1. Introduction
AEDC Stable Coin Network and Distribution L.L.C ("we", "us", "our", or "Company") is a limited liability company, regulated by the Central Bank of the United Arab Emirates ("CBUAE") and is authorised to issue a stablecoin known as DDSC. Our vision is to deliver a secure, fully regulated digital payment instrument that enhances efficiency, transparency, and trust across the UAE's financial ecosystem, while upholding strict reserve segregation.
We value our customers' privacy and are committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website DDSC.ai (the "Site"), use our services, purchase DDSC, or interact with us (collectively, the "Services"), and how we ensure compliance with the applicable data protection laws.
By using our Services, you consent to the data practices set out in this Privacy Policy. If you do not agree with the terms, please do not access or use our Services.
2. Explicit Consent
By using our Services, you acknowledge that you provide your freely given, specific, informed, and unambiguous consent for us to collect, use, store, disclose, and otherwise process your personal data and any other data practices for the purposes described in this Privacy Policy.
This includes, where applicable:
- obtaining personal data from authorised banks, intermediaries, or third-party providers in connection with transactions or regulatory checks;
- sharing your personal data with affiliates, service providers, sub-processors, auditors, and regulatory authorities; and
- transferring your personal data to jurisdictions outside your country of residence, including within the United Arab Emirates and other financial freezones, where appropriate safeguards are in place.
If you do not agree with the terms, please do not access or use our Services.
3. Purposes and Legal Bases for Processing
We process your personal data only where we have a valid legal basis to do so under applicable data protection laws. The purposes and corresponding legal bases are set out below:
| Purpose of Processing | Legal Basis |
|---|---|
| To comply with legal and regulatory obligations, including AML, CFT, sanctions, and financial services regulations. | Necessary for compliance with a legal obligation. |
| To provide access to the Stablecoin and related services, including onboarding, wallet creation, transaction processing, and redemption. | Necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract. |
| To manage our relationship with you, provide customer support, respond to inquiries, and communicate service-related information. | Necessary for our legitimate interests in operating, maintaining, and improving our Services and customer relationships. |
| To ensure security, integrity, and proper functioning of our Services, including fraud prevention, monitoring suspicious activity, enforcing our terms, and protecting our legal rights. | Necessary for our legitimate interests in protecting our business, platform, and users. |
| To send you marketing or promotional communications where permitted by law. | Your consent, which you may withdraw at any time. |
Where we rely on legitimate interests, we ensure that such interests are not overridden by your rights and freedoms.
4. Information We Collect
We collect information that you provide directly to us and information about your use of our Services.
A. Information You Provide Voluntarily
- Account Information: Name, email address, phone number, date of birth, username, password.
- Identity Verification (KYC/AML): Government-issued identification (passport, Emirates ID, residency status card, driver's licence), photograph, proof of address, tax identification number, and other information required by law.
- Financial Information (collected via banks or authorised purchase channels): Bank account details, payment card information, cryptocurrency wallet addresses, and transaction history.
- Communications: Records of your correspondence with us (support tickets, chat transcripts, emails, calls with customer service).
B. Information Collected Automatically
- Usage Data: IP address, browser type, device information, pages visited, time spent on pages, clickstream data, and other diagnostic data.
- Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to track activity on our Site.
C. Information from Third Parties
We may receive information about you from other sources, such as:
- Identity verification services to help prevent fraud.
- Financial institutions and payment processors to confirm transactions.
- Publicly available databases or blockchain analytics providers for AML purposes.
5. How We Use Your Information
We use the information we collect for the following purposes:
- To create, maintain, and secure your user account or wallet services or any other Stablecoin Services.
- To process transactions and send related information (e.g., purchase/transfer confirmations).
- To comply with legal obligations, including AML and KYC regulations or CBUAE compliance requirements.
- To detect, prevent, and address fraud, security, or technical issues.
- To provide customer support and respond to your inquiries.
- To send you technical notices, updates, security alerts, and administrative messages.
- To analyse, personalise and improve your experience with our Services.
- To communicate with you about products, services, offers, and events (you can opt-out of marketing communications at any time).
- To monitor performance of Services and mitigate issues/threats.
- For any other purpose with your consent.
7. Your Data Rights and Choices
We recognise your rights to your personal information. Accordingly, you may:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Restriction of Processing: Request we temporarily or permanently stop processing all or some of your personal data.
- Objection to Processing: Object to our processing of your personal data if the same has not been consented to.
- Opt-out of Marketing: Unsubscribe from our marketing emails by clicking the "unsubscribe" link they contain.
- Erasure ("Right to be Forgotten"): Request the deletion of your personal data, subject to legal limitations (e.g., we are required by law to keep certain financial records).
- Withdrawal of Consent: Withdraw your consent at any time for the way your data is being processed. Please note that such withdrawal will not make any of our actions prior to the withdrawal unlawful.
To exercise any of these rights or lodge a complaint, please contact us at Vidhu.Raveendran@ddsc.ai. We will respond within the timeframe required by applicable law. To protect your privacy, we will need to verify your identity before fulfilling your request.
8. Data Retention
We will retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, operational requirements, and to comply with our legal obligations (such as AML/KYC record-keeping requirements, which can be 5–7 years or longer after account closure).
Any communications data will be retained for a period of 3 years, unless required for any legal or judicial proceedings or obligations.
9. Where Data is Stored
The personal data that we collect from you may be securely transferred to and stored on our databases, located on our secure servers in backup locations in the United Arab Emirates or abroad.
By using our Services, you acknowledge and consent that your personal data may be transferred to, stored in, or accessed from jurisdictions outside your country of residence, including within the UAE (onshore and within financial free zones such as ADGM) and other jurisdictions where our service providers or infrastructure are located.
You can obtain more information about the safeguards we have in place by contacting us at Vidhu.Raveendran@ddsc.ai.
10. Data Security
We implement robust technical and organisational measures to protect your personal information, including encryption, access controls, and secure servers. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
11. Minor's Privacy
Our Services are not intended for individuals under the age of 18 ("Minors"). We do not knowingly collect personal information from Minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.
12. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically for any changes.
13. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Protection Officer:
Data Protection Officer
Vidhu Raveendran
Abu Dhabi, United Arab Emirates