Privacy Policy

1. Information We Collect

We collect personal information in the following ways:

• Information you provide. Name, email address, organisation, role, investor status, message content, and any other details you submit through the Investor Access form, the Contact form, or by emailing us.
• Technical information. IP address, browser type, device information, referring URL, and timestamps collected automatically when you interact with the Site.
• Analytics events. Anonymised interaction events (for example, form submission counts) used to measure and improve the Site.

2. How We Use Information

• Respond to enquiries and requests you submit.
• Send updates about funds, lending programmes, and private placement notices you have requested.
• Assess eligibility of prospective investors and counterparties.
• Operate, secure, and improve the Site.
• Comply with legal, regulatory, tax, and audit obligations.
• Detect, prevent, and address fraud, abuse, and security incidents.

We do not sell personal information, and we do not use it for third-party advertising.

3. Legal Bases (EEA / UK)

Where the GDPR or UK GDPR applies, we process personal information on the basis of: your consent (for example, when you submit the Investor Access form); our legitimate interests in operating and improving the business; the performance of a contract or steps taken at your request; and compliance with legal obligations.

4. Sharing & Disclosure

We share personal information only as needed with: (a) service providers who host, secure, and operate the Site and our communications infrastructure under confidentiality obligations; (b) professional advisers, including legal, compliance, tax, and audit firms; (c) regulators, courts, and law-enforcement authorities where required by law; and (d) counterparties as part of due diligence on a specific transaction, only with appropriate safeguards.

5. International Transfers

Personal information may be processed in jurisdictions outside your country of residence. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect the information.

6. Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, including to meet legal, regulatory, tax, accounting, or reporting requirements. When information is no longer needed, we securely delete or anonymise it.

7. Security

We apply administrative, technical, and organisational measures designed to protect personal information from unauthorised access, disclosure, alteration, or loss. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies & Analytics

The Site uses a minimal set of cookies and local storage required for essential functionality and privacy-friendly analytics. You can control cookies through your browser settings; disabling them may affect Site functionality.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at private@arsenale.capital.

10. Children

The Site is not directed to individuals under 18, and we do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be indicated on this page.

12. Contact

For privacy questions or requests, contact private@arsenale.capital.