Your privacy is important to us. This policy outlines how we collect, use, and protect your personal information.
All Terra Global ("All Terra", "we", "us", or "our") respects your privacy and is committed to handling personal data responsibly and in accordance with applicable data protection laws.
This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect personal data when you visit allterraglobal.com, create or use an account, make an investor enquiry, undergo investor onboarding or verification, access investment opportunities, or otherwise interact with All Terra Global.
All Terra Global is incorporated in the United Arab Emirates and operates through offices in Dubai, UAE; Harare, Zimbabwe; New Jersey, USA; and Mumbai, India.
For privacy questions or requests, contact:
This Privacy Policy applies to personal data processed through our website, investor onboarding processes, KYC and compliance activities, investment-related interactions, account functions, and associated business operations.
Our services are intended for persons aged 18 years or older.
This Privacy Policy does not by itself govern the commercial terms, risks, rights, repayment obligations, returns, or other terms applicable to a particular investment opportunity. Those matters are governed by the documentation applicable to the relevant opportunity.
Depending on your interaction with us, we may collect the following categories of personal data.
This may include:
This may include:
This may include:
Where an investor or prospective investor is an organisation, we may collect:
This may include:
When you use our website, we may collect technical information such as:
We use Google Analytics subject to the consent controls described below.
As part of our KYC and identity-verification procedures, All Terra may use automated facial or biometric matching.
The biometric matching system is operated internally by All Terra Global. A photograph or selfie may be technically processed and compared for the purpose of verifying a person's identity.
We do not retain the biometric template or facial-match data after the verification process is completed.
A photograph or identity image that forms part of the underlying KYC record may be retained separately where necessary for identity verification, compliance, recordkeeping, dispute resolution, or other applicable legal purposes.
Where biometric information is subject to laws that provide enhanced protection for biometric or special-category personal data, we process such information only where an appropriate lawful basis and any additional condition, consent, safeguard, or other requirement under applicable law is satisfied.
We primarily obtain personal data directly from you, including when you:
We may also generate compliance, verification, screening, suitability, classification, fraud-prevention, and similar results through our internal processes using information supplied by you.
We may process personal data for the following purposes.
To establish, authenticate, maintain, and administer website or investor accounts.
To respond to enquiries, assess prospective investor relationships, communicate about relevant opportunities, and carry out steps requested in connection with a potential investment relationship.
To verify identity and conduct know-your-customer procedures.
To conduct anti-money laundering, sanctions screening, and related compliance procedures.
To assess and document the source of funds and related information where required for investor onboarding, compliance, risk management, or an investment transaction.
To assess whether an investor falls within an applicable retail, accredited, professional, qualified, institutional, corporate, HNI, family office, or other investor category.
To undertake suitability or appropriateness assessments where applicable to the relevant investor, jurisdiction, transaction, or investment opportunity.
To provide, obtain, and maintain appropriate risk disclosures and acknowledgements.
To administer investor relationships and activities associated with relevant investment opportunities.
To protect our systems, website, accounts, investors, records, and business operations and to detect or prevent misuse, fraud, unauthorised access, or other security incidents.
To comply with legal, regulatory, judicial, governmental, compliance, audit, recordkeeping, and enforcement requirements that apply to us or to a particular transaction.
To understand how visitors interact with our website, measure website performance, and improve website functionality.
Where the EU GDPR or UK GDPR applies, we rely on one or more lawful bases depending on the specific processing activity.
We may process personal data where processing is necessary:
This may apply to account creation, investor onboarding, enquiries directly connected with a proposed relationship, and investment administration.
We may process personal data where necessary to comply with legal or regulatory obligations applicable to us.
Depending on the relevant circumstances, this may include KYC, AML and sanctions compliance, source-of-funds verification, investor classification, suitability or appropriateness procedures, recordkeeping, and regulatory compliance.
We may process personal data where necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights and interests.
These interests may include:
Where required, we rely on consent for specific processing activities.
In particular, Google Analytics is subject to consent for visitors in jurisdictions where prior consent is required for analytics technologies.
You may withdraw consent through the relevant website privacy or cookie controls. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Where biometric matching constitutes biometric or special-category processing under applicable law, All Terra will identify and document the applicable lawful basis and any separate special-category condition or other legal requirement before relying on that processing in the relevant jurisdiction.
Our website uses Google Analytics to obtain information about website usage and performance.
For visitors in the EU/EEA and United Kingdom, Google Analytics is configured so that analytics processing does not begin until the visitor has provided the required consent.
Where applicable, users can reject non-essential technologies and subsequently change or withdraw their preferences.
Strictly necessary technologies may operate without optional consent where they are required to provide a service requested by the user, maintain security, authenticate users, or perform other functions permitted by applicable law.
Additional information about technologies used on the website and available controls may be provided through our cookie notice, consent banner, or preference interface.
We limit access to personal data to persons and organisations that require it for legitimate business, operational, compliance, or legal purposes.
Investor and KYC records may be accessed by authorised:
Access is subject to role and access controls.
Because All Terra operates internationally, authorised personnel may access relevant information from our operations in the UAE, Zimbabwe, United States, and India.
Our website database is hosted by MASTERMATICS in the United Arab Emirates.
MASTERMATICS provides website/database hosting services to All Terra Global under a written service or data-protection arrangement requiring appropriate protection of investor data.
We may disclose personal data where reasonably necessary to:
We do not currently use an external KYC provider for the KYC process described in this Privacy Policy.
All Terra operates internationally, and personal data may therefore be accessed or processed across jurisdictions.
Our principal website database is hosted in the UAE. Authorised personnel may access investor information from the UAE, Zimbabwe, United States, and India.
Where applicable data protection law regulates international transfers, we use appropriate safeguards for relevant transfers and cross-border access.
The particular safeguard may depend on the jurisdictions, recipient, circumstances of the transfer, and applicable legal framework.
Where required, additional information about safeguards applicable to your personal data may be requested by contacting investments@allterraglobal.com.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, regulatory, compliance, contractual, security, dispute-resolution, and recordkeeping requirements.
Our current retention framework includes the following.
KYC, customer due diligence, identity documents, proof-of-address information, beneficial-owner records, source-of-funds evidence, AML records, and related investor compliance information are retained for applicable legally or regulatorily required periods.
Where a relevant UAE AML recordkeeping requirement applies to All Terra or the relevant activity, covered records may be retained for the applicable minimum statutory period.
Biometric templates or facial-match data generated through our biometric identity-verification process are not retained after verification is completed.
Underlying photographs or identity documents may remain part of the applicable KYC record where their continued retention is required or otherwise justified.
Personal data associated with abandoned applications is generally retained for up to 12 months after the last relevant activity, unless a longer period is required for legal, regulatory, AML, investigation, dispute, or legal-hold purposes.
Account and profile information required to administer an active relationship may be retained while that account or investor relationship remains active.
Account information that is not independently required for KYC, AML, transaction, regulatory, security, dispute, or other legitimate recordkeeping purposes is targeted for deletion or anonymisation within 30 days after account closure.
Website enquiry information is generally retained for up to 12 months after the last substantive interaction, unless continued retention is reasonably necessary.
Authentication and general security logs are generally retained for approximately 12 months.
KYC database access logs may be retained for approximately 24 months.
Longer periods may apply where records relate to an actual or suspected security incident, investigation, dispute, or legal requirement.
Records relating to privacy requests and our responses may generally be retained for approximately three years after the request is closed, subject to applicable law.
Deleted production data may remain temporarily within protected backups until those backups expire through our normal backup cycle. We target a maximum deletion cycle of approximately 90 days, except where continued preservation is required under a legal hold or other applicable requirement.
Information subject to litigation, investigation, regulatory enquiry, legal hold, or similar preservation obligation may be retained until that requirement ends. The ordinary retention schedule will then apply.
We use technical and organisational measures designed to protect personal data against unauthorised access, use, disclosure, alteration, loss, or destruction.
Measures currently used for the investor database include:
No system or transmission method can be guaranteed to be completely secure. We therefore continually apply safeguards appropriate to the nature of the information and the risks associated with its processing.
Depending on where you live and the laws that apply to the relevant processing, you may have rights concerning your personal data.
These may include the right to:
These rights are not absolute and may be subject to legal exceptions, including obligations requiring us to retain KYC, AML, transaction, regulatory, security, or legal records.
To exercise a privacy right, contact:
investments@allterraglobal.com
We may need to verify your identity before fulfilling a request, particularly where the request concerns investor, financial, identity, or KYC information.
Where the EU GDPR applies to our processing, All Terra Global acts as the controller of personal data covered by this Privacy Policy unless another role is specifically identified for a particular transaction.
You may have the rights described in Section 12 and may lodge a complaint with the competent supervisory authority in the EEA country in which you live, work, or believe an infringement has occurred.
All Terra Global will appoint a representative in the European Union or EEA where required by Article 27 of the GDPR.
Where the UK GDPR applies to our processing, you may have the rights described in Section 12.
You also have the right to make a complaint to the UK Information Commissioner's Office where applicable.
All Terra Global will appoint a UK representative where required under the UK GDPR.
Individuals in certain US states may have additional privacy rights where the relevant state privacy law applies to All Terra and its processing activities.
Depending on the applicable law and statutory thresholds, those rights may include rights relating to access, correction, deletion, portability, certain disclosures, and specified opt-out choices.
Nothing in this Privacy Policy is intended to state that a particular US state privacy statute applies to All Terra where the statutory applicability criteria have not been met.
Requests may be submitted to investments@allterraglobal.com.
All Terra has operations in India and processes personal data relating to individuals in India.
We will apply the requirements of India's data protection framework to the extent those requirements are in force and applicable to the relevant processing.
Individuals may contact investments@allterraglobal.com regarding questions, concerns, or available rights concerning their personal data.
All Terra has operations in Zimbabwe.
Where Zimbabwe's data protection requirements apply, we process and transfer relevant personal data subject to applicable requirements concerning lawful processing, security, retention, data-subject rights, and transborder data flows.
Individuals may contact investments@allterraglobal.com regarding their personal data.
Our investment services are intended only for persons who are 18 years of age or older.
We do not intend to onboard persons under 18 as investors.
If we become aware that personal data has been provided in circumstances inconsistent with this age requirement, we may take appropriate steps to restrict the relevant account or interaction and address the information in accordance with applicable law.
All Terra uses automated biometric matching as part of identity verification.
The biometric matching process is used for KYC and identity verification. Biometric templates generated for the comparison are not retained after the verification process concludes.
Except as otherwise specifically disclosed in connection with a particular process, this Privacy Policy does not state that All Terra makes investment eligibility or other decisions producing legal or similarly significant effects solely through automated biometric processing.
All Terra does not currently use the personal data covered by this Privacy Policy to send general email newsletters, SMS marketing, WhatsApp marketing, telephone marketing, or LinkedIn marketing communications.
If our marketing practices materially change, we will assess the applicable notice, consent, opt-out, and policy requirements before implementing those changes and will update this Privacy Policy where appropriate.
Operational or transaction-related communications are not treated as marketing merely because they relate to an existing enquiry, account, compliance process, or investment relationship.
Our website may contain links to third-party websites, services, projects, or resources.
Those third parties may process personal data under their own privacy practices. All Terra is not responsible for the privacy practices of an independent third party merely because its website or service is linked from our website.
You should review the privacy information applicable to the relevant third-party service.
We may update this Privacy Policy when our processing activities, services, technologies, legal requirements, or business operations change.
When we make changes, we will update the effective date and publish the revised version through an appropriate location on our website.
Where required by applicable law, we will provide additional notice or obtain a new consent before materially changed processing begins.
Questions, requests, or concerns regarding this Privacy Policy or our handling of personal data may be directed to:
All Terra Global\
Dubai, United Arab Emirates
Operations also maintained in:\
Harare, Zimbabwe\
New Jersey, United States\
Mumbai, India
Privacy Email: investments@allterraglobal.com
Our team is here to help you understand how your data is used and protected.
Contact Us