Privacy Policy

For the purposes of this Policy, the following terms shall have the meanings set out below:

Personal Data:

Any information relating to an identified or identifiable natural person, including but not limited to name, email address, telephone number, IP address, or any other unique identifier.

Processing:

Any operation performed on Personal Data, whether automated or manual, including collection, recording, organisation, storage, alteration, retrieval, use, disclosure, deletion, or destruction.

Data Controller:

The InvestLibya platform, which determines the purposes and means of processing Personal Data.

Data Processor:

Any third party that processes Personal Data on behalf of InvestLibya.

Site:

The InvestLibya web portal at investlibya.ly and all associated pages and subdomains.

User:

Any natural or legal person who accesses or uses the Site.

InvestLibya is the Data Controller responsible for this Site. We operate in compliance with Libyan legislation and established international data protection standards.

You can contact our data protection team via:

• Email: info@investlibya.ly
• Location: Tripoli, Libya

If you have any questions about how your Personal Data is processed, please contact us directly at the email address above.

We collect two principal categories of data:

a. Voluntarily Provided Data

When you submit contact forms, investment inquiry requests, or subscribe to our communications, we may collect: full name, email address, phone number, company name and sector, country of residence or nationality, intended investment sector, indicative investment size, and any details you include in your message.

b. Technical & Automatically Collected Data

When you visit the Site, technical data is automatically collected including: IP address, browser type and version, operating system, pages visited, date and time of access, session duration, referring source, and cookie identifiers. We use Google Analytics to analyse usage patterns in an aggregated, anonymised statistical form.

c. Data from External Sources

We may receive data from government partners or international institutions such as the World Bank or FDI promotion initiatives, to the extent relevant to delivering our services. We do not purchase personal data lists from commercial data brokers.

We process your Personal Data on the following legal bases in accordance with Libyan Law No. 5 of 2022 and GDPR principles:

Consent:

Where you voluntarily submit your data through contact or subscription forms, this constitutes explicit consent to processing for the specified purposes.

Legitimate Interests:

We process certain technical data for site security, performance optimisation, and institutional reporting, based on our legitimate interests as an investment promotion authority.

Legal Obligation:

Government or regulatory disclosure requirements may necessitate processing under applicable Libyan regulatory frameworks.

Contract or Pre-Contract:

Where you request our services or seek to engage with InvestLibya, processing your data is necessary to proceed with pre-contractual steps or fulfil contractual obligations.

We use the Personal Data we collect solely for the following purposes:

• Responding to your investment inquiries and directing you to appropriate sectors and opportunities
• Sending economic reports, statistics, and updates you have requested
• Facilitating your communication with relevant Libyan government entities
• Improving Site performance and user experience based on aggregated analytics data
• Preparing anonymised, statistical institutional reports on investment activity
• Complying with applicable legal and regulatory obligations under Libyan law
• Detecting, investigating, and preventing any fraudulent or abusive use of the Site

We will not use your data for commercial marketing purposes without obtaining your prior explicit consent.

We do not sell or trade your Personal Data to any commercial third party. We may disclose your data only in the following limited circumstances:

Libyan Government Authorities:

We may share your information with the National Oil Corporation (NOC), the Libyan Investment Authority (LIA), and relevant ministries, solely to the extent necessary to facilitate your investment inquiry.

Technical Service Providers:

We may share technical data with trusted service providers (such as hosting platforms and analytics services) who are contractually bound to protect your data and not use it for independent purposes.

Legal Obligation:

We may disclose your data where required by applicable law, court order, or a formal request from a competent regulatory authority.

Protection of Rights:

We may disclose data where necessary to protect InvestLibya's legal rights, property, the safety of its team, users, or the public.

In the event of a data breach affecting your Personal Data, we will notify you as promptly as practicable in accordance with applicable legal frameworks.

Operating the Site may require your data to be transferred to servers located outside Libya, including EU member states, the United States, or the MENA region. When doing so, we ensure appropriate contractual safeguards are in place in accordance with Standard Contractual Clauses (SCCs) or internationally recognised protection frameworks. Your data will not be transferred to countries lacking an adequate level of legal protection without equivalent safeguards.

The Site uses cookies and similar technologies. These are categorised as follows:

Strictly Necessary Cookies:

Essential for the proper functioning of the Site and its core features. These cannot be disabled without affecting Site functionality.

Analytical Cookies:

We use Google Analytics (gtag.js) to collect aggregated, anonymised data on how visitors browse the Site. You may decline or opt out via the consent banner or Google Analytics opt-out link.

Functional Cookies:

Remember your preferences such as language selection (Arabic/English) to enhance your experience.

Marketing Cookies:

We do not currently use cookies for paid advertising or retargeting.

You may manage your cookie preferences at any time through your browser settings or via the consent banner displayed on your first visit to the Site.

We do not retain your Personal Data for longer than necessary for the purposes for which it was collected, applying the following principles:

• Contact form data and investment inquiries: retained for 3 years from the date of last contact.
• Technical data and session logs: retained for 13 months in accordance with standard Google Analytics parameters.
• Data related to legal correspondence or disputes: retained for the duration necessary to resolve the dispute or 7 years, whichever is longer.
• Newsletter subscription data: retained until unsubscription or 2 years from last interaction.

Upon expiry of the retention period, data is securely deleted or anonymised.

Data subjects enjoy the following rights under Libyan Law No. 5 of 2022 and GDPR principles:

Right of Access:

You have the right to request a copy of the Personal Data we hold about you.

Right to Rectification:

You have the right to request correction of any inaccurate or incomplete data.

Right to Erasure ('Right to be Forgotten'):

You have the right to request deletion of your data where it is no longer necessary for the purposes for which it was collected, subject to applicable legal obligations.

Right to Restriction:

You have the right to request restriction of processing in specific circumstances, such as where you contest the accuracy of data or object to its processing.

Right to Data Portability:

You have the right to receive your data in a structured, machine-readable format and to transfer it to another processor where technically feasible.

Right to Object:

You have the right to object to processing based on legitimate interests.

Right to Withdraw Consent:

You may withdraw consent at any time, without affecting the lawfulness of prior processing based on that consent.

To exercise any of these rights, please contact us at info@investlibya.ly. We will endeavour to respond within 30 days of receipt of your request.

This Site is directed exclusively at investors and adult audiences. We do not knowingly collect any Personal Data from persons under the age of 18. If we discover we have inadvertently collected data from a child without the knowledge or consent of a legal guardian, we will take immediate steps to delete such data. If you are a legal guardian and believe your child has submitted data to our Site, please contact us immediately.

We implement rigorous technical and organisational measures to protect your Personal Data, specifically including:

• SSL/TLS encryption of all communications and data in transit
• Server security protocols and firewalls
• Access restriction policies on a need-to-know basis
• Periodic security reviews of digital infrastructure
• Defined incident response plans for data breach scenarios

While we strive diligently to protect your data, no transmission of data over the internet can be guaranteed entirely secure. Accordingly, any information you send to us is transmitted at your own risk.

The Site may contain links to external websites such as the National Oil Corporation, Libyan Investment Authority, Misrata Free Zone Authority, and others. InvestLibya bears no responsibility for the privacy practices or content of these external sites. We advise you to review the privacy policies of any external site before submitting your Personal Data to it.

We reserve the right to amend this Policy at any time. Any material changes will be reflected in the "Last Updated" date at the top of this page. In the event of changes that materially affect your rights, we will endeavour to notify you by appropriate means such as a prominent notice on the Site or by email where we hold your address. You are encouraged to review this Policy periodically for any updates. Your continued use of the Site following amendments constitutes acceptance of the updated Policy.

For any queries or complaints relating to this Policy or the processing of your Personal Data, please contact us at:

• Email: info@investlibya.ly
• Entity: InvestLibya, Tripoli, Libya

If you believe our processing of your data violates your legal rights, you have the right to file a formal complaint with the competent supervisory authority in your country. For investors from EU member states, you are entitled to lodge a complaint with your local Data Protection Authority under the GDPR.