Legal · Data Protection

Privacy Policy

SWAQAR Group · Last updated: June 2026 · Version 1.0

This Privacy Policy applies to personal data collected through the SWAQAR Group institutional website at swaqar.com. SWAQAR Group is a governance-led, asset-light, non-custodial Trade Coordination Layer headquartered in Buea, Cameroon. This site is operated for institutional audiences only.

01

Data Controller

SWAQAR Group is the data controller for personal data collected through this website. Institutional inquiries and associated personal data are processed by SWAQAR Group under its governance framework and applicable data protection legislation, including the Saudi Personal Data Protection Law (PDPL) and, where applicable, the European General Data Protection Regulation (GDPR).

02

What Data We Collect

When you submit an institutional inquiry through our contact form, we collect the following data: your full name (as authorised representative), your institutional email address, your organisation or institution name, your selected engagement category, and the content of your inquiry. We do not collect payment data, identification documents, or any sensitive personal data through this website. We do not use tracking cookies, advertising pixels, or third-party analytics tools.

03

How We Use Your Data

Personal data submitted through our contact form is used solely for the following purposes: to review your institutional inquiry against SWAQAR's counterparty eligibility criteria; to send an automated acknowledgement to your institutional email address confirming receipt; to communicate with you regarding the outcome of your eligibility review; and to maintain an institutional record of engagement in accordance with SWAQAR's governance and institutional memory requirements. We do not use your data for marketing, profiling, or any commercial purpose unrelated to the institutional engagement you initiated.

04

Legal Basis for Processing

We process your personal data on the basis of legitimate interests — specifically, the legitimate institutional interest in reviewing and responding to formal institutional inquiries — and, where required, with your implicit consent given by voluntarily submitting the contact form. Where GDPR applies, processing is conducted under Article 6(1)(b) (performance of a pre-contractual relationship) and Article 6(1)(f) (legitimate interests).

05

Email Delivery

We use Resend (a third-party email delivery service) to send acknowledgement emails and to deliver inquiry notifications to our institutional inbox. Resend processes email content as a data processor on our behalf. Resend's infrastructure operates under applicable data protection standards. No personal data is stored by Resend beyond what is required for email delivery.

06

Data Retention

Personal data submitted through the contact form is retained for as long as is necessary to complete the institutional review process and to maintain an accurate institutional record in accordance with SWAQAR's governance requirements. Where an engagement does not proceed, personal data is retained for a period of no longer than 24 months from the date of submission, after which it is securely deleted. Where an engagement proceeds, data retention is governed by the terms of the relevant institutional agreement.

07

Data Sharing

SWAQAR Group does not sell, rent, or share personal data with third parties for commercial or marketing purposes. Personal data may be shared with: our email delivery provider (Resend) solely for the purpose of sending communications; legal counsel or compliance advisors, where required under applicable law or our governance framework; and regulatory authorities, where required by law. All third parties with whom data is shared are bound by appropriate data processing agreements.

08

Your Rights

Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to our legitimate institutional retention requirements; object to processing based on legitimate interests; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at support@swaqar.com. We will respond within the timeframe required by applicable law.

09

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Our contact form data is transmitted over encrypted connections (HTTPS). API keys and credentials are stored as encrypted environment variables and are never exposed in public code repositories.

10

Cookies and Tracking

The SWAQAR Group website does not use tracking cookies, advertising cookies, or third-party analytics tools. No personal data is collected through cookies. The website uses only essential technical mechanisms required for its operation, including standard browser caching and HTTPS security protocols.

11

International Transfers

SWAQAR Group is headquartered in Buea, Cameroon. Our email delivery infrastructure (Resend) operates in the United States (North Virginia region). Where personal data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place in accordance with applicable data protection law, including standard contractual clauses where required under GDPR.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The version date at the top of this page will be updated when changes are made. We recommend reviewing this page periodically. Continued use of this website following any update constitutes acceptance of the revised policy.

13

Contact

For any questions regarding this Privacy Policy or your personal data, contact SWAQAR Group at: support@swaqar.com · SWAQAR Group, Buea, Cameroon · swaqar.com

Governance Note

This Privacy Policy is issued under SWAQAR Group's Data Protection & Privacy Governance Framework and is subject to review by the Ethics & Oversight Council. SWAQAR Group is currently in Phase I — Foundation Stage and is not yet operationally active. This policy governs data collected through the institutional website only.