Privacy Notice

Effective: August 2026

1. Introduction

This privacy notice (“Privacy Notice”) sets out how Mubadala Capital LLC and its affiliates (together, “Mubadala Capital”, “we”, “us” or “our”) collect and use your Personal Data.

For administrative convenience and in light of our integrated global operating model, this Privacy Notice applies to Mubadala Capital group entities, including MIC Capital Management LLP in the United Kingdom, which is authorised and regulated by the U.K. Financial Conduct Authority, as well as Mubadala Capital entities operating in the United States, Abu Dhabi Global Market (“ADGM”) and Brazil.

This Privacy Notice applies broadly to individuals (“Data Subjects”) with whom we interact in connection with our business, including, without limitation, investors and prospective investors, representatives of institutional investors, portfolio company representatives, service providers, advisers, and other users of our website.

When we refer to “Personal Data”, we mean any information that can reasonably be used to identify you as an individual.

We are committed to processing Personal Data lawfully, fairly and transparently and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, applicable U.S. privacy laws including Regulation S-P and the California Consumer Privacy Act (as amended) (“CCPA”), the ADGM Data Protection Regulations and the Brazilian Lei Geral de Proteção de Dados (“LGPD”).

Mubadala Capital processes your Personal Data in accordance with data protection laws in the countries in which they operate. To find out more information about the companies within the Mubadala Capital group that may handle your Personal Data, visit https://www.mubadalacapital.ae/about.

We may change this Privacy Notice from time to time by updating this page. You should check this page from time to time to ensure you are happy with any changes.

If you have any questions about this Privacy Notice or do not agree with it, please contact us here.

2. What Personal Data do we collect?

We may collect Personal Data directly from you, indirectly from third parties and automatically through your interactions with us.

We may collect identifying information such as your name, residential and business address, email address, telephone number, IP address and government-issued identification numbers. We may also collect personal characteristics including nationality, place and date of birth and residency status.

We may collect financial and commercial information including bank account details, investment holdings, transaction history, capital account information, source of funds and wealth, and credit-related information. We may also collect professional and employment-related information, including your employer, job title, remuneration and background.

We may obtain Personal Data from publicly available sources, regulators, administrators, counterparties, service providers and third-party due diligence providers. We may also generate Personal Data internally through our analysis and monitoring activities.

In addition, we may collect technical and usage data relating to your interaction with our websites and systems, including browsing activity, device information and log data. We also collect compliance-related information, including AML/KYC documentation, sanctions screening results, due diligence reports and regulatory status. We do this by using cookies. For more information, see our Cookie Policy.

3. What do we do with the Personal Data we collect?

We may use Personal Data for the following purposes:

  • Administering investments, processing transactions, maintaining investor/potential investor records and facilitating communications.
  • Anti-money laundering, counter-terrorist financing, sanctions compliance, tax reporting, regulatory reporting and responding to lawful requests from authorities.
  • Complying with legal and regulatory obligations such as handling data subject rights requests or maintaining required records.
  • Managing and improving our business operations, conducting internal audits and compliance monitoring, performing risk management, protecting our systems and assets, and pursuing or defending legal claims.
  • Providing information about our services, where permitted by law.
  • To ensure the security and smooth functioning of our website and make improvements to it.

We ensure that all processing activities are supported by an appropriate legal basis under applicable law. This includes where the processing is necessary:

  • to perform our contract with you,
  • to comply with a legal obligation,
  • to establish, exercise or defend our legal rights,
  • for the purpose of legal proceedings, or
  • for our legitimate interests (or the legitimate interests of one or more of our affiliates or a third party),
  • or where you have given your consent to the processing.

Marketing

We would like to provide you with information about Mubadala Capital and other information which we think you may find interesting. We may send you such information by post, email and/or telephone, unless you have asked us not to do so.

If you have previously asked us for information about us, we may send you information by email; however, in every marketing email message we send you, we will give you the opportunity to unsubscribe from our mailings altogether.

We do not provide your Personal Data to external organisations (i.e., outside of Mubadala Capital) for their own marketing purposes without your explicit consent.

If at any time you do not want your information used for direct marketing purposes, please contact us here. If you decide that you no longer wish to receive marketing emails from us, please either follow the unsubscribe link in one of our marketing email messages or contact us here.

4. Whom do we share your Personal Data with?

We may share Personal Data with financial institutions, brokers and counterparties in connection with transactions. We may also disclose Personal Data to regulators, governmental authorities and law enforcement agencies where required or permitted by law.

We may disclose Personal Data in connection with corporate transactions, including mergers, acquisitions, financings or restructurings. Also, if any bankruptcy or reorganisation proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible, they will be sold or transferred to third parties.

We may share Personal Data with Mubadala Capital group entities for internal administrative and operational purposes.

We may also share your Personal Data with third parties who perform functions on our behalf and who also provide services to us, such as administrators, custodians, professional advisors, IT consultants carrying out testing and development work on our business technology systems, research and mailing houses and function coordinators.

All recipients of Personal Data are required to maintain appropriate confidentiality and security safeguards and to process Personal Data in accordance with applicable law.

5. Transfers of your Personal Data outside of your home country

Your Personal Data may be processed by Mubadala Capital, its group companies and those other parties described above, outside the country in which you are based. Where the data protection regulator in your home country has not issued an adequacy decision in relation to the jurisdiction where your Personal Data is processed, we will ensure that there are adequate mechanisms in place to protect your Personal Data in accordance with applicable data protection and privacy law. This may be through the use of data transfer agreements implementing standard data protection clauses. In other circumstances the law may permit us to otherwise transfer your personal data outside the country in which you are based. In all cases we will ensure that any transfer of your Personal Data is compliant with data protection and privacy law. You can receive further information about the protection given to your personal data when it is transferred outside the country in which you are based by contacting us here.

6. How do we protect your Personal Data?

We are committed to ensuring that your Personal Data is secure. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the Personal Data we collect, including strong data encryption, access monitoring and password protection.

We regularly review and update our security measures to address evolving risks and regulatory expectations. Access to our website is logged for security threats.

If at any point you suspect or become aware of a security incident (e.g., you receive a suspicious communication from someone holding themselves out to be an Mubadala Capital employee or from an unauthorised website claiming to be affiliated with Mubadala Capital), please forward the communication to us or report the incident by contacting us as soon as possible at the email address in Section 10. Contact details below.

7. How long will we keep your Personal Data?

We will always keep your Personal Data for the period required by law. We will also keep your Personal Data where we need to do so in connection with legal action or an investigation involving Mubadala Capital. Otherwise, we will only keep your Personal Data for the period necessary to fulfil the purposes outlined above and in any event for no more than the minimum retention period as required by applicable laws and regulations.

8. What are your rights?

Depending on your location and the Mubadala Capital entity that you engage with have a number of rights when it comes to your Personal Data. Further information and advice about your rights can be obtained from the data protection regulator in your country. California residents may have other rights, please see Section 12.

Right What does this mean?
1. The right to object to processing You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
2. The right to be informed You have the right to be provided with clear, transparent. and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this notice.
3. The right of access You have the right to obtain access to your information (if we’re processing it), and certain other information (similar to that provided in this notice). This is so you’re aware and can check that we’re using your information in accordance with applicable law.
4. The right to rectification You are entitled to have your information corrected if it’s inaccurate or incomplete.
5. The right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
6. The right to restrict processing You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in the future.
7. The right to data portability You have rights to obtain and reuse your personal information for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
8. The right to lodge a complaint You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.
9. The right to withdraw consent If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal information for marketing purposes.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:

  • baseless or excessive/repeated requests, or
  • further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request.

Please consider your request responsibly before submitting it. We’ll respond as soon as we can.

Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.

9. Website usage and Cookies

When you visit our website, we may collect information such as IP address, browser type, device information and usage data. We use cookies and similar technologies to enhance user experience, analyse website performance and improve our services.

You may manage cookie preferences through your browser settings. Disabling cookies may affect website functionality.

Please also see our Cookie Policy.

Our website or marketing email messages sometimes include links to other websites which are not within our control. Once you have left our website/marketing email message, we cannot be held responsible for the content of other websites or the protection and privacy of any information which you provide to those websites. You should exercise caution and look at the privacy statement applicable to the website in question.

10. Contact details

If you have any questions about this Privacy Notice or wish to make a complaint or exercise your rights, please contact: Compliance@mubadalacapital.ae

11. Additional jurisdiction-specific information

For individuals located in the United Kingdom and European Economic Area, personal data is processed in accordance with GDPR principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation and integrity.

In accordance with Regulation S-P under the U.S. Securities Act of 1933, we maintain policies and procedures reasonably designed to ensure the security and confidentiality of non-public personal information. We protect such information against anticipated threats or hazards and against unauthorised access or use. We restrict access to personal information to employees and service providers who require such information for legitimate business purposes. We require third parties to maintain appropriate safeguards and confidentiality obligations.

For individuals in ADGM, personal data is processed in accordance with the ADGM Data Protection Regulations. For individuals in Brazil, personal data is processed in accordance with the LGPD.

We may provide additional notices or disclosures where required by applicable law in specific jurisdictions.

12. Notice for California Residents

If you are a California resident, you may have additional rights to your personal information pursuant to the CCPA, as described below. This section supplements the information provided in this Privacy Notice for California residents.

Categories of Personal Information Collected

We may collect the Categories of personal information about you listed in Section 2 above. We collect personal information directly from you and indirectly from you, for example when you interact with our website.

Purposes for Collecting Personal Information

We may collect personal information for the business and commercial purposes listed under Section 3 above.

Personal Information Disclosed for a Business Purpose

We may disclose your personal information for a business purpose to the categories of entities listed Section 4 above.

Your CCPA Consumer Rights

The CCPA provides consumers with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

  • The right to know what personal information the business has collected about you;
  • The right to delete personal information that the business has collected from you, subject to certain exceptions;
  • The right to correct inaccurate personal information that a business maintains about you;
  • The right to opt-out of the sale or sharing of your personal information;
  • If we use or disclose Sensitive Personal Information for certain reasons, the right to limit the use or disclosure of sensitive personal information by the business; however, we do not use or disclose Sensitive Personal Information in a way that would trigger this right.

“Selling” and “Sharing” Personal Information

As defined by the CCPA, we may Sell and Share certain online identifiers for the purposes of analytics or marketing. Specifically, we disclose online identifiers to advertising partners and analytics providers for online analytics and advertising personalization. We do not have actual knowledge that we Sell or Share personal information about consumers under 16 years of age. You have the right to opt-out of Selling and Sharing.

Exercising Your CCPA Rights

To exercise your right to opt-out of Selling and Sharing, please select “decline” in the cookie banner or set your preference for your browser using the Global Privacy Control (“GPC”). Except as described in this Privacy Notice, we will not sell or share personal information about you with an unaffiliated third party.

To exercise your other rights, please submit a verifiable consumer request to us by either:

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. If we cannot verify your identity, we may deny your request.

The verifiable consumer request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.