Privacy Notice

NinjaCompares helps you compare personal loans, credit cards, auto finance and home finance from banks in the UAE, and send an application to the bank you choose. We are a licensed finance broker. We do not lend money and we do not make credit decisions. The bank you choose reviews your application and decides.

This notice explains what personal data we collect, why we use it, who receives it, where we store it, how long we keep it and what your rights are. It applies when you visit ninjacompares.com, sign in with UAE PASS, compare products, upload documents, apply to a bank or contact us.

It is issued under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its implementing regulations. It forms part of our Terms and Conditions, which refer to it in clauses 5.3, 6.4 and 16.

For the purposes of the UAE PDPL, Contento Finance Brokers is the controller of the personal data described in this notice.

This notice covers personal data about:

• Customers and prospective customers: people who sign in, compare products or apply through NinjaCompares.
• Website visitors: people who browse ninjacompares.com.
• People who contact us: by email, phone or WhatsApp.

Once we send your application to a bank at your request, that bank becomes an independent controller of what it receives. It processes your data under its own privacy notice, which we recommend you read. This notice does not cover third-party websites linked from our site.

We collect the personal data described in sections 4.1 to 4.6. Section 4.7 lists what we do not collect.

When you sign in with UAE PASS, the UAE's national digital identity, we receive:

• your UAE PASS unique user ID
• Emirates ID number
• full name in English and Arabic, first name and last name
• nationality, date of birth and gender
• email address and mobile number
• account type (citizen, resident or visitor)

We never receive your UAE PASS password or PIN, or any face or fingerprint data.

We use your date of birth to check your age for the products you compare, including the longest finance term your age allows. Your gender comes with your UAE PASS profile; we do not use it to compare products or to prepare your application.

• Income: income type (salaried or business owner), monthly income, other monthly income and existing monthly commitments.
• Employment and eligibility answers: for example, employer category, whether your salary is transferred to a bank, time in your current job, Golden Visa status and whether your employer is on a bank's list.
• What you want: finance amount and term, property or vehicle value, down payment, property type and emirate, vehicle model year and condition, and credit card preferences.

• The documents the bank requires for the product, for example Emirates ID, passport, visa, salary certificate, bank statements, driving licence, employment contract and proof of home-country address.
• Any additional document a bank asks for during its review.

• Comparison results: the offers you are likely to be eligible for, ranked, with indicative rates and instalments.
• Your application: its status history and our staff's review notes.
• Ninja Score: a guide from 0 to 100 to how strong your profile looks for the finance you are comparing, worked out from your salary, your existing commitments, the instalment of the new finance and your age. It is not a credit score.
• Consent records: the consent you gave, the policy version, the date and time, and your IP address.

• Emails between us and the bank about your application, including attachments and any reference numbers the bank issues.
• Emails we send you about your application, for example document requests, bank decisions and reminders.
• Our staff's notes from phone and email contact with you.
• WhatsApp chats you start with us from the button on our website. These take place on WhatsApp, a service of Meta.

• Sign-in session cookies and browser storage the site needs to work.
• Analytics and marketing cookies, only if you accept them in the cookie banner. See our Cookie Policy.
• Error reports and server logs. These are designed to exclude personal data, and sensitive fields are removed automatically.

• We do not connect to your bank accounts. We do not use open banking at launch. If we offer it in future, we will update this notice before it goes live and ask for your separate consent.
• We do not collect payment card details.

We do not set out to collect sensitive personal data, such as health, biometric, religious or criminal-record data. UAE PASS verifies your identity on its own systems, and we receive no biometric data from it.

Some documents you upload, such as a passport, may show details like religion or a photo. We use these documents only to prepare your application, we protect them with extra access controls, and we send them only to the bank you choose.

• From you: what you enter, upload, or tell us by email, phone or WhatsApp.
• From UAE PASS: the verified identity details listed in section 4.1.
• From the bank you apply to: its requests, reference numbers and decision on your application.
• From your device: cookies and technical data, as described in section 4.6 and our Cookie Policy.

Our comparison is automated. It filters and ranks bank products using the information you enter, to show the offers you are likely to be eligible for. The Ninja Score is also automated.

Neither of these is a credit decision. The bank you apply to decides whether to approve your application, and on what terms, using its own process. Under the UAE PDPL, you can object to decisions based solely on automated processing that significantly affect you. If you want a person on our team to review your comparison results or your Ninja Score, contact us (section 2).

The AI tool that reads bank replies is switched off at launch. If we switch it on, we will update this notice first.

We send your application only to the bank you choose, and only after you have agreed to share your documents with the banks you apply to. We never share it with banks you have not chosen. We do not sell your personal data.

We may also disclose personal data where the law requires it, for example to the Central Bank of the UAE, the UAE Data Office, the Department of Economy and Tourism, courts, or police. We may also share it with our auditors and lawyers under duties of confidentiality. If our business is sold or restructured, data may pass to the new owner under the same protections.

Our service providers act only on our instructions, under contractual data protection terms.

All platform data, including your profile, your application and your documents, is stored in the UAE, on Microsoft Azure UAE North and MongoDB Atlas in the same region.

Some data is handled outside the UAE:

• Google Analytics / Tag Manager and Cookiebot: cookie data, only if you accept non-essential cookies.
• WhatsApp: chats you choose to start with us.

We transfer personal data outside the UAE only as the UAE PDPL allows (Articles 22 and 23). That means the destination has adequate protection, or the transfer is covered by contractual safeguards with the provider, or it is needed to provide the service you asked for, or you have given your consent. You can ask us about the safeguards for any transfer.

We keep personal data only as long as we need it for the purposes in this notice, or as long as the law requires. After that, we delete it securely or anonymise it.

We use strictly necessary cookies so the site works and you can stay signed in. These cannot be switched off. We use analytics and marketing cookies only if you accept them in the cookie banner (Cookiebot). You can change your choice at any time from the cookie settings link in the footer. Full details are in our Cookie Policy.

NinjaCompares is for people aged 18 or over. We check your date of birth from UAE PASS, and we do not accept applications from anyone under 18. If you believe someone under 18 has given us their data, contact us and we will delete it.

• Encryption in transit (HTTPS) and at rest (database and document storage).
• Extra field-level encryption for the most sensitive data: Emirates ID number, email, mobile number, income, commitments, loan figures and quotes, bank reference numbers and staff notes.
• Private document storage. Documents are never shared by public links, and every time a staff member views a document, it is logged.
• Role-based staff access (super admin, operations, rates manager), with a separate staff sign-in.
• Logs are designed to exclude personal data.

No system is completely secure. If a breach of personal data is likely to put your rights at risk, we will notify the UAE Data Office and the people affected, as the PDPL requires.

Under the UAE PDPL, and subject to its conditions, you have these rights:

We may need to verify your identity before we act on a request. We will reply within the time the PDPL and its regulations set, and in any case within 30 days. There is normally no charge.

For any question about this notice or your data, or to use your rights, contact:

• Email: privacy@ninjacompares.com
• Post: Privacy, Contento Finance Brokers L.L.C, Warehouse P2, Block T, Saih Shuaib 3, 13-0, Dubai, UAE

If you are not satisfied with our response, you can complain to the UAE Data Office. We would appreciate the chance to resolve your concern first.

We may update this notice when our services, the law or regulatory guidance change. We will post the new version on this page with a new "Last updated" date and version number. If a change is significant, we will tell you before it applies, and ask for your consent again where needed.

This notice is governed by the laws of the United Arab Emirates, including the UAE PDPL and its implementing regulations. If the English and Arabic versions differ, the Arabic version prevails, as in our Terms and Conditions.

NinjaCompares is a trading name of Contento Finance Brokers L.L.C, Dubai, UAE.