Privacy Policy

Last updated: 24 February 2026

1. About Us

endl Ltd ("the Company," "we," "us," or "our") (Gate District, DIFC, Precinct Building 4, Level 3, Dubai 23453, UAE) operates goendl.org and the endl account platform. It provides multi-currency corporate accounts, outbound payouts, FX conversion, and corporate card services to global companies and finance teams.

The Company is based in the Dubai International Financial Centre (DIFC). This Privacy Policy follows the DIFC Data Protection Law (DIFC Law No. 5 of 2020) and internationally recognised good-practice data protection standards.

Contact: [email protected] | +971 4 401 2280

2. Data Collected

As a corporate financial services provider, endl mainly collects personal information for account onboarding, transaction execution, and regulatory compliance. The categories are:

• Corporate KYC/KYB data: registration records, certificates of incorporation, beneficial ownership declarations, and certified identification for account signatories and beneficial owners. We collect this data to verify business identity and satisfy anti-money laundering (AML) and counter-financing-of-terrorism (CFT) obligations.
• Account signatory and authorised-user identity data: the full name, birth date, nationality, passport or national ID number, photograph, and contact email of each person authorised to operate a corporate account.
• Business contact data: the registered business email, telephone number, and office address supplied during account registration.
• Transaction data: sender and recipient details, amounts, currency pairs, value dates, SWIFT/BIC codes, and reference numbers created for multi-currency transfers, outbound payouts, FX conversions, and corporate card use.
• Corporate card usage data: cardholder and merchant names, merchant category, amount, date, and currency for every transaction processed through the endl card programme.
• Technical and access data: IP address, browser, operating system, session identifiers, and access times gathered automatically when you use the dashboard or this website.
• Communications: messages sent through our contact form or submitted to our support team.

3. Use of Information

We use the information we hold to:

• Verify and open corporate accounts in line with applicable AML/CFT and KYC/KYB requirements;
• Process and settle multi-currency transfers, outbound payouts, FX conversions, and corporate card transactions for account holders;
• Check transactions against applicable sanctions lists and meet financial crime prevention obligations;
• Secure and manage the endl dashboard and account infrastructure;
• Handle support requests and account enquiries;
• Deliver transaction messages, payment confirmations, and account notices;
• Meet legal and regulatory duties under UAE and DIFC law, including financial services record-keeping requirements;
• Review anonymised and aggregated usage patterns to improve our platform.

We do not sell personal information or use account or transaction data to train machine-learning models without the account holder's explicit written consent.

4. Sharing

We disclose personal information only when needed to deliver services or satisfy legal requirements:

• Payment rail and banking partners: correspondent banks, local payment rail operators, and card networks that process and settle transactions. They receive only data needed for a specific payment.
• KYC/AML service providers: identity-checking and sanctions-screening vendors acting as data processors under written agreements.
• Cloud and infrastructure providers: hosting and security vendors processing data for us under contracts restricting further use.
• Regulatory and law enforcement authorities: when disclosure is required by applicable UAE, DIFC, or international law, or by a binding court or regulatory order.

We do not provide personal information to unaffiliated third parties for their own marketing.

5. Retention

Financial services regulations require certain records to be kept for specified periods. Transaction records and KYC/KYB documents remain for at least five years after account closure or the last transaction, consistent with AML/CFT record-keeping duties under applicable UAE and DIFC law. Contact and communication data is kept as long as needed to manage the relationship and resolve disputes, then deleted or anonymised.

We use administrative, technical, and physical safeguards suited to the sensitivity of the information, including encrypted KYC-document storage, role-based access controls for the dashboard and internal systems, and TLS encryption for data sent between your browser and our infrastructure.

6. Your Rights

Subject to applicable law, account signatories and others whose personal data we hold may have rights to access, correct, or erase it, restrict or object to certain processing, and obtain data portability. These rights may be limited where mandatory legal duties require record retention, including AML/CFT and financial reporting requirements.

For rights requests or questions about data handling, contact [email protected]. The Company normally responds within 30 calendar days; complex or high-volume requests may take longer, and we will notify you before the initial deadline.

7. Cookies

See our Cookie Policy for details of the cookies and similar technologies used on goendl.org and the endl dashboard.

8. Updates and Contact

We may revise this Privacy Policy when our data handling practices change. Material changes will appear as an updated "Last updated" date at the top of this page. We recommend checking this policy periodically.

endl Ltd
Gate District, DIFC, Precinct Building 4, Level 3
Dubai 23453, UAE
Email: [email protected]
Phone: +971 4 401 2280