Privacy Policy

LightMountain Advisory (“LMA”, “we”, “our”) is a boutique financial advisory firm based in Dubai, United Arab Emirates. This Privacy Policy explains what personal information we collect when you interact with lightmountainadvisory.com and the LMA Intelligence platform, why we collect it, how we use and protect it, and the rights you have in relation to it.

This policy is written to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, the DIFC Data Protection Law No. 5 of 2020, the ADGM Data Protection Regulations 2021, and — to the extent applicable to visitors from the European Economic Area — the General Data Protection Regulation (GDPR).

Who we are

The data controller is LightMountain Advisory, Dubai, United Arab Emirates. You can reach us at info@lightmountainadvisory.com or on +971 50 102 9599. For matters specific to this policy, contact the Managing Partner, Q. Bilal Khan Niazi, at bilalkhan@lightmountainadvisory.com.

Information we collect

We collect information in three narrowly defined ways:

• Information you give us directly. When you contact us by email, phone, or through the Zayd chat assistant on our website, we receive the contact details and the content of the message you send. If you request a meeting with Bilal, we collect the meeting-relevant information you provide (name, firm, role, preferred mode and time, and the reason for the meeting).
• Information the LMA Intelligence platform processes on your behalf. If you are a member of the LMA team using the internal platform at /intelligence, deal inputs you enter (client name, sector, transaction details, deal summary) are sent to our AI provider to generate analysis. Deal inputs and outputs are not persisted by LMA on any server. Pipeline tracker entries are stored only in your own browser’s local storage and never leave your device.
• Basic technical information. Our hosting provider receives standard server logs (IP address, user agent, timestamps) when your browser requests our pages. These logs are used for security, abuse prevention, and service reliability.

How we use the information

• To respond to your enquiry and, where appropriate, to assess a potential mandate.
• To arrange a meeting with the relevant LMA partner or advisor.
• To generate the outputs of the internal LMA Intelligence platform (triage, teaser drafting, lender shortlisting, restructuring playbook, pipeline tracker) for the exclusive use of the LMA team.
• To keep the website secure, resolve incidents, and improve the user experience.
• To comply with applicable laws and regulatory obligations.

We do not sell or rent personal information. We do not share contact details with third-party marketers.

Legal bases

• Consent— when you initiate contact, book a meeting, or use the Zayd chat.
• Legitimate interests— for the security and reliability of the site, and for the ordinary conduct of our business as a professional advisory firm.
• Contract— once an engagement letter is in place, processing that is necessary to deliver the mandate.
• Legal obligation— where applicable laws, court orders, or regulators require disclosure.

Confidentiality of client matters

All information you share with LMA in the context of a potential or active mandate is treated as strictly confidential. We do not issue press releases about client transactions. The case studies and transactions listed on this site are anonymised and aggregated, and any specific client identification requires the client’s prior written consent.

Processors and third parties

We use a small number of trusted technical service providers to run our website and internal tools. Each processes personal information only under written instructions and under confidentiality obligations:

• Vercel Inc.— hosting and edge delivery of the website and APIs.
• Anthropic PBC— the AI provider behind the Zayd chat assistant and the LMA Intelligence platform. Inputs sent to Anthropic’s API are used to return the requested output and, per Anthropic’s API terms, are not used to train their models on a consumer basis.
• Google Fonts— typography. Font files are served from Google’s content delivery network.

Some of these providers may process personal information outside the United Arab Emirates. Where such transfers occur, we rely on the contractual and technical safeguards these providers offer (including standard contractual clauses or equivalent mechanisms) to maintain an adequate level of protection.

Retention

Personal information provided through the website or by email is retained only for as long as needed for the purpose for which it was collected, and in any case no longer than required by applicable law. Server logs are retained for a short operational window (typically up to 90 days) and then deleted.

Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of information we no longer have a lawful basis to keep.
• Restrict or object to certain processing.
• Where processing is based on consent, withdraw that consent at any time (without affecting the lawfulness of processing already carried out).
• Lodge a complaint with a competent data protection authority, including the UAE Data Office.

To exercise any of these rights, write to info@lightmountainadvisory.com.

Security

We use industry-standard technical and organisational measures to protect information against unauthorised access, loss, or disclosure. These include transport encryption (HTTPS), authentication for the internal platform, limited access by personnel on a need-to-know basis, and deliberate minimisation of what is stored.

Children

Our services are not directed at individuals under 18. We do not knowingly collect information from minors.

Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will always reflect the most recent version. Material changes will be communicated through this page and, where appropriate, directly to the affected individuals.