INTRODUCTION
This notice is to provide you with information on our use of your personal data in accordance with the Data Protection Law, 2017 (the "DPL") of the Cayman Islands.
WHY PERSONAL DATA IS COLLECTED
To ensure that we and our Corporate Clients comply with all relevant legal and regulatory requirements, including those relating to money laundering, bribery, corruption, tax evasion and sanctions.
TYPES OF PERSONAL DATA COLLECTED AND USED
We will collect your personal information only where we are legally permitted to do so, and only to the extent that it is appropriate and necessary to comply with regulatory requirements or requests from other regulatory bodies or agencies. The information we may collect will fall into the following categories:
- Contact Details: Name, Address (business and/or residential), Phone number, Email address
- Know Your Client (KYC): Date of birth, Passport number, Place of birth / nationality, Photographs, Copies of identification documents,
HOW PERSONAL DATA IS COLLECTED
We strive to collect your personal information directly from you, or another person on your behalf, wherever possible. However, we may also obtain it from third parties or independent sources such as publicly accessible websites, databases, registers, tax authorities or regulatory bodies, news articles, and social media.
IS YOUR PERSONAL INFORMATION SHARED
We will share your information with other recipients only to the extent it is appropriate and necessary to do so. The types of recipients may include:
- Providers of background checks and risk screening services (databases on financial crime, sanctions, fraud, etc.)
- Those who support our business operations such as IT providers, insurers, accountants, auditors, etc.
- Our mutual corporate clients
- Government agencies, police, regulators (including the Cayman Islands Monetary Authority), courts, etc. with whom we are legally obliged to do so.
- Due to the international nature of our business, it may be required to transfer your personal information to another jurisdiction that may or may not have the equivalent protections in place for protection of your information as is under the DPL. In either case, we will process your information as per the requirements of the DPL.
RETENTION OF YOUR PERSONAL INFORMATION
Your personal information will be retained for the length of our client relationship plus a minimum of 5 years thereafter. Where there has been a report of suspicious activity or we are aware of a continuing investigation involving you, the personal information will be held until confirmation is received from the appropriate authority that the matter has been concluded.
SECURITY OF YOUR PERSONAL INFORMATION
Protecting your personal data is a priority. Therefore, we have taken several measures to mitigate security risks. These include technical computer, server, and email policies and safeguards which are updated regularly. We have secured files and building premises.
In the unlikely event of a breach of security relating to your personal information, we will notify you in accordance with the requirements of the DPL and take the necessary steps to mitigate the consequences of such a breach.
ADDITIONAL INFORMATION REGARDING YOUR RIGHTS UNDER THE DPL
For additional information, please contact us info@gfm.ky
For additional information regarding your rights under the DPL, please contact the Cayman Islands Ombudsman: P.O. Box 2252, Grand Cayman KY1-1107, Cayman Islands https://ombudsman.ky/data-protection