The information you entrust to us.

We collect information you provide directly — name, contact details, company details, and the substance of enquiries submitted through this website's contact form or by email. During an engagement we collect the identification, source-of-funds, ownership, and corporate documents required by applicable law and by our onboarding standards.

Our website collects minimal technical information required to serve pages (IP address, browser type, referrer). We use privacy-respecting analytics that do not use cookies or track individuals across sites; see the Cookies notice for detail.

Information collected through the site is used to respond to your enquiry and, where relevant, to open and administer an engagement. Engagement information is used to deliver the services instructed, to satisfy applicable know-your-client, anti-money-laundering, and regulatory obligations, and to maintain our records.

We do not sell personal information and we do not use it for advertising.

Client information is treated as confidential. It is shared only with those who need it to advance the engagement — our partners and staff, the registries and regulators with which we file on your behalf, and specifically instructed counterparties (for example, a bank you have asked us to approach). Where a regulator or court compels disclosure, we comply while informing you to the extent permitted.

Enquiries that do not become engagements are retained for a limited period sufficient to respond and then deleted. Engagement records are retained for the period required by applicable regulation and professional standards, typically five to ten years from the close of the matter, after which they are securely destroyed.

We maintain organisational and technical measures appropriate to the sensitivity of the information we hold, including access controls, encrypted transport, and vendor due diligence. No system is invulnerable; we investigate and, where required, notify affected persons and regulators of incidents that materially affect their information.

Subject to applicable law, you may request access to the information we hold about you, ask us to correct inaccuracies, request deletion where retention is no longer required, or object to specific uses. Requests should be sent to info@dilmunpartners.group; we respond within the timeframe required by the applicable framework.

Because we operate in both Bahrain and the DIFC and instruct counterparties across the GCC and beyond, information may be transferred between these jurisdictions. Where we transfer information across borders we do so under the safeguards required by the applicable framework.

We update this notice when our practices change. The date at the top of this page reflects the most recent revision.