Legal

Privacy Policy

Last updated 19 June 2026

This is a template provided for the platform and is not legal advice. Review and adapt with qualified counsel before relying on it.

This Policy explains how ORO Corporate Services Ltd collects, uses and protects your personal data when you use the platform. We act as data controller and process data in line with the EU GDPR.

1. Data we collect

Account and contact details; identity and verification documents (passport, proof of address); business and financial information you submit; messages and documents exchanged through the platform; and technical data such as log and device information.

2. How we use it

To provide and administer your engagement; to perform identity, source-of-funds and sanctions screening; to communicate with you; to meet legal, regulatory and accounting obligations; and to secure and improve the platform.

3. Legal bases

We rely on performance of a contract, compliance with legal obligations, your consent (where applicable), and our legitimate interests in operating and securing the service.

4. Storage & security

All data, including identity documents, is encrypted at rest and in transit and stored within the EU. Document files are held under AES-256 encryption and access is logged. We apply role-based access controls.

5. Sharing

We share data only as needed to deliver your engagement: with regulated third parties (e.g. banks, registries), screening providers, and professional advisers, each under appropriate confidentiality and data-processing terms. We do not sell your data.

6. Retention

We retain records for as long as required to provide the service and to satisfy legal and regulatory retention periods (typically several years after an engagement ends), after which data is deleted or anonymised.

7. Your rights

Subject to law, you may access, correct, export or request deletion of your data, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us using the details below.

8. International transfers

Where data is transferred outside the EU/EEA, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.

9. Contact

For privacy questions or to exercise your rights, contact ORO Corporate Services Ltd at info@orocorporateservices.com. You also have the right to lodge a complaint with the Cyprus data-protection authority.


Questions about this document? Contact ORO Corporate Services Ltd at info@orocorporateservices.com.