Privacy Policy
Last updated: 30 February 2026
This Privacy Policy explains how Desert Breidge LLP trading as Desertbridge (“Desertbridge”, “we”, “us” or “our”) collects, uses, discloses, stores and otherwise processes personal data through this website and in connection with our business, in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and other applicable laws.
This Privacy Policy applies to visitors to our website, prospective investors, investors, intermediaries, professional counterparties, service providers and other individuals whose personal data we may handle in the course of our business.
By interacting with us, submitting information to us, or using our website, you acknowledge that you have read and understood this Privacy Policy.
1. What personal data we collect
In this Privacy Policy, “personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access.
Depending on your interaction with us, we may collect personal data such as:
your name, title and employer;
contact details, including email address, telephone number and business address;
nationality, country of residence and jurisdictional information;
investor profile information, including accredited / expert / institutional investor status and investment preferences;
identification and due diligence information, including passport or other identification details, source-of-funds information and KYC / AML materials, where relevant;
correspondence and enquiry details;
website usage data, device data, IP address, browser type, cookies and analytics data;
professional background and relationship information;
any other information you choose to provide to us.
If you provide us with personal data relating to another individual, you represent that you have authority to do so and that the individual has been informed of, and where required has consented to, the purposes for which the personal data will be used and disclosed.
2. How we collect personal data
We may collect personal data in several ways, including when you:
visit or use our website;
submit an enquiry, request documents or contact investor relations;
sign up to receive updates or communications;
engage with us in relation to an investment opportunity, onboarding or due diligence process;
communicate with us by email, telephone, messaging platform or in person;
interact with our investor portal or other digital tools;
provide information through professional intermediaries, introducers, advisers or service providers;
allow cookies or similar technologies on our website;
provide publicly available information, or where we obtain information from lawful third-party sources.
3. Why we collect, use and disclose personal data
We may collect, use and disclose personal data for purposes such as:
operating, maintaining and improving our website;
responding to enquiries and requests;
providing information about Desertbridge, our platform, our funds, products, services and events;
assessing suitability, eligibility and investor categorisation;
carrying out know-your-client, anti-money laundering, sanctions screening, tax, regulatory and compliance checks;
onboarding investors, managing subscriptions, redemptions, distributions and investor servicing;
administering relationships with intermediaries, advisers, counterparties and service providers;
providing access to password-protected areas, portals and documents;
performing internal reporting, risk management, audit, record-keeping and governance functions;
detecting, preventing and investigating fraud, cyber incidents, misconduct or other unlawful activity;
complying with legal, regulatory, tax, audit, reporting and enforcement obligations;
sending marketing, thought leadership or event communications where permitted by law;
any other purpose that has been notified to you at the time of collection or that is reasonably related to the above.
Where required under the PDPA, we will notify you of the relevant purposes and obtain your consent, unless an exception under the PDPA applies. Under the PDPA, organisations generally must inform individuals of the purposes for collection, use and disclosure of personal data, and should not require consent beyond what is reasonable to provide the relevant product or service. (PDPC)
4. Cookies and website analytics
Our website may use cookies, web beacons, pixels and similar technologies to:
enable core website functionality;
remember user preferences;
understand website traffic and usage patterns;
improve website performance, security and user experience;
support communications and marketing analytics where permitted.
Some cookies may collect data that constitutes personal data under the PDPA. You can usually control cookies through your browser settings. Disabling cookies may affect website functionality.
If we use non-essential cookies or similar tracking technologies in a manner that requires consent under applicable law, we will seek that consent through appropriate website tools or notices.
5. Disclosure of personal data
We may disclose personal data, where reasonably necessary, to:
our affiliates and related entities;
fund vehicles and platform entities within the Desertbridge group structure;
administrators, custodians, brokers, banks, auditors, legal advisers, tax advisers, compliance consultants and other professional advisers;
technology providers, cloud-service providers, portal providers, website hosts and cybersecurity vendors;
KYC, AML, sanctions screening and verification providers;
placement agents, introducers or other authorised intermediaries, where relevant;
regulators, governmental authorities, courts, law enforcement agencies or self-regulatory bodies;
any other party where disclosure is required or permitted by law, or where you have consented.
Where third parties process personal data on our behalf, we expect them to protect it appropriately and to use it only for authorised purposes.
6. Overseas transfers of personal data
Given the cross-border nature of our business, your personal data may be transferred to or accessed from locations outside Singapore, including jurisdictions in which our affiliates, service providers, counterparties or data centres operate.
Where we transfer personal data outside Singapore, we will take steps designed to ensure that the transferred personal data continues to receive a standard of protection comparable to that required under the PDPA, including through contractual measures, due diligence and other appropriate safeguards. The PDPA’s Transfer Limitation Obligation requires organisations to ensure comparable protection for transferred personal data, and PDPC guidance notes that this can be done through legally enforceable obligations and appropriate contracts, including with cloud providers. (PDPC)
7. Retention of personal data
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, and for legal, regulatory, business, accounting, tax, audit and record-keeping purposes.
When personal data is no longer required for these purposes, we will cease retention or anonymise or securely dispose of it in accordance with our retention policies and applicable law. The PDPA’s Retention Limitation Obligation requires organisations to cease retaining personal data, or dispose of it properly, when it is no longer needed for any business or legal purpose. (PDPC)
8. Accuracy of personal data
We generally rely on personal data provided by you or your authorised representatives. You should ensure that the information you provide is accurate, complete and up to date, and notify us of any changes.
Where appropriate, we may take reasonable steps to verify or update personal data before using it to make a decision that affects you or before disclosing it to another organisation.
9. Protection of personal data
We implement reasonable administrative, physical and technical safeguards designed to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks.
These measures may include access controls, encryption, secure hosting, network and endpoint protections, monitoring, contractual safeguards with vendors, and internal governance procedures.
No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.
10. Data breaches
If we become aware of a personal data breach, we will assess it promptly and take appropriate containment, remediation and notification steps in accordance with applicable law.
Under the PDPA, notifiable data breaches generally must be notified to the PDPC as soon as practicable and no later than three calendar days after the organisation determines that the breach is notifiable, and affected individuals must be notified as soon as practicable where required. (PDPC)
11. Marketing communications
Where permitted by law, we may send you updates, insights, event invitations or other communications relating to Desertbridge, our funds, products, services or related opportunities.
You may opt out of marketing emails at any time by using the unsubscribe function in the communication or by contacting us using the details below.
If we send marketing messages to a Singapore telephone number, we will do so in accordance with the PDPA’s Do Not Call provisions. The PDPA generally prohibits organisations from sending marketing messages to Singapore telephone numbers listed in the Do Not Call Registry unless an exception applies, such as clear and unambiguous consent. (PDPC)
12. Your rights
Subject to applicable law and relevant exceptions, you may have the right to:
request access to personal data we hold about you and information about how we have used or disclosed it;
request correction of personal data that is inaccurate or incomplete;
withdraw consent to our collection, use or disclosure of your personal data for certain purposes;
request that we stop sending you marketing communications.
Under the PDPA, individuals may request access and correction, and may withdraw consent with reasonable notice; organisations should inform the individual of the likely consequences of withdrawal and cease collecting, using or disclosing the personal data for those purposes, unless an exception applies. (PDPC)
To make a request, please contact our Data Protection Officer using the details below. We may need to verify your identity before acting on your request. We may also charge a reasonable fee for an access request where permitted by law, and we may rely on any statutory exception available under the PDPA.
13. Third-party websites
Our website may contain links to third-party websites, portals or services. We are not responsible for the privacy, security or content practices of those third parties. You should review their privacy policies separately.
14. Investor portals and restricted-access areas
Certain documents, portals or sections of our website may be restricted to qualified or authorised users. Access credentials must be kept confidential and must not be shared. We may collect and use technical and login information to administer, secure and audit access to such areas.
15. Children
Our website and services are not directed at children. We do not knowingly collect personal data from children except where this is lawful and appropriate and, where required, with the consent of a parent or legal guardian.
16. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, website functionality, legal requirements or data handling practices. The updated version will be posted on this page with a revised “Last updated” date.
17. Contact us / Data Protection Officer
If you have any questions, requests or complaints relating to this Privacy Policy or our handling of personal data, please contact:
Data Protection Officer
Desert Bridge Venture LLP
info@Desertrbridge.Capital
Ground Floor, The Gardens,
Bagatelle Office Park,
Bagatelle, Moka 80832,
Mauritius
The PDPA expects organisations to have policies and practices in place and to make business contact information of at least one person available to answer questions about those policies and practices. (PDPC)