PROJECT INFORMATION
Privacy Policy
How this informational website works, what that means for your privacy, and the limits of this policy.
Last updated: 2026-10-12
1. This version of the website
Capital Allocation Lab is a free informational website introducing an independent research project and linking to its YouTube channel. This policy concerns that website. Research tools described elsewhere on the site are plans, not available services.
This version has no registration, accounts, payment processing, subscriptions, newsletter, contact forms, portfolio inputs or AI chat. It does not ask visitors to submit investment information, and it has no feature that sends visitor submissions to an AI service.
2. Operator and privacy contact
Capital Allocation Lab is operated and published by TokLis Solutions FZE LLC.
For general, legal or privacy enquiries, email contact@toklis.solutions.
Address: BLA-BR3-1188 – Ajman Boulevard Commercial, Ajman, United Arab Emirates. Company licence number: 5710. This company licence is not presented as an authorisation to provide regulated financial services.
3. Technical information needed to serve pages
When you open a page, the services delivering it process connection and request information, including the IP address needed to send it to your browser. Hosting and proxy systems may also record technical information about requests.
To deliver pages, the web server handles your IP address, requested address and request headers, which can include browser information. Routine access logging is disabled for this website. Warning and error records may include timestamps, client IP addresses, request paths or query strings, and diagnostic details. Connection or TLS errors occurring before a website is selected may also appear in the server’s general error log. The server also records service diagnostics and firewall security events, which can include network addresses, ports and packet metadata.
4. Information you choose to send by email
If you email the published contact address, TokLis Solutions FZE LLC receives the address and name shown by your email service, your message, any attachments you include and the technical information accompanying the email. Sending a message is voluntary; it is not necessary to browse this website.
Correspondence is used to read and respond to your question, investigate a reported problem or handle a legal or privacy request. This contact route does not enrol you in a newsletter or request permission for unrelated marketing. Please limit your message to what is needed for your enquiry and do not send passwords, account credentials or detailed portfolio information.
Email for contact@toklis.solutions is provided by Migadu, operated by Migadu-Mail GmbH in Switzerland. Migadu states that its current data centres are in France. These provider statements do not establish the location of every copy, backup or remote access.
An email link opens your email application; it is not an on-site submission form. Your email provider and the operator’s mail services take part in delivery. The service arrangements, retention and transfer information are described below.
6. Purposes and legal basis
The operator is based in the United Arab Emirates. Under the applicable UAE framework, personal data is processed with consent or a specified legal exception. Reading these pages does not give consent to tracking or unrelated marketing.
Technical information is used to deliver requested pages, diagnose failures and protect service operation. Correspondence is used to answer your enquiry or handle a privacy or legal request. Relevant information may also be needed to meet an applicable legal obligation or establish, exercise or defend a legal claim. This website does not use these records for advertising or visitor analytics.
Essential delivery and security processing is limited to providing the free website you request under its terms, relying on the applicable service-contract exception. Voluntary correspondence is handled for the response you request, with consent where required for that specific purpose. The relevant legal-duty or legal-claims exception applies where such processing is necessary and permitted. A passive visit or an email does not provide blanket consent to unrelated processing.
There is no requirement to provide a profile or portfolio to read the website. Network connection information is necessary to deliver a page. The informational website does not use automated decisions or profiling to assess visitors.
7. Hosting, recipients and transfers
The website is served from a server in Germany administered for TokLis Solutions FZE LLC. Hosting and network service providers support delivery and operation of that infrastructure. Migadu separately provides the contact mailbox described above.
The website’s origin server is located in Germany, as confirmed by the operator. The operator is based in the United Arab Emirates; email-provider locations are described above. These locations do not imply that every provider record, backup or remote access is confined to one country.
Information may be accessed by authorised personnel of TokLis Solutions FZE LLC, its server administrators, and the hosting, network or email providers needed to operate the relevant service or handle your request. Relevant information may be disclosed to competent authorities where required by law. The categories above do not give unrelated parties permission to use your messages for their own marketing.
The website’s origin is in Germany. Migadu identifies a Swiss operating company and data centres in France, while TokLis Solutions FZE LLC is based in the UAE. These arrangements involve different countries and do not mean that all copies, support access or backups are confined to the listed locations. Applicable cross-border data-protection requirements continue to apply. Contact the privacy address for information about the relevant service and transfer arrangements.
8. Retention
Messages received at contact@toklis.solutions are deleted from the operator’s mailbox 30 days after receipt. This rule does not promise that any provider backups, delivery records or copies held by your own email service are erased at the same time; those are subject to separate retention arrangements.
The website’s diagnostic error log and general Nginx logs rotate daily when nonempty, keeping up to 14 rotated files plus the current file. Firewall and relevant system-log files rotate weekly when nonempty, keeping up to four rotated files plus the current file. These are file-rotation criteria, not guarantees of deletion after 14 days or four weeks. Service journals are retained according to the host’s storage limits, with no separately configured fixed retention period. Separate provider operational records and any backups follow the provider’s service-retention arrangements and applicable legal requirements. The mailbox and server-log rules do not guarantee deletion of every provider-held copy on the same schedule.
9. Security
The website uses HTTPS to protect page delivery in transit, and server administration requires authenticated access. This version limits the information it asks visitors to provide and avoids accounts, on-site forms and third-party trackers.
No website, network or email service can promise absolute security. Please use the published contact to report a privacy or security concern, providing only the information needed to explain it. This statement does not reduce any security duties imposed by applicable law.
10. Your rights and requests
Subject to applicable UAE law and any mandatory law that also protects you, you may request information about your personal data, correction or erasure, restriction or stopping of processing, or a portable copy where the relevant right applies. The available rights and exceptions depend on the processing and legal basis. If processing relies on consent, you can withdraw it without changing the lawfulness of earlier processing.
You can send a privacy request to contact@toklis.solutions, describing the request and the information needed to identify the relevant correspondence or visit. TokLis Solutions FZE LLC may request proportionate verification where necessary to protect your information. Do not send identity documents unless a need and a suitable method have been explained.
If you believe your data-protection rights have been infringed, you may complain to the competent authority under applicable law. Under the UAE federal personal data framework, complaints may be submitted to the UAE Data Office. Any right to contact another competent authority under a mandatory law that applies to you is preserved.
11. Visiting YouTube
Choosing the link on the YouTube page opens the project’s channel on YouTube in a new tab. You then interact with a separate service whose terms and privacy practices apply. That service may use cookies, account information and other technologies under its own policies.
The external link uses a no-referrer setting. This does not prevent YouTube from receiving the connection information needed for your visit or recognising you through its own services.
12. Changes to this policy
Any future feature that changes how personal data is handled will require a new assessment and appropriate information before it is introduced. Describing planned research capabilities does not mean they are collecting data today.
The date shown with an approved policy identifies that version. It is updated when a revised document is approved, not each time the page is viewed.