Privacy Notice — Investor Enquiries

Who is responsible

The data controller for the processing described in this notice is:

ConnectPoint is the trading name of ConnectPoint Capital Ltd. We have a related company, ConnectPoint Limited (registration no. 01011554, Ras Al Khaimah, United Arab Emirates). Where that company processes personal data for its own purposes, it does so as a separate controller and this notice does not cover it.

We have not appointed a Data Protection Officer. We are not required to.

What we collect, and when

When you submit an access request we collect your full name, your email address, and anything you choose to write in the free-text field.

If you subscribe to updates we collect your email address.

If you use "Check your status" we use the email address you submitted to look up your enquiry.

Only if you proceed further — and only after we have invited you — we collect what the next stage requires: a signed investor statement, information needed to confirm your eligibility, identity verification, and a signed non-disclosure agreement. We tell you what is needed at each step before you provide it. Completing the enquiry form does not start this process.

Please do not send us more than we ask for. The enquiry form needs a name, an email address and a sentence or two. It does not need your passport, your date of birth, your home address, your financial details or your health information. If you send information we have not asked for, we will delete it.

Why we use it, and our lawful basis

Where we rely on legitimate interests, we have considered your interests and rights, and we have limited what we collect to what the purpose needs. You can object — see Your rights.

Your right to object

Who else sees it

We do not sell personal information and we do not share it for third-party advertising.

We use service providers who process information on our instructions: our website and email hosting and server provider, our e-signature provider, our identity-verification provider (if you reach that stage), and our professional advisers — a solicitor and an accountant — where advice requires it. They are bound by contract to use the information only for the service they provide to us.

Our engineering team is in Bangladesh and, in the course of building and maintaining this website, technical staff there may have access to systems that contain enquiry data. They work under written confidentiality obligations and their access is limited to what their work requires.

We may also disclose information where the law requires it.

Access from outside the UK

ConnectPoint Capital Ltd is registered in the United Kingdom, and our director works from the United Arab Emirates. Personal data submitted through this website is therefore accessed from outside the UK. It is stored on a server we operate, hosted by Amazon Web Services in Mumbai, India. Some of the software we use also stores data outside the UK.

Our engineering team is in Bangladesh, and technical staff there may have access to that server in the course of building and maintaining this website. They work under written confidentiality obligations and their access is limited to what their work requires.

India, Bangladesh and the United Arab Emirates are not covered by a United Kingdom adequacy decision. We are documenting the safeguards that apply to that access. If you would like to know the current position for your own data, write to [email protected] and we will tell you.

If you would prefer your details were not stored outside the United Kingdom, write to [email protected] and we will handle your enquiry by correspondence only.

How long we keep it

Automated decisions

We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not profile you for this purpose. Every enquiry is read by a person. If an identity check returns an unsuccessful or inconclusive result, a person reviews it and you can ask for an alternative route.

Your rights

Under UK data protection law you may ask us for a copy of the personal information we hold about you, ask us to correct it or delete it, ask us to restrict how we use it, object to our use of it — including where we rely on legitimate interests — and ask for it in a portable form where that applies. Where we rely on your consent, you may withdraw it at any time.

Some of these rights have limits. We may need to keep certain records even after a request to delete, where company law, tax law or financial-promotion rules require it. If that applies to your request we will tell you which records we are keeping and why.

Write to [email protected]. We will respond within one month. If your request is complex or you have made several, we may extend that by up to two further months, and we will tell you if we do. There is no charge in the ordinary case.

If you are not satisfied with our response you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live. We would rather you raised it with us first, but you do not have to.

Security

Information is encrypted in transit and at rest. Access is limited to the people who need it. Privileged access requires multi-factor authentication. We keep records of access to enquiry data.

Changes

If we change how we use your information we will update this notice and change the date at the top. Where a change is significant and we hold your email address, we will tell you where it is practicable to do so.

Contact

Privacy questions and requests, and to stop receiving messages from us: [email protected]