How OGG Holding handles personal data.

OGG processes personal data in line with international institutional standards and applicable data protection laws, including the EU General Data Protection Regulation.

Scope

What this notice covers.

This privacy notice describes how OGG Holding Dubai ("OGG", "we", "the holding") collects, uses, and protects personal data on ogg.ae and through the contact and investor request forms hosted on this domain. It applies to anyone who interacts with the website or with the OGG investor relations, partnerships, media, or general desks.

This notice does not cover the websites of OGG’s operating subsidiaries (Rona Consult, ORA Ingénierie, Shenzhen Nexus, LittoTech, HD Gestion, Africa Power Invest), which publish their own privacy practices.

Data we collect

Only what you submit, plus minimal technical metadata.

OGG collects personal data you provide voluntarily through one of the forms on the site. The investor deck request form collects full name, professional email, organization, role (venture capital, family office, sovereign fund, banker, advisor, or other), country of operation, and locale preference. The contact form collects inquiry type (investors, partners, media, general), subject, message body, full name, email, organization (optional), and locale preference.

In addition, the website logs technical metadata necessary for security, abuse prevention, and rate limiting, including IP address, request timestamp, user agent, and referrer. No tracking cookies are set without explicit consent. See the cookies and analytics section below.

How we use it

A short list of operational purposes.

OGG uses the personal data collected for the following purposes: responding to investor relations, partnership, media, or general inquiries; sending the institutional investor deck and related communications to investors who have explicitly requested it; internal record keeping for compliance, audit, and anti-fraud purposes; and aggregate, non-identifying analytics on website usage.

OGG does not sell, rent, or trade personal data. OGG does not use personal data for retargeting or behavioral advertising. OGG does not enrich your data with third-party data brokers.

Third-party processors

Who else touches the data, and why.

OGG relies on a small number of third-party service providers to operate the site and respond to inquiries: Resend for transactional email delivery (the deck request and contact form emails transit through Resend); Vercel for website hosting and edge delivery; Cloudflare for DNS, security, and edge caching.

Each of these providers acts as a processor on OGG’s behalf and is bound by data processing agreements aligned with international data protection standards. The current list of processors is available on request to legal@ogg.ae.

Retention

How long we keep what.

OGG retains personal data only for as long as necessary for the purposes set out above. Investor relations and contact records are retained for up to seven years to support compliance, audit, and recurring institutional relationships. Technical logs are retained for up to twelve months and then deleted.

Upon a valid deletion request (see the rights section below), OGG will delete or anonymize the data within thirty days, subject to overriding legal or regulatory retention obligations that may apply.

Your rights

Access, rectify, erase, port, object, withdraw.

Where applicable data protection law grants you rights over your personal data, you may request access (a copy of the personal data OGG holds about you), rectification (correction of inaccurate or incomplete data), erasure (deletion of personal data, subject to legal retention obligations), restriction of processing (during a dispute), portability (a structured copy in a commonly used format), or objection to processing based on legitimate interests. Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, write to legal@ogg.ae with the subject line "Privacy request" and a description of the request. OGG will respond within thirty days. If you believe OGG has not adequately addressed a privacy concern, you may also contact your local data protection authority.

International transfers

Where the data may travel.

Personal data submitted through the website may be transferred to and processed in jurisdictions outside the country of submission, including the United Arab Emirates (where OGG Holding is based), the United States (where Vercel and Resend are headquartered), and the European Union.

OGG ensures that international transfers are governed by appropriate safeguards, including standard contractual clauses where required by applicable law. Specific transfer mechanisms can be disclosed on request to legal@ogg.ae.

Cookies & analytics

Strictly necessary, nothing more by default.

The OGG website uses only cookies that are strictly necessary for the operation of the site, such as language preference and CSRF protection. No tracking, advertising, or third-party social cookies are set without explicit consent.

If privacy-respecting analytics are added in the future (such as Plausible Analytics, which does not use cookies and does not collect personally identifiable information), OGG will update this notice and disclose the practice clearly. The current state of analytics is documented on the deployment runbook available to qualified parties on request.

Updates

How we keep this notice current.

OGG may update this privacy notice from time to time to reflect changes in legal requirements, operational practices, or website features. Material changes will be flagged with a new "Last updated" date at the top of this page. The current version is dated at the top of this page. Earlier versions are available on request to legal@ogg.ae.

Questions or requests

Reach the legal desk.

For any privacy, compliance, editorial, or legal matter, write directly to legal@ogg.ae. OGG responds within thirty days for privacy requests.