Privacy Policy
Last updated: 01 July 2025

  1. Who we are
    WinJustice FZ-LLC (“WinJustice”, “we”, “us”, “our”) is a litigation-funding firm registered in Abu Dhabi Global Market (ADGM) and headquartered at Desk Suite 514, Level 15, Al Sarab Tower, Al Maryah Island, Abu Dhabi, United Arab Emirates.
    This Policy complies with:
    • UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”)
    • DIFC Data Protection Law No. 5 of 2020, where applicable
    • EU/UK GDPR for data subjects in the EEA or United Kingdom

WinJustice is the Data Controller of the personal data described below.

Contact E-mail: [email protected]

  1. Personal data we collect

• Identification details
– Purpose: Evaluate eligibility for funding; communicate with you
– Collected via: “Apply for Funding” form
– Examples: First Name, Last Name

• Contact details
– Purpose: Same as above; send service e-mails
– Collected via: Form fields
– Examples: E-mail address

• Professional/organisation data
– Purpose: Assess funding relevance
– Collected via: Optional field
– Examples: Organisation Name

• Case summary
– Purpose: Decide whether your claim matches our criteria
– Collected via: “Funding Request Description” box
– Examples: Facts, jurisdiction, claim value

• Device & analytics data
– Purpose: Improve our site; detect abuse
– Collected via: Cookies & similar tech (see § 7)
– Examples: IP address, browser type, pages visited

• Marketing preference data
– Purpose: Honour opt-in/opt-out
– Collected via: Check-boxes on forms
– Examples: Consent for newsletters

We do not knowingly collect data relating to children.

  1. Why we process your data (lawful bases)

• Assess & respond to funding enquiries
– Lawful basis: Steps at your request prior to entering a contract (PDPL Art 4(1)(a); GDPR Art 6(1)(b))
– Detail: Without this data we cannot determine if we can fund your case.

• Due-diligence, fraud prevention, AML screening
– Lawful basis: Legal obligation (PDPL Art 4(1)(c))
– Detail: KYC/AML checks under UAE Federal AML Law No 20 of 2018.

• General site operation, security & analytics
– Lawful basis: Legitimate interests (PDPL Art 4(1)(d); GDPR Art 6(1)(f))
– Detail: IP anonymised in Google Analytics or analysis kept on-prem via WP Statistics.

• Direct marketing (newsletters)
– Lawful basis: Consent (PDPL Art 6; GDPR Art 6(1)(a))
– Detail: You may withdraw consent at any time via the “unsubscribe” link.

  1. With whom we share your data

We never sell your personal data. We share it only with the parties below, each bound by appropriate safeguards (e.g. Standard Contractual Clauses):
• Pipedrive Inc. (LeadBooster Chatbot) – CRM processor
• MonsterInsights / Google LLC – Analytics (IP anonymised)
• MailerLite UAB / OptinMonster – E-mail service providers
• Automattic Inc. (Akismet, Jetpack) – Spam & security
• Legal & financial advisers – Due-diligence, dispute resolution (NDA & professional secrecy)
• Regulators / courts – Statutory requirement

  1. International data transfers

Where we transfer data outside the UAE or EEA (e.g. to servers in the United States), we rely on:
• Adequacy decisions by the UAE Data Office or European Commission
• EU/UK Standard Contractual Clauses
• Your explicit consent (for optional services)

Copies of safeguards are available on request.

  1. How long we keep your data

• Funding applications (accepted): 7 years after case closure (limitation periods & audit)
• Funding applications (rejected): 18 months (re-contact window & conflict checks)
• AML / KYC records: 10 years (UAE Cabinet Decision No 10 of 2019)
• Marketing contact lists: Until you withdraw consent or 24 months after last interaction
• Cookie & analytics logs: See Cookie Policy for each cookie’s lifetime

Upon expiry, we securely delete or anonymise the data.

  1. Cookies & similar technologies

Our site uses first-party and third-party cookies. Non-essential cookies (analytics, marketing) load only after you click “Accept” on our banner provided by CookieYes/Complianz. Full details are in our separate Cookie Policy. You can change or withdraw consent at any time via “Manage Cookies” in the footer.

  1. Your rights

Subject to local law, you have the right to:
• Access your personal data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict or object to processing
• Data portability (receive a copy in structured format)
• Withdraw consent at any time (for marketing)
• Complain to the UAE Data Office or the DIFC Commissioner of Data Protection

To exercise any right, visit our Data-Subject Request page or email [email protected]. We will respond within 30 days (PDPL) or one month (GDPR).

  1. Security

We implement industry-standard measures, including:
• TLS encryption in transit
• Firewall & malware scanning via Jetpack and Bluehost
• Least-privilege staff access controls
• Regular plugin updates & penetration testing

  1. Changes to this Policy

We may amend this Policy at any time. The “Last updated” date reflects the latest version. Significant changes will be announced via site banner or email.

  1. Liability limitation

This Policy describes how we collect, use, and protect your personal data in accordance with applicable law. It does not create any contractual or other legal rights beyond those required by law. WinJustice shall not be liable for any loss or damage arising from reliance on this Policy to the extent permitted by law.

  1. Contact us

Questions, comments, or requests?
WinJustice FZ-LLC
Desk Suite 514, Level 15, Al Sarab Tower
Al Maryah Island, Abu Dhabi, UAE
E-mail: [email protected]

End of Privacy Policy

Scroll to Top