Effective Date: 12 January 2026
Last Updated: 12 January 2026

​

ISTAR Capital is committed to protecting your privacy and handling your personal information transparently, securely, and in accordance with applicable data protection laws. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal data when you visit our website, communicate with us, register for events, access our research portal, or use any of our products and services.

This Privacy Policy applies to all ISTAR Capital entities operating from:

• ISTAR Capital Ltd (DIFC) – Dubai, United Arab Emirates

• ISTAR Capital Ltd – London, United Kingdom

Who We Are
ISTAR Capital is an independent investment banking firm providing corporate finance advisory, capital markets, global trading and execution, custody and prime services, and strategic financial solutions to institutional and professional clients worldwide.

Information We Collect
Depending on how you interact with us, we may collect:

Identity Information

• Name

• Company

• Job title

• Country

• Business address
   

Contact Information

• Email address

• Telephone number

• Business contact details
   

Technical Information

• IP address

• Browser

• Device information

• Operating system

• Website usage

• Cookies

• Analytics information
   

Communication Information

• Contact forms

• Emails

• Meeting notes

• Marketing preferences
   

Client Due Diligence Information
Where required by regulation, we may collect:

• Identification documents

• Corporate ownership information

• Ultimate Beneficial Owner (UBO) details

• Compliance documentation

• AML/KYC documentation
   

How We Collect Information
We collect information:

• Through our website

• Contact forms

• Research portal registrations

• Email correspondence

• Telephone calls

• Business meetings

• Events and webinars

• Public business sources

• Regulatory and compliance providers
   

How We Use Your Information
We process personal information to:

• Respond to enquiries

• Provide requested services

• Deliver investment banking services

• Manage client relationships

• Conduct regulatory compliance

• Improve our website

• Operate our research portal

• Send marketing communications (where permitted)

• Manage events and webinars

• Protect our business and systems
   

Legal Basis for Processing
Where applicable under GDPR and UK GDPR, we process personal data based on:

• Contract performance

• Legitimate interests

• Legal obligations

• Consent

• Steps prior to entering into a contract
   

Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:

• Operate the website

• Improve performance

• Measure visitor activity

• Understand website usage

• Deliver relevant communications

These technologies may include:

• Google Analytics 4

• LinkedIn Insight Tag

• Meta Pixel

Where required by law, you will be asked to consent to non-essential cookies before they are used.

Sharing Your Information
We may share information with trusted third parties including:

• Website hosting providers

• CRM providers

• Cloud infrastructure providers

• Analytics providers

• Marketing platforms

• Research portal providers

• Professional advisers

• Auditors

• Legal advisers

• Regulators

• Courts

• Government authorities

We never sell your personal information.

International Data Transfers
As an international business operating from Dubai and London, your information may be transferred between jurisdictions, including the UAE, UK, EEA, and other countries where our service providers operate.
Where required, we implement appropriate safeguards for international data transfers.

Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Policy or to comply with legal and regulatory obligations.
Retention periods may vary depending on:

• Client relationships

• Regulatory requirements

• Compliance obligations

• Legal claims

• Business needs
   

Information Security
We implement appropriate technical and organisational measures to protect personal information against:

• Unauthorised access

• Loss

• Misuse

• Alteration

• Disclosure

Although we use industry-standard security measures, no method of electronic transmission is completely secure.

Your Rights
Depending on your jurisdiction, you may have rights to:

• Access your personal information

• Correct inaccurate information

• Request deletion

• Restrict processing

• Object to processing

• Withdraw consent

• Request data portability

• Lodge a complaint with your local supervisory authority
   

Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

Children's Privacy
Our services are intended for institutional and professional clients and are not directed to children.

Changes to this Privacy Policy
We may update this Privacy Policy periodically. Any changes will be posted on this page together with the revised effective date.

For any questions regarding this Privacy Policy or your personal information, please contact:

Email: amalia@istar.capital

​

Dubai Office

ISTAR Capital Ltd (DIFC)
Unit 604, Level 6, Index Tower
Dubai International Financial Centre (DIFC)
Dubai, United Arab Emirates
Telephone: +971 4 563 7700

​

London Office

ISTAR Capital Ltd
12 Hay Hill
Mayfair
London W1J 8NR
United Kingdom

Telephone: +44 20 7952 6974