Privacy policy

Last updated: Aug. 12. 2025

This Privacy Policy describes how BRAVE & BOLD VENTURES - FZCO, a Free Zone Company registered under the laws of the United Arab Emirates ("we", "us", or "our"), collects, uses, processes, and discloses your personal information when you visit, use our services, or make a purchase from brave-bold.de or brave-bold.com (collectively referred to as the "Site"), participate in our Growth Capital Program, or otherwise communicate with us regarding the Site and our services (collectively, the "Services"). For the purposes of this Privacy Policy, "you" and "your" refer to users of the Services, including customers, website visitors, investors, or other individuals whose personal information is processed under this Policy.

Please read this Privacy Policy carefully to understand our practices regarding your personal information.

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, operational enhancements, or for legal and regulatory reasons. Any revisions will be posted on the Site with an updated "Last updated" date. Where required by applicable law, we will notify you of any significant changes that may materially affect your rights or the processing of your personal information.

2. How We Collect and Use Your Personal Information

We collect personal information from a variety of sources, depending on how you interact with our Services. This information is primarily used to provide and improve our Services, communicate effectively with you, and ensure compliance with our legal and regulatory obligations. Below is a detailed overview of the types of personal information we collect and our purposes for using it.

2.1. What Personal Information We Collect

a) Information We Collect Directly from You:
We may collect the following personal information directly from you when you interact with our Services, including when you create an account, make a purchase, or contribute capital to our Growth Capital Program:

  • Contact Information: Name, address, phone number, email address.

  • Order & Purchase Information: Billing address, shipping address, payment confirmation (excluding full payment card details, which are processed by third-party payment processors), email, phone number related to your purchases.

  • Account Information: Username, password, security questions, and any other information you provide to set up and manage your account.

  • Customer Support Information: Any details you provide when communicating with us for support, inquiries, or feedback.

  • Investment Program Information (for Growth Capital Program participants): Investment preferences, selected contribution amounts, allocation choices (Pooled Capital Allocation or Advisored Capital Allocation), and any other information required for the contractual agreement (L&RSA).

Some features of the Services require you to provide certain information. If you choose not to provide this mandatory information, certain functionalities or participation in specific programs (like the Growth Capital Program) may not be accessible.

b) Information We Collect about Your Usage:
We may automatically collect information about your use of the Site and Services ("Usage Data") through cookies, pixels, web beacons, and similar technologies. This includes:

  • Device Information: IP address, browser type and version, device identifiers, operating system, and unique device characteristics.

  • Network Information: Data related to your network connection, mobile network information.

  • Interaction Data: Details of how you interact with our Site and Services, including pages viewed, time spent on pages, clickstream data, referral source, and navigation paths.

c) Information We Obtain from Third Parties:
We may also obtain information about you from reputable third parties, which may include:

  • Service Providers: Vendors that provide services to support our operations, such as website hosting, analytics, customer relationship management (CRM), and fulfillment services (e.g., Shopify for e-commerce operations).

  • Payment Processors: Information related to payments, billing details, and transaction verification.

  • Advertising and Analytics Providers: We may collect information about how you interact with our advertisements and other online content through third-party tools and services, for purposes of measuring effectiveness and optimization.

  • Publicly Available Sources: Information from publicly accessible databases where relevant and permitted by law.

We treat all information obtained from third parties in accordance with this Privacy Policy and applicable laws.

2.2. How We Use Your Personal Information

We use your personal information for the following purposes and based on the following legal bases (for EEA residents under GDPR, Article 6(1)):

  • Providing Products and Services (Contractual Necessity - Art. 6(1)(b) GDPR): To process your orders, fulfill purchases, manage your account, facilitate participation in the Growth Capital Program (including processing Capital Contributions and managing allocation choices), and to communicate with you regarding your transactions and account.

  • Marketing and Advertising (Legitimate Interest - Art. 6(1)(f) GDPR / Consent - Art. 6(1)(a) GDPR): To send you promotional messages, newsletters, or display targeted advertisements about our products, services, and the BRAVE & BOLD Brand Dynasty Ecosystem. For residents of the European Economic Area (EEA), these activities are based on our legitimate interest to promote our services, or where required, on your explicit consent. You have the right to withdraw consent or opt-out at any time.

  • Security and Fraud Prevention (Legitimate Interest - Art. 6(1)(f) GDPR / Legal Obligation - Art. 6(1)(c) GDPR): To detect, prevent, and investigate fraudulent, malicious, or unauthorized activities that could harm our Services, our users, or our business. This is in our legitimate interest to protect the security and integrity of our services and to comply with legal obligations (e.g., anti-money laundering regulations where applicable to the Growth Capital Program).

  • Service Improvement & Personalization (Legitimate Interest - Art. 6(1)(f) GDPR): To analyze usage patterns, enhance the functionality and user experience of our Site and Services, personalize your experience, and optimize our offerings based on your preferences and interactions.

  • Legal & Regulatory Compliance (Legal Obligation - Art. 6(1)(c) GDPR): To comply with applicable laws, regulations, legal processes (e.g., court orders, subpoenas), and governmental requests, including those related to our operations in the UAE, DIEZA regulations, and any other relevant jurisdictions. This includes maintaining records for audit purposes and fulfilling reporting obligations.

3. Cookies and Similar Technologies

We use cookies, pixels, and similar tracking technologies to improve the performance and functionality of our Site, understand user behavior, and facilitate targeted advertising. These technologies help us remember your preferences, enhance site navigation, and analyze traffic. For more detailed information about how we use cookies, including how to manage your cookie preferences, please refer to Shopify's Cookie Policy (as our e-commerce platform provider) and/or our own dedicated Cookie Policy [if you create one].

4. How We Disclose Personal Information

We may disclose your personal information under the following circumstances, strictly adhering to the purposes outlined in this Policy:

  • Service Providers: With third-party service providers who perform functions on our behalf, such as IT services, payment processing, order fulfillment, data analysis, email delivery, and customer support. These providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.

  • Marketing Partners: With partners for advertising and promotional purposes, including social media platforms and advertising networks, where permitted by law or with your consent.

  • Legal & Regulatory Authorities: When required by law, court order, governmental request, or to comply with applicable regulations in the UAE (including DIEZA regulations) or other relevant jurisdictions. This includes disclosures necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

  • Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. In such cases, personal information may be part of the transferred assets.

  • Within BRAVE & BOLD VENTURES Ecosystem: With other entities within the BRAVE & BOLD Brand Dynasty Ecosystem for purposes consistent with this Privacy Policy, such as cross-promotion or coordinated service delivery.

5. Children's Data

Our Services are not directed toward children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately using the details below, and we will take steps to remove such information from our records.

6. Security and Retention of Your Information

We implement reasonable technical and organizational security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. However, no method of transmission over the internet or method of electronic storage is entirely secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with our legal obligations (e.g., maintaining financial and investment records for statutory periods), resolve disputes, and enforce our agreements.

7. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights regarding your personal information. For EEA residents, these rights are primarily derived from the GDPR:

  • Right to Access: Request a copy of the personal information we hold about you.

  • Right to Rectification: Request that we correct inaccurate or incomplete personal information.

  • Right to Erasure ("Right to be Forgotten"): Request the deletion of your personal information under certain circumstances.

  • Right to Restriction of Processing: Request that we limit the processing of your personal information under certain conditions.

  • Right to Data Portability: Request that your personal information be transferred to another service provider in a structured, commonly used, and machine-readable format.

  • Right to Object to Processing: Object to the processing of your personal information under certain circumstances, particularly where processing is based on legitimate interests or for direct marketing.

  • Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly if you are in the EEA, if you believe your data protection rights have been violated.

To exercise these rights, please contact us via the details provided in the "Contact" section below. We will respond to your request in accordance with applicable law.

8. International Users

BRAVE & BOLD VENTURES - FZCO is based in the United Arab Emirates. Your personal information will be primarily processed and stored in the UAE. We may transfer your personal information to countries outside your own (e.g., to the European Union for certain service providers, or where your own jurisdiction is outside the UAE). When we transfer personal information internationally, we implement appropriate safeguards to ensure an adequate level of data protection, relying on legally recognized mechanisms such as standard contractual clauses (SCCs) approved by the European Commission, or other valid legal grounds for data transfer.

9. Contact

If you have any questions regarding this Privacy Policy, wish to exercise any of your rights, or have any concerns about our data practices, please contact us at:

Email: contact@brave-bold.com
Registered Address: IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates