Privacy Policy

United Financial Investments Co. · Last updated: Nov 5, 2026

1. Introduction

United Financial Investments Co. ("the Company", "we", "us" or "our") is a financial services company licensed and regulated by the Jordan Securities Commission. We respect your privacy and are committed to protecting the personal data you share with us.

This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website, use our online services, or contact us. It also explains the rights you have in relation to your personal data.

We process personal data in accordance with the laws applicable in the Hashemite Kingdom of Jordan, including the Personal Data Protection Law No. (24) of 2023, securities legislation, anti-money laundering and counter-terrorist financing legislation, and the instructions of the relevant regulatory authorities.

This Policy applies to our website and online channels. Where you open an account or receive services from us, the terms of your account agreement and related disclosures also apply. If there is any inconsistency, the account agreement governs the relevant service arrangements only to the extent permitted by applicable law and shall not restrict any mandatory personal data right or obligation.

2. Information We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity data: full name, nationality, date and place of birth, national ID or passport details, and photographs or images captured during identity verification.

• Contact data: residential address, email address and phone numbers.

• Financial and profile data: occupation, employer, source of income and wealth, investment experience, risk profile, bank account details and tax information.

• Account and transaction data: account numbers, portfolio holdings, orders, trades, deposits, withdrawals and statements.

• Regulatory and compliance data: information required for "Know Your Customer" checks, sanctions and politically exposed person screening, and anti-money laundering monitoring.

• Communication data: records of your correspondence with us, including emails, chat messages and, where permitted by law, recorded telephone calls.

• Technical data: IP address, device type, browser type, operating system, login records, and how you use our website and online platforms.

We collect this data:

• directly from you, when you fill in forms, open an account, use our platforms or contact us;

• automatically, through cookies and similar technologies when you use our website;

• from third parties, such as identity verification and screening providers, the Securities Depository Center, banks, public sources and official registries, where permitted by law.

Before commencing processing, and subject to any exceptions under applicable law, we will inform the concerned person in writing or electronically of the following:

• The personal data to be processed and the date on which processing will commence;

• The purpose for which the personal data will be processed;

• The period during which the personal data will be processed. This period will not be extended without the concerned person’s consent and in accordance with applicable law;

• The processor who will participate in carrying out the processing;

• The data security, safety and protection measures applied; and

• Information about profiling, where applicable.

3. How We Use Your Information

We use personal data only for specific and legitimate purposes, including to:

• verify your identity and open, operate and maintain your account;

• execute, settle and record your orders and transactions, and provide custody services;

• comply with our legal and regulatory obligations, including anti-money laundering, counter-terrorist financing, sanctions screening, tax reporting and record keeping;

• assess the suitability of products and services for you;

• respond to your enquiries, requests and complaints;

• send you statements, notices and important updates about your account or our services;

• protect you and the Company against fraud, unauthorised access and other risks;

• maintain, secure and improve our website, platforms and services;

• send you marketing communications about our products and services, where you have agreed to receive them.

We process your personal data on one or more of the following legal grounds, as applicable: your prior consent; where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract; or where processing is required or permitted without prior consent under applicable Jordanian legislation, including where necessary to comply with a legal, regulatory or court-ordered requirement.

Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out, or processing we are required or permitted to carry out by law. You can opt out of marketing communications at any time, using the unsubscribe option in the message or by contacting us.

4. Sharing and Disclosure

We do not sell your personal data. We share it only where necessary for the purposes described in this Policy, with:

Where personal data relates to a person who lacks legal capacity, we will obtain the approval of one of that person’s parents or their legal guardian, as required under the Personal Data Protection Law and applicable legislation.

• regulatory, supervisory, judicial and governmental authorities, including the Jordan Securities Commission, the Securities Depository Center, the Amman Stock Exchange, the Central Bank of Jordan, the Anti-Money Laundering and Counter Terrorist Financing Unit, and tax authorities, where required or permitted by law;

• banks, payment providers, custodians, clearing houses, exchanges and brokers involved in executing or settling your transactions;

• service providers acting on our behalf, such as technology, hosting, identity verification, screening, communication, archiving and professional advisory providers;

• companies within our group, where needed to provide services, manage risk or meet legal obligations;

• any person you have authorised us to share data with;

• a successor entity, in the event of a merger, acquisition or restructuring, subject to applicable law.

We require third parties that process personal data on our behalf to keep it confidential, protect it appropriately, and use it only on our instructions.

International transfers

Some recipients, such as international brokers, market platforms or technology providers, may be located outside Jordan. Where we transfer personal data outside Jordan, we do so only in accordance with applicable law and take reasonable steps to ensure the data receives an adequate level of protection.

5. Data Retention and Security

We retain personal data only for as long as necessary to fulfil the purpose for which it was processed. Under the Personal Data Protection Law, personal data must not be retained after that purpose has been fulfilled, unless applicable legislation provides otherwise. Where another law or regulatory requirement requires us to retain records for a specified period, we will retain the relevant personal data only for the period required. Once the applicable purpose and any legally required retention period have ended, we will securely delete or destroy the personal data, subject to any lawful exception.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These include access controls, encryption where appropriate, secure systems, staff confidentiality obligations and training.

No method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your login credentials confidential and should contact us immediately if you suspect unauthorised use of your account. We will never ask for your password by phone, SMS or email.

If a personal data breach occurs, we will take the steps required by applicable law, including notifying affected individuals and the competent authorities where required.

6. Cookies and Third-Party Websites

Our website uses cookies and similar technologies to operate the site, keep it secure, remember your preferences and understand how visitors use it. Essential cookies are needed for the website to function. Where required by law, we ask for your consent before placing non-essential cookies, such as analytics cookies.

You can manage or disable cookies through your browser settings. Disabling some cookies may affect how the website works.

Our website may contain links to third-party websites, platforms or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing any personal data.

7. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact our Data Protection Officer:

Data Protection Officer United Financial Investments Co. Amman, Hashemite Kingdom of Jordan

You can reach us through the contact channels published on the "Contact Us" page of our website, or by visiting any of our offices.

8. Your Rights

Subject to applicable law, you may request information about and access to your personal data, correction, updating, withdrawal of consent, and other rights provided by applicable laws,

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or regulatory instructions. The updated version will be posted on this page with a revised "Last updated" date. Where changes are material, we will notify you through appropriate channels. Your continued use of our website after an update means you acknowledge the revised Policy.