Privacy Policy

Data Controller

For personal data processed through this website and direct institutional enquiries, the data controller is Arqom Global Ltd, registration number HE 480654, with registered office at Kyriakou Matsi 295, 2682 Paliometocho, Nicosia, Cyprus.

Privacy enquiries and requests may be sent to legal@arqomglobal.com.

Personal Data We May Process

Depending on how a person interacts with Arqom Global Ltd, we may process identification and contact details, professional role, company information, correspondence, enquiry details, technical logs, security information and records required to assess or administer a proposed engagement.

The initial website enquiry channel must not be used to submit passports, bank statements, proof of funds, account credentials, special-category data or other highly sensitive KYC documentation unless an approved secure channel has first been provided.

Purposes and Legal Bases

Personal data may be processed to respond to enquiries, assess potential engagements, communicate with authorised representatives, maintain security, prevent fraud, comply with legal obligations, establish or defend legal claims and manage legitimate business records.

Depending on the circumstances, processing may be based on steps requested before entering into a contract, performance of a contract, compliance with legal obligations, legitimate interests or consent where consent is the appropriate legal basis.

Recipients and International Transfers

Data may be disclosed on a need-to-know basis to authorised personnel, professional advisers, technology and hosting providers, compliance service providers, prospective contractual counterparties and competent authorities where legally required.

Where data is transferred outside the European Economic Area, Arqom Global Ltd will use an applicable lawful transfer mechanism and proportionate safeguards where required.

Retention and Security

Data is retained only for as long as reasonably necessary for the relevant purpose, legal obligations, risk management, dispute resolution and record-keeping. Retention periods vary according to the nature and status of the enquiry or engagement.

Reasonable technical and organisational safeguards are used, but no internet transmission or storage system can be guaranteed to be completely secure.

Data Subject Rights

Subject to the GDPR and applicable Cyprus law, individuals may have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where processing is based on consent. Rights may be limited where an exemption or competing legal obligation applies.

A complaint may be lodged with the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

Cookies and Similar Technologies

The website should use only technologies necessary for security, delivery and core operation unless a separate consent mechanism is implemented for optional analytics, advertising or similar technologies.

If optional cookies or analytics are introduced, this policy and the website consent controls must be updated before those technologies are activated.

Changes to This Policy

This policy may be updated to reflect changes in processing, technology, law or business operations. The effective date shown on the page identifies the current version.