Privacy Policy

1. Data we collect

Account and contact details; identity and verification documents (passport, proof of address); business and financial information you submit; messages and documents exchanged through the platform; and technical data such as log and device information.

2. How we use it

To provide and administer your engagement; to perform identity, source-of-funds and sanctions screening; to communicate with you; to meet legal, regulatory and accounting obligations; and to secure and improve the platform.

3. Legal bases

We rely on performance of a contract, compliance with legal obligations, your consent (where applicable), and our legitimate interests in operating and securing the service.

4. Storage & security

Your account, application and documents are stored on our server in Ireland, in the EU, encrypted in transit and at rest. Document files are held under AES-256 encryption and every access is logged. We apply role-based access controls.

Some of the service providers listed under Sharing may process limited data outside the EU; see International transfers.

5. Sharing

We share data only as needed to deliver your engagement: with regulated third parties (e.g. banks, registries), screening providers, and professional advisers, each under appropriate confidentiality and data-processing terms. We do not sell your data.

We also use these service providers: Amazon Web Services, which hosts the platform in Ireland; Resend, which delivers our emails; WhatsApp, if you choose to contact us there; and Google and Meta, for website analytics and advertising measurement, only if you accept cookies.

6. Retention

We keep the records of an engagement for at least 5 years after it ends, as the law requires, and then delete or anonymise them. If you do not go ahead after an enquiry, we delete your details sooner, on request or once they are no longer needed.

7. Your rights

Subject to law, you may access, correct, export or request deletion of your data, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us using the details below.

8. International transfers

Where data is transferred outside the EU/EEA, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

9. Contact

For privacy questions or to exercise your rights, contact ORO Corporate Services Ltd at info@orocorporateservices.com. You also have the right to lodge a complaint with the Commissioner for Personal Data Protection in Cyprus.