Privacy Policy

Privacy policy for creditapay

Privacy Policy — MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ

Effective date: December 19, 2025

Company legal name: MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ (License No. 2536388.01)

Registered address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba Meydan Free Zone, Dubai, United Arab Emirates

Contact email: not specified

1. Introduction

Welcome to MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit or interact with our website and related services (collectively, the “Service”). It also explains your rights and how to exercise them. Our Service is global; this Policy addresses general practices and includes additional information for residents of certain jurisdictions (for example, the European Union and the State of California).

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Scope

This Privacy Policy applies to personal data we collect through our website, contact forms, email communications, and other direct interactions. It does not apply to information collected offline or by third parties (unless otherwise stated).

3. Personal data we collect

We collect only the personal data necessary to respond to inquiries and to operate and improve our website and services. The categories of personal data we collect include:

  • Contact Information:g., name, email address, telephone number, if you provide them in a contact form or inquiry.
  • Communications Data: content of messages you send to us (e.g., inquiries, support requests).
  • Technical and Usage Data: IP address, browser type and version, device identifiers, pages visited, referral/exit pages, operating system, and similar information collected automatically via cookies and similar technologies.

We do not collect sensitive categories of personal data (such as health information, race, religious beliefs) through the Service.

4. How we collect personal data

We collect personal data in the following ways:

  • Directly from you: when you submit an inquiry, sign up for communications, or otherwise contact us.
  • Automatically: via cookies, web beacons, and log files when you visit our website.
  • From third-party service providers: for example, analytics providers, hosting providers, and email delivery services.

5. Cookies and similar technologies

We and our service providers use cookies and similar technologies to collect technical and usage information. Cookies fall into several categories:

  • Essential cookies: required for the website to function.
  • Analytical/Performance cookies: used to understand and improve how visitors use the site (for example, Google Analytics).
  • Marketing/Advertising cookies: used to deliver content or advertisements relevant to you.

You can manage or disable cookies via your browser settings (see your browser help for instructions) or through any cookie-consent mechanism presented on our website. Please note that disabling certain cookies may affect site functionality.

6. Purposes of processing and legal bases

We process personal data for the following purposes and legal bases:

  • To respond to and process inquiries and provide services. Legal basis: performance of a contract or to take steps at your request prior to entering into a contract; or our legitimate interest in communicating with prospective clients.
  • To operate, maintain, and improve the website and our business. Legal basis: our legitimate interests in providing and improving our Service.
  • To send administrative communications (e.g., confirmations, updates). Legal basis: performance of a contract or our legitimate interests.
  • To comply with legal obligations. Legal basis: compliance with applicable laws.
  • With consent: For processing that requires consent (for example, certain marketing communications or non-essential cookies), we rely on your consent where required by law.

7. Third-party disclosure and service providers

We may share your personal data with third parties who perform services on our behalf, including hosting providers, email delivery services, analytics providers, and other service providers needed to run the business. Examples include but are not limited to hosting companies, customer relationship management (CRM) services, analytics providers (such as Google Analytics), and providers of security and monitoring services.

We require third-party service providers to protect personal data and limit their use of data to the purposes for which they were engaged.

8. International transfers

MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ is based in the United States. If you are located outside the United States, your personal data may be transferred to, processed, and stored in countries other than your country of residence, including the United States. When we transfer personal data from the European Economic Area (EEA) or other jurisdictions that require safeguards, we will implement appropriate safeguards such as European Commission Standard Contractual Clauses (SCCs) or other legally recognized mechanisms, where applicable.

9. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. As a general rule:

  • Inquiry communications and related contact details: retained for up to 3 years from the date of last interaction, unless you request deletion earlier.
  • Analytics and cookies: retention periods vary depending on the technology and provider (session cookies end when you close your browser; persistent cookies may last from a few days to multiple years).

If you want us to delete your personal data sooner, please contact us at [contact email not specified] (see Section 14).

10. Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: the right to request a copy of personal data we hold about you.
  • Correction: the right to request correction of inaccurate or incomplete personal data.
  • Deletion (Right to be forgotten): the right to request deletion of your personal data, subject to legal exceptions.
  • Restriction of processing: the right to request restriction of certain processing activities.
  • Objection: the right to object to processing based on our legitimate interests or for direct marketing.
  • Data portability: where applicable, the right to receive personal data in a structured, commonly used, machine-readable format.
  • Withdraw consent: if processing is based on consent, you may withdraw consent at any time.

Additional rights for EU residents (GDPR)

If you are a resident of the European Economic Area (EEA), you may also have the right to lodge a complaint with your local data protection authority.

Additional rights for California residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to request:

  • Disclosure of categories of personal information collected, sold, or disclosed for a business purpose, and the categories of third parties with whom it was shared.
  • Deletion of personal information collected.
  • Opt-out of the sale of personal information. (We do not sell personal information for monetary consideration; to the extent any activity could be construed as a “sale” under California law, residents may opt out using the methods described below.)

We will not discriminate against consumers for exercising their privacy rights.

11. How to exercise your rights

To exercise any of the rights described above, please contact us at:

Email: [contact email not specified]

Mailing address: MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ, 30 N Gould St Ste R, Sheridan, WY 82801, USA

When you make a request, we will ask you to verify your identity and provide information necessary to process your request. We will respond in accordance with applicable law.

For California residents, you may designate an authorized agent to make a request on your behalf. We may require proof of authorization.

12. Do Not Sell My Personal Information / Opt-out

If you are a California resident, you have the right to opt out of the sale of your personal information. We do not knowingly sell personal information for monetary value. If you believe we have sold your personal information and you wish to opt out, contact us at [contact email not specified].

13. Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, disclosure, loss, or alteration. Examples include access controls, encryption in transit, and secure hosting. However, no method of transmission or storage is completely secure — we cannot guarantee absolute security.

14. Data breach notification

If we become aware of a security breach affecting personal data, we will take appropriate steps to contain the breach and will notify affected individuals and regulators as required by applicable law (for example, within 72 hours for certain personal data breaches under GDPR, where applicable).

15. Children’s privacy

Our Service is not directed to children. We do not knowingly collect personal data from children under the age of 16. In the United States, where a higher or lower age threshold may apply under local law (for example, 13), we comply with applicable law. If you believe we have collected personal data from a child in violation of applicable law, please contact us at [contact email not specified] and we will take steps to delete such data.

16. Automated decision-making

We do not make decisions about individuals solely based on automated processing that have legal or similarly significant effects.

17. Links to other sites

Our Service may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any third-party sites you visit.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated policy on our website with a revised “Effective date.” Substantial changes may be communicated by email or other means when required by law.

19. Governing law

This Privacy Policy and any disputes related to it are governed by the laws of the United Arab Emirates and, where applicable, the rules and regulations of Meydan Free Zone, to the extent permitted by applicable law.

20. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: [contact email not specified]

Mailing address: MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ, 30 N Gould St Ste R, Sheridan, WY 82801, USA

21. Data Processing Agreements & Standard Contractual Clauses

When we engage third-party processors to handle personal data on our behalf (for example, hosting, analytics, email delivery), we enter into written agreements that require processors to implement appropriate technical and organizational measures, process data only on our instructions, and assist us in fulfilling our obligations under applicable law. For transfers of personal data from the European Economic Area (EEA) to the United States or other jurisdictions that do not have an adequacy decision, we will rely on appropriate safeguards such as the European Commission Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms where applicable.

22. Examples of categories of third-party processors we may use

(To be maintained and published separately if required by law; the list below is illustrative and may change.)

  • Hosting & Infrastructure: cloud hosting providers and content delivery networks (e.g., cloud providers, CDN services);
  • Analytics & Performance: analytics providers to measure and analyze site usage (e.g., Google Analytics);
  • Email & Communications: email delivery and marketing platforms used to send transactional and marketing emails;
  • Security & Monitoring: services that help detect and mitigate fraud, abuse, or security incidents;
  • Payment Processors: third-party processors for payment collection (if applicable).

We will update this list if we add or remove major processors. If you would like a current list of processors, contact us at [contact email not specified].

23. Cookie details (examples)

Below is an example cookie table showing common cookie categories and typical retention windows. Actual cookies and retention periods depend on the specific providers used.

  • Essential cookies — Purpose: allow core site functionality (e.g., session management). Retention: session or up to 2 years.
  • Analytics cookies — Purpose: measure site usage and performance. Retention: typically 2 years (provider-dependent).
  • Marketing/Advertising cookies — Purpose: provide personalized ads and measure ad performance. Retention: typically from 30 days to 2 years.

A detailed cookie banner and cookie preference center (if applicable) will list individual cookies and allow users to opt out of non-essential cookies.

24. Verification process and timelines for rights requests

When you submit a request to exercise your rights, we will:

  1. Verify your identity and/or authority to make the request to protect your data from unauthorized disclosure.
  2. Acknowledge receipt of the request and provide an expected timeline.
  3. Respond to the request in accordance with applicable law.

Timelines:

  • GDPR/EEA residents: We will generally respond without undue delay and in any event within one month (30 days) of receipt. If the request is complex or numerous, we may extend the period by up to two additional months (total up to 90 days) — in which case we will inform you of the extension and the reasons for the delay.
  • California residents (CCPA/CPRA): We will acknowledge and respond to verifiable consumer requests within 45 days of receipt. This period may be extended once by an additional 45 days if reasonably necessary, with notice.

For requests from other jurisdictions, we will respond within the time required by applicable law.

25. How California residents submit requests / “Do Not Sell” mechanism

California residents may exercise their CCPA/CPRA rights using the following methods:

  • Email: [contact email not specified]
  • Mail: MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ, 30 N Gould St Ste R, Sheridan, WY 82801, USA

If we implement an online webform or a dedicated “Do Not Sell My Personal Information” link, we will publish it on our website and provide information on how to use it.

26. Cross-border transfer safeguards (additional detail)

When we transfer personal data internationally, we rely on an appropriate legal basis and implement safeguards such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Binding corporate rules (where applicable);
  • Other measures considered adequate under applicable law.

We document our transfer mechanisms and will provide details upon request.

27. Policy versioning and substantial changes

We maintain version control for this Privacy Policy. When we make material changes to the way we collect or process personal data, we will notify users by posting an updated policy with a new “Effective date” and, where required by law or appropriate, by sending an email notice to affected users.

Non-material changes (for example, clarifications or minor edits) may be posted without direct notice.

28. Data Protection Officer (DPO) / Privacy contact

We have not appointed a dedicated Data Protection Officer (DPO) at this time. For privacy questions, requests, or concerns, please contact our privacy team at:

Email: [contact email not specified]

Mail: MASTERS GENERAL MANAGEMENT CAPITAL GROUP L.L.C-FZ, 30 N Gould St Ste R, Sheridan, WY 82801, USA

If we appoint a DPO in the future, we will update this Policy with the DPO’s contact details.

29. Additional security practices

We implement industry-standard administrative, technical, and physical controls appropriate to the sensitivity of the data processed. Examples include:

  • Encryption of data in transit (TLS) and encryption at rest where appropriate;
  • Role-based access controls and least-privilege principles;
  • Regular vulnerability scanning and periodic security assessments;
  • Incident response procedures and employee training on data protection.

30. Record of processing activities

Where required by applicable law, we maintain records of processing activities (RoPA) that describe processing categories, purposes, recipients, and security measures. These records are available to supervisory authorities upon request.

31. Contact & escalation

If you remain unsatisfied after contacting our privacy team, you may escalate the matter by contacting the relevant supervisory authority in your jurisdiction (for example, a Data Protection Authority in the EEA). We will cooperate with supervisory authorities to the extent required by law.