Recipients of Data

We may share your personal data with third parties only when necessary, for the purposes described in this Privacy Policy, and in accordance with applicable legal requirements. Such third parties may include:

• Service Providers: Intermediaries involved in executing financial transactions, including correspondent banks and licensed or authorized electronic funds transfer entities that are legally permitted to obtain such data. Personal data may be shared and processed to the extent necessary to perform such transactions and to comply with applicable legislative and regulatory requirements.

• Regulatory and Legal Authorities: Government entities and regulatory bodies (such as the Securities Commission, Amman Stock Exchange, Securities Depository Center, the Central Bank of Jordan, and the Anti-Money Laundering Unit), as well as courts, where required by law or upon a legitimate request.

• Credit Reporting Agencies: For credit assessment and credit reporting purposes, as permitted by applicable laws.

• Professional Advisors: Auditors and legal advisors (including lawyers) for audit, compliance, and legal representation purposes.

• Parent Company (Capital Bank): For the purpose of complying with laws and instructions related to subsidiary companies.

• Sister Company: Under an agreement for marketing the Company’s products through an investment representative at the sister company.

Data Protection

We employ strict security measures, including technological controls and physical security, to protect your personal information from unauthorized access, loss, misuse, or alteration. We regularly review and update our security protocols to meet or exceed industry standards.

Data Retention

We are committed to retaining your personal data only for the period necessary to achieve the purposes for which it was collected, and to comply with applicable legal and regulatory obligations, in accordance with the instructions of the Securities Commission, the Amman Stock Exchange, and the Securities Depository Center, on an ongoing basis throughout the relationship, unless a longer retention period is required by law.

Once your personal data is no longer required, we will securely dispose of it in an appropriate and safe manner.

Data Subject Rights

Under the Jordanian Personal Data Protection Law (PDPL) and other applicable data protection laws, you have certain rights regarding your personal data. These may include:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data.
• Right to Restriction of Processing: Request that we limit the way we use your personal data.
• Right to Object to Processing: Object to the processing of your personal data under certain conditions (e.g., for direct marketing).
• Right to Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

Mechanisms for Requests and Complaints

Capital Invest provides secure channels to enable data subjects to exercise their rights or submit inquiries related to personal data processing. Requests may be submitted exclusively through the following:

• Capital Invest: By visiting any Capital Invest branch and submitting the request through authorized staff.

Upon receipt of a valid request, Capital Invest will:

• Verify the identity of the requester to ensure data security and confidentiality.
• Register and track the request internally.
• Provide a response within a maximum of fifteen (15) calendar days from the date of receipt, in accordance with applicable data protection laws.

Upon receipt of a complaint, Capital Invest will:

• Handle submitted complaints in accordance with the Regulatory Requirements for Personal Data Protection. A response to a complaint shall be provided within ten (10) calendar days, calculated from the day following the date of its submission.

In certain cases, we may be unable to fully comply with a request where doing so would conflict with legal obligations or regulatory requirements. In such cases, the data subject will be informed of the reason for refusal or limitation, as permitted by law.

Customer Notification in Case of Data Breach

In the event of a personal data breach, you will be notified immediately if the breach is likely to pose a significant risk to your rights and freedoms. The breach notification will be prepared in coordination with relevant departments, including IT, Cybersecurity, and Legal, to ensure the accuracy and legality of the information provided.

Marketing Provisions

Capital Invest may use customers’ personal data for the purpose of directly marketing its products and services, within the scope of the business relationship established between the customer and Capital Invest. This includes marketing services and products that are related or similar to those already provided to the customer, including services and products offered by companies wholly owned by Capital Invest.

The customer has the right to opt out of direct marketing communications from the first marketing contact received.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Effective Date." We encourage you to review this policy periodically.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your Browse experience, analyze website traffic, and personalize content and advertisements. You can manage your cookie preferences through your browser settings or our website's cookie consent tool.

What is a Cookie?

A “Cookie” is a small piece of software (file) that is installed on your computer, either temporarily or long-term, via your browser (e.g., Internet Explorer™ or Google Chrome™) when you visit a website.

When you return to our website, your browser sends back information from your previous visit. For instance, our website uses cookies to remember your chosen language and country, saving you time and providing a more personalized experience.