Privacy &
website information.

Updated 30 October 2026

01Who is responsible for your data

Capital Invest (“the Company”, “we”) is the data controller for personal data collected through this website. The Company is a private investment company established in the State of Qatar with its office at 238 C Ring Road, Doha, State of Qatar.

The Company is established in Qatar and its handling of personal data is subject to applicable Qatari data protection law, including Law No. 13 of 2016 concerning Personal Data Privacy Protection. Other data protection requirements may also apply depending on the circumstances; this policy does not limit rights provided by applicable law.

02What we collect

The Company collects the following information through this website.

• Information you submit through the enquiry form: your name, email address, company, country, the subject of your enquiry and the content of your message. Nothing on this site asks for financial account details, identification documents or special categories of data, and you should not include them.
• Technical information recorded by the web server: the IP address the request came from, the date and time, the page requested, and the browser identification string. These are standard server logs, kept for security and to keep the site working.
• Website analytics: unless you opt out, website usage information as described in section 03, including page visits and whether an enquiry was successfully submitted.

The Company does not buy personal data, does not build marketing profiles and does not operate a mailing list.

03Website analytics and your choices

We use Google Analytics solely for our own internal website reporting: to understand how people find and use this website, our geographic reach and which content to improve. We do not use these analytics for advertising, remarketing, personalised advertisements, email marketing or unsolicited messages. Analytics loads automatically unless you have opted out in this browser. It does not wait for you to dismiss the notice. Selecting Got it only dismisses the notice; it is not a record of consent. Previously saved rejections continue to be respected.

You can turn analytics off at any time using Analytics settings in the footer and selecting Turn off analytics. You can still browse every page and submit an enquiry. Turning it off stops future measurement by our tag in this browser and removes the site's Google Analytics cookies. It does not undo processing that has already taken place. You can re-enable it using the same settings.

Measurement includes page visits, engagement, referral sources, device and browser information, approximate location and successful enquiry submissions. Google receives technical information needed to deliver its service, including your IP address, and derives approximate location; GA4 does not log or store individual IP addresses. Measurement uses first-party identifiers in cookies such as _ga and _ga_*. Our tag sets a 180-day cookie lifetime without extending it on each visit. Advertising storage, advertising personalisation and Google signals are disabled.

We do not send enquiry names, email addresses, company names, message contents or other form answers as analytics event parameters. Page URLs and referrers supplied by our tag omit query strings and fragments. A successful enquiry is counted as a generate_lead event when analytics is enabled.

Your enable or opt-out preference is stored under ci-analytics-consent-v1 until you change it or clear browser storage. The notice acknowledgement is stored separately under ci-analytics-notice-v2. If persistent storage is unavailable, we try session storage, which lasts for the browser session. Clearing storage removes these preferences and analytics may load again. Preferences apply to this browser, so you should set them separately on each device or browser you use.

The contact form uses our own server for its human check.

Read Google's Privacy Policy and how Google uses information from sites that use its services for information about Google's processing.

04Why we hold it, and on what basis

Enquiry data is used for one purpose: to read, assess and answer the approach you have made, and to conduct any correspondence that follows from it. Server logs are used to keep the website secure and available.

The legal basis for this processing is the Company’s legitimate interest in receiving and responding to business approaches and in protecting its systems, and — where you have submitted an enquiry — the steps taken at your request prior to any possible engagement. Under Qatari law, processing is carried out for a legitimate purpose directly connected with the Company’s activity and limited to what that purpose requires.

Website measurement serves the Company’s business purpose of understanding visitor numbers, how people reach the site and which pages are useful, so that we can improve the website. This information is for the Company’s own planning and website improvement, not advertising or email marketing. Google processes the measurement data to provide the analytics service, as explained in sections 05 and 06. We operate this measurement on a notice-and-opt-out basis as described in section 03. You may object to measurement using Analytics settings or contact us about your data protection rights.

05Who sees it

Enquiries are reviewed only by those within the Company directly involved in assessing them. Personal data is disclosed outside the Company only where one of the following applies:

• to service providers acting on the Company’s instructions — the website hosting provider and the email provider that carries the enquiry — bound to handle the data solely for that purpose;
• to the Company’s professional advisers, where an enquiry proceeds to assessment and their advice is required;
• where disclosure is required by law, by a court, or by a competent regulatory or supervisory authority.
• to Google, when analytics is enabled, to provide website measurement.

The Company does not sell personal data and does not share it for anyone else’s marketing purposes.

06Transfers outside Qatar

The Company is based in Qatar and the website is hosted on servers located outside the State of Qatar. An enquiry submitted from another country will therefore be transferred to and stored in Qatar and in the country where the hosting and email providers operate. Where such a transfer involves personal data protected by the GDPR, the Company relies on appropriate safeguards and transfers no more data than the purpose requires.

When analytics is enabled, Google may process measurement data on servers outside Qatar, including in the United States. See the Google information linked in section 03.

07How long we keep it

Correspondence relating to an enquiry the Company decides not to pursue is retained for up to twenty-four months, after which it is deleted. Where an enquiry leads to an ongoing relationship or a transaction, the related records are kept for as long as that relationship continues and thereafter for the period required by applicable commercial, tax and anti-money-laundering law. Server logs are retained for a short period only.

Google Analytics user-level and event-level data is configured for retention of 14 months. Aggregated reports can remain available for longer. Our tag sets a 180-day lifetime for analytics cookies. Browser preferences remain until changed or cleared, as described in section 03.

08Security

The site is served over an encrypted connection (HTTPS). Enquiries are transmitted to the Company’s mailbox and access to that mailbox is restricted. The Company applies organisational and technical measures appropriate to the sensitivity of the data it holds, though no transmission over the internet can be guaranteed to be entirely secure.

09Your rights

Subject to the conditions and exemptions in the law that applies to you, you may:

• ask what personal data of yours the Company holds, and obtain a copy of it;
• ask for inaccurate data to be corrected;
• ask for your data to be erased where the Company no longer needs it;
• ask the Company to restrict how it is used, or object to its use;
• ask for the data you provided to be transferred to you or to another controller in a structured, machine-readable form;
• withdraw any consent you have given, without affecting processing already carried out.

The Company takes no automated decisions about individuals and carries out no profiling.

10Exercising your rights, and complaints

To exercise any of the rights above, or to raise a concern about how your data has been handled, write to the Company at 238 C Ring Road, Doha, State of Qatar, or use the enquiry form, marking the subject “Data protection”. The Company will respond within the period required by the applicable law.

If you are not satisfied with the response, you may complain to the competent data protection authority: in Qatar, the National Cyber Security Agency (NCSA), which oversees personal data privacy protection; or another competent supervisory authority where applicable.

11Changes to this policy

The Company may update this policy from time to time. The version published on this page is the one in force, and the date at the head of the page shows when it last changed.