Skip to Content

Privacy Policy

1. Introduction2. Scope of This Policy3. Information We Collect4. How We Use Personal Data5. Legal Basis for Processing6. AML, KYC, & Regulatory Compliance7. Sharing of Personal Data8. International Data Transfers9. Data Retention10. Data Security11. User Rights12. Cookies & Tracking Technologies13. Third-Party Links & Services14. Children’s Privacy15. Contact Information16. Updates to This Policy

1. Introduction

 This Privacy Policy explains how NEKST Group and its affiliated entities (“NEKST”, “we”, “our”, or “us”) collect, use, process, store, disclose, and protect personal data obtained through our websites, buyer portals, mobile applications, communication channels, onboarding procedures, and related services (collectively, the “Platform”).

This Policy applies to buyers, prospective buyers, users, business partners, service providers, and other individuals interacting with the Platform or participating in services offered by NEKST Group.

NEKST Group is committed to processing personal data responsibly and in accordance with applicable data protection and privacy laws, including where applicable:

  • the General Data Protection Regulation (“GDPR”);

  • Saudi Personal Data Protection Law (“PDPL”);

  • applicable privacy and data protection laws in Bahrain, Uganda, Turkey, Egypt, and other operational jurisdictions.

2. Scope of This Policy

 This Privacy Policy applies to personal data collected in connection with:

  • account registration and buyer portal access;

  • buyer onboarding;

  • AML/KYC and compliance procedures;

  • purchase participation;

  • website and platform usage;

  • analytics and tracking technologies;

  • and contractual relationships;

This Policy applies to all relevant entities operating within the NEKST Group structure, including affiliated operational,  consulting, and commodity trading entities.

 

3. Information We Collect

We may collect and process the following categories of personal data.

Identification Information

Including but not limited to:

  • full name;

  • nationality;

  • date of birth;

  • government-issued identification documents;

  • passport details;

  • national ID information;

  • residency information;

  • and photographs or verification documents.

Contact Information

Including:

  • email address;

  • telephone number;

  • residential or mailing address;

  • and communication preferences.

Financial Information

Including:

  • bank account information;

  • source-of-funds documentation;

  • transaction history;

  • participation records;

  • payment details;

  • wallet or transfer details;

  • and financial suitability information.

Technical & Usage Information

Including:

  • IP addresses;

  • browser type;

  • device type;

  • operating system;

  • login activity;

  • session information;

  • cookies and tracking data;

  • and platform interaction analytics.

Compliance & Due Diligence Information

Including:

  • AML/KYC screening results;

  • sanctions and politically exposed person (“PEP”) screening;

  • risk classification data;

  • compliance review records;

  • and supporting due diligence documentation.

4. How We Use Personal Data

We may use personal data for purposes including:

  • buyer onboarding and account administration;

  • verifying identity and conducting AML/KYC checks;

  • processing participation amount and transactions;

  • communicating with users and buyers and providing customer support;

  • maintaining platform security;

  • monitoring fraud, suspicious activity, and cybersecurity threats;

  • complying with legal, regulatory, and contractual obligations;

  • improving platform performance and user experience;

  • generating internal analytics and reporting;

  • and maintaining business operations.

Personal data shall only be processed for lawful and legitimate purposes.

5. Legal Basis for Processing

Where GDPR or similar regulations apply, personal data may be processed based on one or more lawful grounds, including:

  • consent;

  • contractual necessity;

  • compliance with legal obligations;

  • and legitimate business interests.

Where consent is required by applicable law, users may withdraw consent at any time, subject to legal or contractual limitations.

Certain processing activities are mandatory in order for NEKST Group to comply with applicable obligations. Failure to provide required information may result in the inability to establish or maintain buyer or user relationships.

6. AML, KYC, & Regulatory Compliance

NEKST Group may process personal data to comply with certain requirements and obligations.

Users may be required to provide additional information or supporting documentation in order to satisfy compliance and due diligence requirements.

Failure to provide requested information may limit access to certain services or prevent purchase participation.

7. Sharing of Personal Data

Personal data may be shared with:

  • affiliated NEKST Group entities;

  • banks and payment service providers;

  • auditors and professional advisors;

  • legal counsel;

  • compliance and verification providers;

  • cloud hosting and technology providers;

  • analytics providers;

  • logistics or operational service providers;

  • regulators, law enforcement agencies, or governmental authorities;

  • and other third parties where legally permitted or required.

Personal data shall not be sold to unrelated third parties for commercial marketing purposes.

Third-party service providers may process data subject to confidentiality, security, and contractual obligations.

8. International Data Transfers

Given the international nature of NEKST Group operations, personal data may be transferred, stored, or processed across multiple jurisdictions, including but not limited to:

  • Bahrain;

  • Saudi Arabia;

  • Uganda;

  • Turkey;

  • Egypt;

  • and other jurisdictions relevant to operations, technology infrastructure, banking relationships, or buyer servicing.

Where required by law, NEKST Group shall seek to implement reasonable safeguards to protect personal data during international transfers. Such safeguards may include encryption measures, contractual protection, and data processing agreements.

9. Data Retention

Personal data shall be retained only for as long as reasonably necessary to:

  • fulfill the purposes described in this Policy;

  • comply with legal or regulatory obligations;

  • satisfy AML/KYC recordkeeping requirements;

  • resolve disputes;

  • enforce agreements;

  • and maintain business records.

Retention periods may vary depending on:

  • regulatory obligations;

  • contractual requirements;

  • operational needs;

  • AML/KYC recordkeeping requirements;

  • dispute resolution requirements;

  • and applicable laws.

Where appropriate, data may be securely deleted, anonymized, or archived.

10. Data Security

NEKST Group seeks to implement reasonable technical, organizational, and administrative measures designed to protect personal data against:

  • unauthorized access;

  • accidental loss;

  • misuse;

  • alteration;

  • destruction;

  • disclosure;

  • and cybersecurity threats.

Security measures may include:

  • access restrictions;

  • encryption;

  • password protections;

  • monitoring procedures;

  • cybersecurity controls;

  • secure hosting infrastructure;

  • and internal confidentiality obligations.

However, no electronic transmission method, digital platform, or storage solution can be guaranteed to be completely secure, and NEKST Group cannot guarantee absolute security of information transmitted electronically.

11. User Rights

Subject to applicable laws and regulatory limitations, users may have rights relating to their personal data, including:

  • the right to access personal data;

  • the right to request correction of inaccurate information;

  • the right to request deletion of certain data;

  • the right to restrict processing activities;

  • the right to object to certain processing activities;

  • the right to withdraw consent where consent is relied upon;

  • and the right to lodge complaints with relevant supervisory authorities or data protection authorities.

Where applicable under GDPR or similar regulations, users located within the European Economic Area (EEA) may exercise their rights in accordance with applicable EU data protection requirements.

Requests may be submitted using the contact information provided below.

NEKST Group may request verification of identity before responding to certain requests.

12. Cookies & Tracking Technologies

NEKST Group may use cookies, analytics technologies, and similar tracking tools to:

  • maintain secure user sessions;

  • improve functionality and user experience;

  • monitor platform performance;

  • analyze website traffic and engagement;

  • and support operational and security functions.

Additional information regarding cookies and tracking technologies is available in the NEKST Cookie Policy.

Where required by law, consent shall be obtained before activating non-essential cookies.

13. Third-Party Links & Services

The Platform may contain links to third-party websites, applications, services, or integrations.

NEKST Group does not control third-party privacy practices and is not responsible for the privacy or security practices of external websites or service providers.

Users are encouraged to review applicable third-party privacy notices before providing personal information.

14. Children’s Privacy

The Platform and related services are not intended for individuals below the age of majority under applicable laws.

NEKST Group does not knowingly collect personal data from minors in connection with its activities.

15. Contact Information

Questions, requests, or concerns relating to this Privacy Policy or data protection matters may be directed to:

Email: info@nekst1.com

16. Updates to This Policy

NEKST Group may update this Privacy Policy periodically to reflect:

  • changes in law or regulation;

  • operational changes;

  • technology developments;

  • security enhancements;

  • or changes in business practices.

Updated versions may be published on the Platform together with revised effective dates.