsible for your data
Capitals28 is the controller of the personal data described in this policy. Questions about it, or requests to exercise your rights, can be sent to info@capitals28.com.
What we collect
- Information you give us – your name, email address, phone or WhatsApp number, country of residence and the details you include in an enquiry, consultation request or partner application.
- Information needed to deliver a service – once you become a client, the identity, family, financial and source-of-funds documents that a residency programme, company formation, property or asset transaction legally requires.
- Technical information – your IP address, browser type, device, the pages you view and the time of your visit, recorded in server logs and, where enabled, by the tools described in our Cookie Policy.
How we use it
- to answer your enquiry and arrange a consultation;
- to prepare proposals and deliver the services you engage us for;
- to meet our legal obligations, including anti-money-laundering and know-your-customer checks;
- to send you news and briefings you have asked for – you can unsubscribe at any time;
- to keep the website secure, prevent spam and understand how it is used so we can improve it.
We rely on your consent, on the steps needed to enter into or perform a contract with you, on our legal obligations and on our legitimate interest in running and protecting our business, as applicable to each purpose.
Who we share it with
We do not sell personal data. We share it only where needed to serve you: with government and programme authorities, banks, developers, licensed agents, lawyers and other professional partners involved in your matter; with service providers who host our website, email and systems on our behalf; and with authorities where the law requires it. Each recipient receives only the information relevant to its role.
International transfers
Our work is cross-border by nature. Your data may be transferred to the countries where a programme, company or asset is located, or where our service providers operate. Where we do so, we take steps to ensure the data remains protected in line with applicable law, including the UAE Personal Data Protection Law.
How long we keep it
Enquiries that do not lead to an engagement are kept for up to two years. Client files are kept for as long as the relationship lasts and afterwards for the period required by anti-money-laundering, tax and other laws – typically five years or more.
Your rights
Subject to applicable law, you may ask to access the personal data we hold about you, correct it, have it deleted, restrict or object to its use, receive it in a portable format, or withdraw consent you have given. To make a request, email info@capitals28.com. You may also complain to the data protection authority where you live.
Security
We use encrypted connections, access controls and confidentiality obligations to protect your information. No system is completely secure, so please share sensitive documents only through the channel we agree with you.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.
Contact
Capitals28, Empire Heights, Downtown Dubai, UAE
Email: info@capitals28.com
Phone: +971 54 544 00 28