Privacy Policy

1 · Introduction

Summits Broker ("we", "us", "our") is a Dubai-licensed Business Development Company. Summits Broker is an independent partner-solutions company and is not legally part of OneRoyal, the regulated broker we work alongside as an official Brand Ambassador. This Privacy Policy explains how we collect, process, use, disclose, and protect your personal data, in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable laws.

2 · Information We Collect

• Identity Data — Name, email address, phone number, nationality, and job title.
• Business Data — Company name, trading volume, client base, business model, and partnership details.
• Technical Data — IP address, browser type, device information, and website usage data collected via cookies (see our Cookies Policy for details).
• Communication Data — Messages, inquiries, and documents you submit through our contact or partnership application forms.

3 · How and Why We Use Your Data

We process your personal data for the following purposes, on the lawful grounds set out under the PDPL:

• Evaluating and managing Partner (IB) applications
• Negotiating and facilitating your partnership with OneRoyal
• Providing dedicated account management and business support
• Complying with our legal and regulatory obligations
• Improving our website and services (legitimate interest)

4 · Who We Share Your Data With

We may disclose your personal data to:

• OneRoyal, as the regulated broker responsible for your trading account, funds, and execution
• Trusted third-party service providers (such as CRM, hosting, and analytics providers) under strict data processing agreements
• Regulatory or governmental authorities, where required by law

We do not sell your personal data to any third party.

5 · International Data Transfers

• Your data may be transferred outside the UAE — for example to Australia or Cyprus, where OneRoyal group entities are located. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent mechanisms recognised under applicable law.

6 · Data Security & Retention

We apply appropriate technical and organisational measures — including encryption and access controls — to protect your data. We retain personal data only for as long as necessary for the purpose it was collected, or as required by law (up to 7 years for partnership records).

7 · Your Rights

Under the UAE PDPL, you have the right to:

• Access, correct, or request deletion of your personal data
• Restrict or object to certain processing
• Request data portability
• Withdraw consent, where processing is based on consent

To exercise any of these rights, contact us using the details in Section 10.

8 · Cookies

Our website uses essential, functional, and analytical cookies to operate properly and improve your experience. For full details on the types of cookies we use and how to manage your preferences, see our Cookies Policy.

9 · Changes to This Policy

We may update this Privacy Policy from time to time, to reflect changes in our practices or for legal reasons. The updated version will be posted here with a revised "Last Updated" date.

10 · Contact Us

For questions about this Privacy Policy, or to exercise any of your data protection rights, contact our Privacy Officer: