GDPR Policy

General Data Protection Regulation (GDPR) Policy

Effective Date: October 27, 2026

1. Corporate Commitment to Global Data Privacy

Welcome to Invest NameBangla (accessible via https://invest.namebangla.com). Operating at the nexus of the United Arab Emirates’ financial ecosystem and global capital markets, we recognize that our corporate audience spans multiple international jurisdictions, most notably the European Economic Area (EEA) and the United Kingdom. As a premier publisher of macroeconomic intelligence, property finance strategies, and corporate wealth blueprints, we are absolutely committed to ensuring the highest echelon of digital privacy and data security.

This dedicated General Data Protection Regulation (GDPR) Policy outlines our strict compliance with the European Union’s GDPR (Regulation (EU) 2016/679), the UK GDPR, and harmonizes these international standards with the United Arab Emirates Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL). This document is designed to provide complete transparency regarding how we collect, process, store, and shield the personal data of our European and global digital visitors.

2. Identity of the Data Controller

Under the definitions stipulated by the GDPR, the “Data Controller” is the corporate entity that determines the purposes and means of the processing of personal data. For all digital operations, newsletter subscriptions, and data analytics occurring on this platform, the Data Controller is:

Corporate Entity: Invest NameBangla
Executive Director / Data Protection Officer (DPO): Mizanur Rahman Hridoy
Registered Infrastructure Address: Level 41, Emirates Towers, Sheikh Zayed Road, PO Box 31303, Dubai, United Arab Emirates
Primary GDPR Contact: support@invest.namebangla.com

3. The Legal Basis for Processing Personal Data

Invest NameBangla strictly processes personal data only when we have a verified, lawful basis to do so under Article 6 of the GDPR. Depending on your interaction with our financial portal, our legal basis for processing your data will fall under one of the following categories:

  • Explicit Consent (Article 6(1)(a)): We process your data when you have given us clear, affirmative, and unambiguous consent to do so for a specific purpose. This includes subscribing to our corporate finance newsletters, opting into push notifications, or accepting non-essential advertising and analytics cookies via our Consent Management Platform (CMP).
  • Contractual Necessity (Article 6(1)(b)): Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into a contract, such as requesting specialized B2B financial consultations.
  • Legal Obligation (Article 6(1)(c)): We may process your data if it is legally required to comply with a binding UAE federal mandate, an international court order, or regulatory financial compliance.
  • Legitimate Corporate Interests (Article 6(1)(f)): We process data when it is necessary for our legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes network security, preventing digital fraud, optimizing our web architecture, and analyzing macroeconomic reading trends to improve our financial journalism.

4. Your Explicit Rights Under the GDPR (Data Subject Rights)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, the GDPR grants you immense, non-negotiable rights over your personal data. Invest NameBangla formally guarantees your ability to exercise the following rights seamlessly:

4.1. The Right of Access (Article 15)

You possess the absolute right to obtain corporate confirmation as to whether or not your personal data is being processed by our infrastructure. If it is, you have the right to request a complete, readable copy of the personal data we hold about you, along with detailed supplementary information explaining how and why we process it.

4.2. The Right to Rectification (Article 16)

Financial accuracy is the bedrock of our business. If you believe that any personal or corporate data we hold about you is mathematically inaccurate, outdated, or incomplete, you have the right to demand immediate rectification. We will correct the data across all our active databases without undue delay.

4.3. The Right to Erasure / “Right to be Forgotten” (Article 17)

You possess the right to request the permanent deletion or erasure of your personal data from our servers. We will execute this erasure when the data is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when you successfully object to the processing. Exceptions only apply if retaining the data is required for compliance with a UAE legal obligation or for the establishment of legal defense.

4.4. The Right to Restrict Processing (Article 18)

You have the right to request that we temporarily halt the processing of your personal data under specific conditions. For example, if you contest the accuracy of the data we hold, we will restrict all processing of that data until its accuracy has been officially verified by our data desk.

4.5. The Right to Data Portability (Article 20)

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format (such as a CSV or XML file). Furthermore, you have the right to request that we transmit this data directly to another Data Controller or financial institution, where technically feasible.

4.6. The Right to Object (Article 21)

You maintain the right to object to the processing of your personal data at any time, particularly if the processing is based on our legitimate corporate interests or is being used for direct marketing purposes. Upon receiving an objection, Invest NameBangla will immediately cease processing your data for those purposes.

4.7. Rights Related to Automated Decision-Making and Profiling (Article 22)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Invest NameBangla ensures human oversight in all critical corporate decisions.

5. Automated Profiling and Google Ad Exchange (ADX)

To keep our high-tier financial intelligence accessible and free of charge, Invest NameBangla relies on premium programmatic advertising, primarily utilizing the Google Ad Exchange (ADX) network. Under the GDPR, programmatic advertising often involves “profiling”—the automated processing of personal data to evaluate specific personal aspects, such as analyzing your interest in “Dubai Off-Plan Property” to serve you highly relevant corporate real estate advertisements.

Invest NameBangla strictly adheres to the IAB Europe Transparency and Consent Framework (TCF v2.2). When you visit our platform from an EU/UK IP address, you will be presented with a legally compliant Consent Management Platform (CMP) banner. You have the absolute right to:

  • Accept all tracking and profiling cookies for personalized ADX advertisements.
  • Reject all non-essential cookies, resulting in generic, non-personalized advertising.
  • Granularly select which specific third-party vendors and data purposes you consent to.

You may revoke or modify this consent at any given time by accessing the “Privacy Preferences” link located in the footer of our website.

6. International Cross-Border Data Transfers

Invest NameBangla is headquartered in the United Arab Emirates, while our digital servers, content delivery networks (CDNs), and third-party advertising partners (like Google) operate on a global scale. Therefore, the data we collect from you may be transferred to, stored at, and processed in jurisdictions outside of the European Economic Area (EEA), including the UAE and the United States.

The GDPR strictly regulates cross-border data transfers to ensure your privacy rights travel with your data. Whenever we transfer your personal data outside of the EEA, we ensure a similar degree of protection is afforded to it by utilizing one of the following legal safeguards:

  • Adequacy Decisions: We transfer data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Standard Contractual Clauses (SCCs): Where we use service providers based in the US or UAE, we utilize specific enterprise contracts approved by the European Commission (SCCs) which give personal data the same rigorous protection it enjoys within Europe.

7. Data Retention Protocols

Invest NameBangla fundamentally adheres to the GDPR principle of data minimization. We will solely retain your personal data for as long as reasonably necessary to fulfill the specific purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or corporate reporting requirements.

For example, analytical data and server logs are automatically purged every 26 months. Consent records for GDPR compliance are retained for a minimum of 5 years to demonstrate regulatory compliance during potential audits.

8. Data Breach Notification Policy

Despite our deployment of military-grade SSL encryption, web application firewalls (WAF), and rigorous access controls, digital breaches can theoretically occur. In accordance with GDPR Article 33, Invest NameBangla maintains a strict Data Breach Response Plan.

In the event of a personal data breach that is likely to result in a high risk to your digital rights and financial freedoms, we will formally notify you and the relevant supervisory authority without undue delay, and strictly no later than 72 hours after becoming legally aware of the breach. This notification will include the nature of the breach, the likely consequences, and the exact measures we are taking to mitigate the damage.

9. How to Exercise Your GDPR Rights

Executing your data rights with Invest NameBangla is a frictionless process. If you wish to access, rectify, erase, or port your data, or if you wish to withdraw your advertising consent, please contact our Data Protection Officer (DPO) desk directly. We will evaluate and fulfill your request completely free of charge within one calendar month of receipt.

To submit a formal GDPR request, please email: support@invest.namebangla.com with the subject line “Formal GDPR Data Request”.

10. Right to Lodge a Formal Complaint

If you believe that Invest NameBangla has processed your personal data in violation of the GDPR, we highly encourage you to contact us first so our executive team can resolve the issue immediately. However, you maintain the absolute legal right to lodge a formal complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

11. Corporate Contact Information for Data Privacy

For any inquiries regarding this GDPR Policy, our cross-border data transfer mechanics, or your digital privacy rights, please direct your correspondence to our executive infrastructure:

Data Protection Officer (DPO): Mizanur Rahman Hridoy

Invest NameBangla
Level 41, Emirates Towers
Sheikh Zayed Road, PO Box 31303
Dubai, United Arab Emirates

GDPR & Privacy Desk: support@invest.namebangla.com
Corporate Operations: info@invest.namebangla.com