Privacy Policy

Mataana Limited ("Mataana," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and delete your information when you visit our website at mataana.com or submit information through any of our forms.

Please read this policy carefully before submitting any personal information through our website. By submitting information, you confirm that you have read and understood this policy.

1. Who We Are

Mataana Limited is an investment holding company focused on critical infrastructure and resilient technology in the GCC region. We operate the website mataana.com and the Mataana Ventures platform, through which we run programmes for fractional leaders, startup founders, co-investors, and corporate clients seeking fractional leadership.

For questions about this policy or to exercise your data rights, contact us at [email protected].

2. Information We Collect

We collect personal information that you voluntarily provide when you contact us or submit a form through our website. The information collected varies depending on which form you use.

2.1 Fractional Leader Applications

Submitted via the Apply as a Fractional Leader form at /apply/fractional-leader. We collect: full name, email address, phone number (optional), LinkedIn profile URL (optional), current or most recent role title, years of senior executive experience, industries worked in, functional areas of expertise, GCC or Middle East work experience, availability in days per week, preferred start date, and a written motivation statement. Applicants may also voluntarily upload a curriculum vitae in PDF or Word format (up to 3 MB).

2.2 Startup Funding Applications

Submitted via the Apply for Startup Funding form at /apply/startup-funding. We collect: founder name, email address, phone number (optional), LinkedIn profile URL (optional), startup name, country of incorporation, website URL (optional), one-line description, sector, co-founder details, problem being solved, target market, current traction, funding stage, capital raised to date, capital sought, and GCC market relevance. Applicants may also voluntarily upload a pitch deck in PDF or PowerPoint format (up to 3 MB).

2.3 Co-Investor Applications

Submitted via the Co-Investors form at /ventures/co-investors. We collect: full name, email address, phone number (optional), LinkedIn profile URL (optional), organisation name (optional), investor type (individual angel, family office, VC fund, corporate VC, institutional, or other), country of residence, sectors of interest, GCC or Middle East investment experience, motivation for co-investing with Mataana, and any value-add capabilities. Applicants may also voluntarily upload a supporting document in PDF or Word format (up to 3 MB).

2.4 Hire a Fractional Leader Enquiries

Submitted via the Hire a Fractional Leader form at /hire/fractional-leader. We collect: full name, email address, phone number (optional), job title (optional), company name, company size, country, the leadership role required, engagement scope description, days per week required, preferred start timeline, and budget range. No file uploads are collected through this form.

2.5 General Contact Enquiries

Submitted via the Contact page at /contact. We collect: full name, email address, phone number (optional), company name (optional), enquiry type (general, partnership, press, investor relations, or other), and a message. No file uploads are collected through this form.

2.6 Global Tech and VC Market Entry Enquiries

Submitted via the Global Tech and VCs form at /ventures/global-tech-vcs. We collect: full name, email address, phone number (optional), LinkedIn profile URL (optional), organisation name, organisation type (VC fund, corporate tech company, scale-up, enterprise, or other), headquarters country, product or portfolio description, sector, revenue stage, target GCC markets, current GCC presence, entry objective, preferred timeline, and indicative budget range. Applicants may also provide additional context in a free-text field. No file uploads are collected through this form.

2.7 GCC Corporate Fractional Leadership Enquiries

Submitted via the GCC Corporates form at /ventures/gcc-corporates. We collect: full name, email address, phone number (optional), LinkedIn profile URL (optional), company name, company size, country, industry, role type required, engagement scope description, days per week required, preferred start timeline, monthly budget range, and a description of the business challenge being addressed. No file uploads are collected through this form.

2.8 Website Usage Data

We collect standard analytics data when you visit our website, including IP address, browser type, operating system, referring URLs, and page views. This data is used in aggregated, anonymised form to understand how our website is used and to improve the user experience.

3. Lawful Basis for Processing

We process your personal data on the following legal bases under applicable data protection law:

Consent: Where you have freely given, specific, informed, and unambiguous consent to the processing of your personal data for a stated purpose. All application and enquiry forms on our website require you to tick a consent checkbox before submission, confirming your agreement to this policy and our Terms of Service.

Legitimate interests: Where processing is necessary for the purposes of our legitimate business interests, including evaluating applications, conducting due diligence on potential partners and co-investors, and responding to business enquiries, provided those interests are not overridden by your rights and interests.

Legal obligations: Where we are required to process or disclose your data to comply with applicable law, a court order, or a request from a competent regulatory authority.

4. How We Use Your Information

We use the information we collect to:

• Evaluate and process applications submitted through our Fractional Leader, Startup Funding, and Co-Investor programmes.
• Respond to enquiries from businesses seeking fractional leadership, GCC market entry support, and from general contacts.
• Assess and qualify Global Tech and VC organisations seeking GCC market entry support through Mataana.
• Assess and qualify GCC-based businesses seeking fractional executive leadership.
• Conduct internal screening and due diligence in connection with our investment, advisory, and talent placement activities.
• Communicate with you about your application, enquiry, or request, including to request additional information where relevant.
• Improve our website and user experience through aggregated, anonymised analytics.
• Enforce our Terms of Service and other policies.

We will not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with trusted service providers who assist us in operating our website and conducting our business, including cloud storage providers and analytics platforms, subject to confidentiality obligations consistent with this policy.

5. Data Retention

We apply a strict 28-day retention policy to all personal data submitted through our application and enquiry forms. The following table summarises our retention schedule:

Deletion is automated and runs daily. All database records and any associated uploaded files are permanently removed from our systems at the end of the applicable retention period.

If we wish to retain your data beyond 28 days for the purpose of progressing your application or enquiry, we will contact you before that deadline to request your explicit consent to do so. In the absence of such consent, deletion will proceed as scheduled.

You may request early deletion of your data at any time by contacting us at [email protected]. We will process your request within 5 business days.

6. Uploaded Documents

Documents uploaded through our application forms (curriculum vitae, pitch decks, and co-investor supporting materials) are stored in encrypted cloud storage operated by a third-party provider. Access is restricted to authorised Mataana personnel only. Uploaded files are associated with the corresponding application record and are permanently deleted when that record is purged in accordance with our 28-day retention policy.

You retain all ownership rights in any documents you upload. Mataana uses uploaded documents solely for the purpose of evaluating your application and will not share them with third parties except where required by law or with your explicit consent.

7. Security of Your Information

We use administrative, technical, and physical security measures to protect your personal information. These include encrypted data transmission (HTTPS), encrypted cloud storage for uploaded files, and access controls that restrict data access to authorised personnel. While we have taken reasonable steps to secure the personal information you provide, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or misuse.

8. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data before the end of the standard retention period.
• Right to restrict processing: to request that we limit how we use your data in certain circumstances.
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: to withdraw your consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format where technically feasible.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been infringed.

9. International Data Transfers

Our website infrastructure and cloud storage are operated from servers located in the United States and other jurisdictions. If you are accessing our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in a country whose data protection laws may differ from those in your jurisdiction. By submitting information through our website, you acknowledge and consent to this transfer.

10. Cookies and Tracking Technologies

Our website uses session cookies necessary for the operation of authentication and form functionality. We do not use third-party advertising cookies or cross-site tracking technologies. Analytics data is collected in aggregated form and is not linked to individual identities.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features of our website. The updated version will be indicated by a revised "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions or comments about this policy, wish to exercise your data protection rights, or wish to request early deletion of your data, please contact us at: