Introduction

Vuvale Capital (“we”, “us”, “our”) is committed to protecting your privacy and complying with data protection laws, including the UK GDPR and Data Protection Act 2018. This Policy outlines how we collect, process, share, and safeguard your personal data when you visit our website, engage with our services, or contact us.

Data We Collect

We may collect the following personal data:

• Identifying information: your name, job title, company, contact details (email, phone, address), and professional affiliations.
• Transactional data: communications, investment preferences, KYC/AML documentation.
• Technical data: IP address, browser type, device, cookies and website analytics.

How We Use Your Data

We use your data to:

• Provide information about our services and manage relationships.
• Process applications, investments, and client onboarding (including KYC/AML due diligence).
• Communicate updates, newsletters (if opted in), and event invitations.
• Improve and analyse website use (via cookies and Google Analytics) .
• Comply with legal obligations.

Lawful Bases for Processing

Our legal bases include:

• Performance of a contract or to progress potential relationships.
• Legal obligations such as anti-money laundering and tax compliance.
• Legitimate interests, e.g., marketing, improving services, fraud prevention.
• Consent, where required (e.g., for direct marketing or cookies).

Cookies & Website Analytics

We use cookies and similar technologies to analyse site usage (e.g., via Google Analytics), improve user experience, and facilitate essential functions vuvalecapital.com. You can manage or block cookies via your browser settings.

Data Sharing

We may share personal data with:

• Service providers (e.g., IT, legal, regulatory advisors) under confidentiality terms.
• Regulatory, tax, or law enforcement bodies when required.
• Related corporate entities for internal administration (treated consistently with this Policy).

International Transfers

We may transfer data outside the UK/EU (e.g., if our service providers are located overseas). Transfers are protected by appropriate safeguards like SCCs or adequacy decisions.

Data Retention

We retain personal data for as long as necessary for the stated purposes, and to meet legal and regulatory obligations (e.g., for a minimum of 6 years), after which it is securely destroyed or anonymised.

Your Rights
Under GDPR, you have rights to:

• • Access your personal data.
  • Rectify inaccuracies.
  • Erase data (“right to be forgotten”) in certain cases.
  • Restrict or object to processing.
  • Port your data in a structured, machine-readable format.
  • Withdraw consent at any time.
    To exercise these rights, contact us here. We will respond within one month (or up to three months if complex).

Security Measures

We implement appropriate technical and organisational security controls (e.g., access controls, encryption, secure backups) to protect your data.

Children
Our services are intended for professionals and adult individuals only. We do not knowingly collect data from those under 18.

Changes to this Policy

We may update this Policy from time to time. Changes will be posted on our website with a revised date at the top. Your continued use of our services implies acceptance of the revised Policy.