Onboarding an investor means handling identity documents and financial records. This page states plainly what we collect, why we are required to hold it, and what you can ask us to do with it.
Last updated 1 August 2026Version 2.0
1. Controller
Strata Properties DXBi Asset Management Ltd, Dubai, United Arab Emirates, is the controller of your personal data. Reach our data protection contact at hello@dxbi.com.
2. What we collect
Identity Name, date of birth, nationality, Emirates ID or passport, photograph, proof of address
Financial Bank details, source of funds evidence, transaction and distribution history
Screening Sanctions, PEP and adverse-media check results
Platform use Account activity, device and log data, correspondence with our teams
3. Why we hold it
To verify your identity and admit you to the platform; to administer subscriptions, share registers and distributions; to meet anti-money-laundering, sanctions and regulatory reporting obligations; to maintain security and prevent fraud; and to communicate with you about your holdings. Marketing email is sent only with your consent and can be stopped at any time.
4. Who we share it with
Identity verification and screening providers; the banks holding escrow and SPV accounts; external legal counsel and registry agents for title and share transfers; auditors; and regulators or law enforcement where we are legally required to disclose. We do not sell personal data, and we do not share it with other investors beyond what a share transfer legally requires.
5. Transfers abroad
Some providers process data outside the UAE. Where they do, transfers are made under contractual protections requiring a standard of care equivalent to that applied here.
6. How long we keep it
KYC and transaction records are retained for at least eight years after your relationship with us ends, as required of regulated firms. Records tied to a shareholding are kept for the life of the SPV and its statutory retention period. Marketing preferences are kept until you withdraw consent.
7. Your rights
You may request access to your data, correction of inaccuracies, deletion where no legal duty requires us to retain it, a portable copy, or restriction of certain processing. Write to hello@dxbi.com; we respond within 30 days. Regulatory retention obligations mean we cannot always delete on request, and we will tell you when that is the case.
8. Security
Data is encrypted in transit and at rest. Access to identity documents is limited to the compliance team and logged. Any breach affecting your data is notified to you and to the relevant authority without undue delay.
9. Cookies
We use essential cookies to keep you signed in and secure, and analytics cookies to understand how the platform is used. Analytics can be declined without affecting your access.
To exercise any right above, email hello@dxbi.com with “Data request” in the subject line.