Privacy Policy for Oriberg.com

Effective Date: 2026

1. Introduction

Welcome to Oriberg.com. This Privacy Policy outlines how we, Oriberg, a division of Digitalberg FZC (CRN: 42284, registered in Ajman Free Zone, UAE), collect, process, and protect your personal and business data when you interact with our websites, services, and teams.

Oriberg is a trade finance, sourcing, and financial services arm of the Bergix Group, and the authorised agent of Grenke, a German asset finance-based company, for select international markets.

We are committed to protecting your privacy and handling your data transparently and in compliance with applicable laws, including the UAE Data Protection Law, GDPR, and industry-standard practices.

2. Who We Are

This Privacy Policy applies to Oriberg.com, operated by:

• Digitalberg FZC
• Ajman Free Zone, United Arab Emirates
• Part of the Bergix Group with presence in UAE, UK, and USA
• Legal Representative: MA Khan, Managing Director
• Email: [email protected]

3. Data We Collect

We may collect and process the following categories of data:

A. Personal and Business Information

Name, email, contact number, job title

Company name, website, trade license, D-U-N-S number

Financial statements, trade history, and purchase orders

Government-issued documents (e.g. trade license, VAT certificates)

B. Transaction & Credit Data

• Trade finance applications and payment behaviour

• Bank account information, credit limit requests

• Asset and order values, business turnover

C. Automatically Collected Data

• IP address, browser type, device ID

• Cookies, session data, traffic source, geolocation

4. Purpose of Data Processing

We process data for the following purposes:

• Customer onboarding, screening, and credit application processing

• Facilitating trade finance and sourcing transactions

• Sharing documents with authorised partners (e.g. Grenke, logistics providers)

• Compliance checks, fraud prevention, and AML verification

• Customer support, lead follow-up, and service optimisation

• Marketing (only if consented), analytics, internal reports

5. Credit & Compliance Screening Partners

To assess your creditworthiness and manage financial risk, we may share necessary data with:

• Dun & Bradstreet (D&B) – for business verification, D-U-N-S matching, credit scoring

• CRIF Gulf (DTEC) – for trade and finance credit checks and decision scoring

• Grenke AG – for asset finance evaluation

• UAE and UK regulatory authorities, as required by law

These entities may store and process your data for risk profiling and decision-making under lawful contractual or regulatory grounds.

6. Legal Basis for Processing

Your data is processed only when one or more of the following legal bases apply:

• Contract performance – e.g. trade agreement, finance offer

• Legal obligation – compliance with AML, VAT, trade regulations

• Legitimate interest – to provide services, prevent fraud, and manage relationships

• Consent – where required, for email marketing or optional services

You can withdraw your consent anytime by emailing: [email protected]

7. Data Retention

We retain your data only as long as necessary for the purposes outlined above or as legally required:

• Credit documentation: up to 6 years

• Customer communications and compliance forms: 2–5 years

• Website analytics: 12–24 months

• Inactive leads: 12 months (unless reactivated)

8. Cookies & Website Tracking

Our website uses cookies to enhance your user experience. Cookies are small text files stored on your browser to:

• Track session behaviour and performance

• Understand traffic and referral sources

• Offer region-specific content

You can manage or disable cookies through your browser settings. For more details, please refer to our [Cookie Policy].

9. Data Sharing & International Transfers

We may share your data with:

• Group companies under Bergix Group

• Authorised finance partners such as Grenke AG

• Payment processors, insurers, freight forwarders, and IT/cloud vendors

If data is transferred outside the UAE or EEA (e.g., to the UK, Germany, or the USA), we ensure proper safeguards such as:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions or certifications

• Binding Corporate Rules (BCRs) where applicable

10. Your Rights

You have the right to:

• Access, correct, or delete your data

• Object to processing or withdraw consent

• Receive a copy of your data (data portability)

• Lodge a complaint with the UAE Data Office or the relevant DPA

To exercise these rights, contact: [email protected]

11. Data Security

We employ technical and organisational measures to protect your data, such as:

• Data encryption in transit and storage

• Role-based access controls and secure servers

• Regular audits, backups, and compliance checks

• Staff awareness and training on data handling

12. Links to Other Websites

Our site may include links to third-party services (e.g., grenke.ae). We are not responsible for their content or data practices. Please review their respective privacy policies.

13. Updates to this Policy

This Privacy Policy may be updated periodically to reflect legal, operational, or regulatory changes. Please refer to the top of this page for the latest effective date.

All updates will be posted here and, if substantial, may be notified via email.

14. Contact Information

For privacy-related queries, complaints, or access requests, please contact:

Privacy Officer

Oriberg – Digitalberg FZC

Ajman Free Zone, UAE

Email: [email protected]