PRIVACY STATEMENT


Apex, its parent company, subsidiaries and affiliates, collects, holds, uses, verifies and discloses (“processes”) information about individuals which may constitute personal data, under applicable data protection and privacy laws in jurisdictions outside State of Kuwait.


Unless advised otherwise, all references to Apex, "we", or "our" in this Privacy Policy includes, individually and collectively, Apex related entities located in jurisdictions outside United States of America, that process personal data as controllers.


In connection with specific products or services offered by Apex, you will also be provided with additional privacy policies or statements which are relevant to those specific products or services.


Please read this Privacy Policy carefully to understand how we process your personal data.


  1. What personal data do we collect?


    If you deal with Apex as a private client, investor or otherwise in your individual capacity e.g. relating to a investment vehicle or as a current or prospective employee, then, depending on the jurisdiction you are in, we collect the following types of personal data about you:

  2. How do we collect your personal data?


    The personal data we collect regarding you comes primarily from information that you submit to us or that is otherwise captured during the course of your relationship with us.


    For clients, we obtain personal data about you from the forms and documents used when you apply for a portfolio with us, from your transactions with us and from your access to or use of our products and services.


    For employees or applicants for employment, we obtain personal data about you from your resume or job application form.


    We also collect personal data when we monitor or record our communications with you or through use of certain technology as detailed further below.


  3. Personal data obtained from other sources


    We also obtain your personal data from our agents or service providers acting on our behalf, from third parties authorized to provide us with such information, such as credit reporting bodies, other credit providers or other agencies used for running due diligence checks, authorized third parties performing identity verification procedures on our behalf and/or from third parties who provide services to you such as your financial adviser, financial planner, accountant or other professional adviser.

    The personal data we obtain through these sources include personal details, contact details, identification documents, personal identifier, financial account information, and were permitted by applicable law and only to the extent needed information relating to political affiliations, trade union membership or criminal convictions. In addition, where Apex is offering financing to you and these sources are performing identity verification functions in relation to such financing offering, they will disclose name, date of birth and address to a credit reporting agency if permitted by applicable law. In such an instance, the credit reporting agency will perform an assessment of whether the information matches its record, either in whole or part, and provide the assessment results to us. Please inform your Client Relation Officer, in the event you do not want your personal data verified against credit reporting agency information for identity verification purposes, who will discuss other options available to you.


    Some of this information is publicly accessible and/or reliable and independent databases that we access through an authorized third party to whom we disclose your personal data for the purpose of performing required identity verification procedures.


    Where you are an individual associated with a corporation or institution with whom Apex does business, your personal data will also be provided to us via that corporation or institution. Such personal data includes personal and contact details, financial information, identification documents and, where permitted by applicable law and only to the extent needed, information relating to political affiliations, trade union membership or criminal convictions.


  4. What are the purposes and legal basis for which we use your personal data?


    We are not allowed to process personal data if we do not have valid legal grounds. Accordingly, we, our associated firms and/or other persons acting on our or their behalf will only process and use your personal data:


    1. if necessary for our legitimate interests, (in each case provided such interests are not overridden by your privacy interests) or necessary for taking steps to enter or executing a contract with you for the services or products you request, or for carrying out our obligations under such a contract, such as when we use your personal data including:

      • Administer and operate services in accordance with the customer documents (including without limitation authorizing or confirming transactions and for billing purposes);

      • To provide operational support and development of our businesses including to evaluate customer service, efficiency and cost, as well as risk management purposes;

      • To contact you about other services and products we offer (with your prior consent where required by applicable law);

      • For monitoring purposes specified section 5 below; and

      • For other legitimate interest as listed in (b) to (d) inclusive below.


    2. When dealing with us as an individual, where necessary for taking steps to enter into or executing a contract with you for the services or products you request; or for carrying out our obligations under such a contract, in this case, the provision of your personal data is a requirement necessary to enter into a contract with us, meaning that you are obliged to provide your personal data to us in order to carry out the relevant contract (which otherwise, we will not be able to do), including:

      • For recruitment purposes, to confirm your references and educational background and to consider your suitability for any current or future recruitment requirements;

      • In case of employees, to carry out the employment relationship, to fulfill our duties as an employer and to make use of our rights as employer; and

      • For internal training purposes.

    3. To exercise and defend our legal rights anywhere in the world including in relation to any litigation, disputes or contentious matter we or that of any Associated Firm anywhere in the world are involved in and/or to assist with investigations, complaints, regulatory requests, litigation, arbitration, mediation or requests from individuals;


    4. In order to comply with legal and regulatory obligations and requests, (including any legal or regulatory guidance, codes or opinions), applicable to us anywhere in the world or for the performance of a task carried out in the public interest, including:

      • To carry out credit, money laundering and conflict checks and for fraud, financial crime prevention purposes (and this may include consideration of information regarding political affiliations and criminal offences committed or alleged to have been committed); to verify your personal data we collect from you for such credit, money laundering and conflict checks;

      • For reporting (including without limitation transaction reporting) to, and audits by, national and international regulatory, enforcement or exchange bodies and complying with court orders associated with us; and for monitoring purposes specified below.


  5. What monitoring do we conduct?


    To the extent permitted by applicable law, we, our associated entities or any other persons on our or their behalf access, review, disclose, intercept, monitor and/or record (“Monitor”) (i) verbal and electronic messaging and communications (e.g., telephone, facsimile, sms, instant message, email, Bloomberg and any other electronic or recordable communications) with you and your agent (“Communications”) and (ii) your use of technology owned by or made accessible by us, our Associated Firms or any other persons on our or their behalf, including but not limited to systems that facilitate Communications with you or your agent, information processing, transmission, storage and access, as well as remote access (collectively “Systems”).


    We will only Monitor Communications and Systems to the extent permissible under applicable law from time to time for the following purposes:

  6. When do we disclose personal data we collect about you?


    Please rest assure that Apex ;

  7. How do we protect your personal data we collect about you?


    Apex maintains appropriate physical, technical and procedural safeguards designed to protect any information that you provide to us, mainly;

  8. How do we retain your personal data?


    We retain personal data in an identifiable form in accordance with our records retention policy which establishes general standards and procedures regarding the retention, handling and disposition of personal data. Personal data is retained as long as necessary to meet legal, regulatory and business requirements. Retention periods will be extended if we are required to preserve personal data in connection with litigation, investigations and proceedings. Upon request, we and/or our Associated Firms will provide you with more information on the exact retention periods applying to Your Information in each case.


  9. What marketing do we conduct?


If there are any products or services that we or our associated firms believe may be of particular interest to you, whether provided by us, by our associated firms, we or our associated firms will contact you by mail, email, telephone, etc., including outside standard working hours or if you are travelling overseas. Where required by applicable law, we will request your prior consent before we or our associated firms use your personal data for marketing purposes. If you do not wish us to use or provide to our associated firms Your Information for marketing purposes, you may notify us at @Apex.com any time or as directed in any

marketing materials we send to you. Please note that if you do not wish us or our associated firms to contact you for such purposes, we or our associated firms may need to limit the range of products and services which we or our associated firms will offer to you or we or our associated firms may not be able to open an account for you or continue our relationship with you.


9. How do we update this Privacy Policy?


We may change or update portions of this Privacy Policy to reflect changes in our practices and or applicable law and regulation. Please check this Privacy Policy from time to time so you are aware of any changes or updates to the Privacy Policy, which may be indicated by a change in the effective date noted at the beginning of the Privacy Policy. Where required under applicable data protection and privacy laws, we will notify you of any change or update portions of this Privacy Policy by individual message or by disclosing the changes to the data processing on a publicly available medium.