Privacy Policy
Overview
This privacy policy (“Privacy Policy”) explains how Titanbay Ireland Limited (“Titanbay”, “we”, “us” or “our”), collects, uses, shares and otherwise processes your Personal Data (defined below) in connection with your relationship with us in accordance with applicable data privacy laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the General Data Protection Regulation (“GDPR”). Unless you are otherwise advised via any other documentation or notification received from us or our affiliates, we shall be the Data Controller in respect of the personal data described in this Privacy Policy, meaning we determine the means and purposes of processing the Personal Data.
The information set out herein applies to the personal information (also known as “Personal Data”) that we collect about you when you visit our website and/or access our online portal.
What is Personal Data?
The term “Personal Data” as used in this Privacy Policy means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by reference to an identifier. This definition provides for a wide range of personal identifiers which may constitute Personal Data, including name, date of birth, residential address, identification number, location data or online identifier. Personal Data does not include data from which you can no longer be identified such as anonymised aggregate data.
Cookies
What are cookies and how do we use them? Cookies are small text files that can be used by websites to make a user's experience more efficient. This website and our platform use cookies which are unique to your web browser. They will contain some anonymous information such as a unique identifier and some digits and numbers.
Performance cookies will only be used on our website (www.titanbay.com) if you consent to them through our cookie banner. A condition of use of our platform is that cookies will be placed to record usage, to analyse the user experience and enable optimisation of the service.
How to change or delete cookies? If you want to restrict or block the cookies set by our website, you can do so through the cookie banner or through your browser settings. Alternatively, you can visit www.internetcookies.com which contains comprehensive information on how to do this on a wide variety of browsers and devices. You will find general information about cookies and details on how to delete cookies from your device.
How do we collect personal data and what kind of information do we collect?
A detailed description of why and on what legal basis we process Personal Data, and the types of Personal Data we process for each purpose, is set out below (see “Detailed Description of Processing”).
General browsing will utilise cookies as outlined above. In the event you open an account with us, fill out a “contact us” form on our website or subscribe to our newsletter, the kinds of Personal Data we may collect include information such as:
- your contact details (such as your address, email address and telephone number) and other information such as your job title. In most cases, we will collect the Personal Data directly from you but may also obtain it from other sources;
- personal details, such as name, gender, date and place of birth, occupation, address, email address, phone numbers, identity documents, financial information and other contact details information;
- other materials we may need for our identification and compliance obligations as well as information from third party providers who assist us to combat fraud, money laundering and other crimes;
- complaints or disputes you may have had with us or other members of the group and details of the underlying transaction (where applicable);
- sales and marketing information;
- financial information and transactions records;
- records of correspondence and other communications between you and your representatives;
- information that we need to support our regulatory obligations; and
- any other information you asked and authorised us to collect for or about you.
What do we do with your data?
We may use automated decision making in processing your Personal Data, subject to the GDPR requirements in relation to the same. We may assess certain characteristics on the basis of Personal Data processed automatically (profiling), in particular to provide you with information on our products and services or those of our affiliates and business partners. We may also use technologies that allow identifying the level of risks linked to the activity within your investment portfolio. You can request a manual review of the accuracy of the automated decision.
We may aggregate and/or de-identify any information collected so that such information can no longer be linked to you or your device or is otherwise no longer Personal Data per the meaning of the GDPR. We may use such information for any purpose subject to applicable law, including without limitation for research and marketing purposes, and may also share such data with any third parties, including advertisers, partners, and sponsors.
We will process your Personal Data if and to the extent applicable law provides us with a lawful basis to do so. Therefore, we will only process your Personal Data on the following grounds:
- Consent — you have consented to us using your data;
- Contract — we need it to perform the contract we have entered into with you;
- Legal Obligation — we need it to comply with a legal obligation; or
- Legitimate Interest — we (or a third party with whom we work with) have a legitimate interest which is not overridden by your interests or fundamental rights and freedoms. Legitimate interest may include the provision of services by us, administrative or operational processes within Titanbay and certain direct marketing activities.
Please note that we may use or disclose Personal Data if we are required by law to do so or if we reasonably believe that use or disclosure is necessary to protect our rights and/or to comply with judicial or regulatory proceedings, a court order or other legal process.
Detailed Description of Processing
| Purpose of Processing | Categories of Personal Data Processed | Legal Basis for Processing |
|---|---|---|
| To communicate with, pay funds to, keep records for, contract with, and provide services to investors (including prospective investors, collectively “Investors”), vendors, partners, or other contacts; to perform marketing and research services for Investors; to perform background screening of Investors, investment partners, and prospective/current/retired/ex-employees; to perform employment decisions and screenings of prospective employees; to perform employee recruiting; to authenticate users; and to meet relevant regulatory requirements. | Contact Information including name, telephone number, address, email address, and signature. | Legitimate interest; Performance of contract; Legal compliance; Consent (where applicable); Employment (where applicable). |
| To perform background screening of Investors, investment partners, and prospective/current/retired/ex-employees. | Employment Information including title/role, institution/company, location, compensation, work history, and qualification/training. | Legitimate interest; Legal compliance; Performance of contract; Consent (where applicable). |
| To perform fund/subscription processes, accounts, records, marketing, and onboarding services for Investors; to perform background screening of Investors, investment partners, and prospective/current/retired/ex-employees; to meet relevant regulatory requirements; and to communicate with, pay funds to, keep records for, contract with, and provide services to Investors, vendors, and employees. | Account/Financial Information including Contact Information, date of birth, bank account information, wire transfer information, expense details, beneficiary designation, Investor commitments, ledgers, positions, balances, percentages of fund, credit information, investment history, net worth, source of wealth, employment history, personal financial portfolio, education history and share or option numbers, values, and vesting. | Legitimate interest; Performance of contract; Legal compliance; Employment (where applicable). |
| To perform marketing and research services for Investors; to perform background screening of Investors, investment partners, and prospective/current/retired/ex-employees; to meet relevant regulatory and legal requirements; to comply with tax requirements; and to accept/process funds from, pay funds to, keep records for, contract with, and provide services to Investors, partners and employees. | Government Identification Information including taxpayer identification number, date of birth, driver's license, passport, other official government identification and numbers, legal work status, and Know Your Client (“KYC”) details. | Legitimate interest; Performance of contract; Legal compliance; Consent (where applicable); Employment (where applicable). |
| To meet relevant regulatory requirements; and to perform background screening of Investors, investment partners, and prospective/current/retired/ex-employees. | Certification Information including business partners or employee certification/accreditation details, conflicts information, approvals, registrations, licenses, and consents. | Legitimate interest; Legal compliance; Consent (where applicable); Employment (where applicable). |
| To secure physical and digital access control, electronic communications, and electronic asset management; to perform marketing and research services for Investors; and to perform investment presentations. | Identification Information including photo, log-ins, dial-ins, and codes. | Legitimate interest; Employment. |
Information Collected Automatically
As is true of most digital platforms, we may gather certain information automatically when you use our services online. This information may include browser, device, cookie and similar data that we collect as follows:
| Purposes of Processing | Categories of Personal Data Processed | Legal Basis for Processing |
|---|---|---|
| To maintain the security of Titanbay services, for fraud detection, and to protect Titanbay's rights; and to manage Titanbay services and email messages and to collect and track information about user activities online over time and across different websites and social media channels. | Internet or other electronic network activity including IP addresses, browser type, internet service provider, referring/exit pages, operating system, date/time stamp, and clickstream data. | Legitimate Interests. |
| To manage Titanbay services and email messages and to collect and track information about user activities online over time and across different websites and social media channels to personalise content. | Cookies, Analytics and Related Technologies. | Legitimate Interests; Consent (where applicable). |
| To offer certain location-based services, such as delivering marketing that is location-relevant, and to conduct analytics to improve Titanbay services. | Location Information including latitude, longitude, date, and time (the precision of this data varies greatly and is determined by factors controlled by your device or mobile service provider). | Legitimate Interests; Consent (where applicable). |
| To authenticate users; to secure digital access control for employees; and to perform recordkeeping and tracking in enterprise and storage software for employees. | Access Control Information including user names, email address, IP address, and location pings. | Legitimate Interests. |
Information we may need from you
What might we need from you? We may need to request specific information from you to help us confirm your identity and ensure your right of access to your Personal Data (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
Accuracy of information. It is important that the Personal Data we hold about you is accurate and current. Please let us know promptly if your Personal Data changes during your relationship with us.
What if you do not provide the Personal Data we request? It is in your sole discretion to provide Personal Data to us. If you do not provide us with all or some of the Personal Data we request, we may not be able to send you information about us (e.g. marketing materials), accept an engagement from you to provide all or some of our services or, to enter into a contract with you.
Change of purpose and anonymisation. We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason which is compatible with the original purpose. If we need to use your Personal Data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. In some circumstances we may anonymise your Personal Data so that it can no longer be associated with you, in which case it is no longer Personal Data.
With whom will we share your information?
When using your Personal Data for the purposes and on the legal basis described above we may share your Personal Data with other service providers we work with. This includes but may not be limited to, other entities within the Titanbay group of companies. We may also have to share your Personal Data with regulators, public institutions, courts or other third parties.
| Category of Recipients | Personal Data Shared | Purposes for which the Personal Data is Shared |
|---|---|---|
| Customers, Suppliers, Service Providers, Vendors, Other Commercial Entities | Contact Information; Account/Financial Information; Government Identification Information; Identification Information. | To enable us to carry out the obligations under and enforce our contracts with our customers, suppliers, service providers, vendors and other commercial entities. |
| Service Providers, Agents | Contact Information; Account/Financial Information; Government Identification Information; Identification Information; Certification Information. | To anyone providing a service to us or acting as our agent, as data processors, or for the purposes of providing services to us and on the understanding that they will keep the personal data confidential and only process it in accordance with our instructions and the GDPR. |
| Auditors, Legal Advisors, Other Advisors | Contact Information; Account/Financial Information; Certification Information. | Where we need to share personal data with our auditors, legal and other advisors. |
| Regulatory bodies | Employment Information; Certification Information; Government Identification Information. | Where we are required or requested to share information with a regulatory or oversight body. |
For the purposes described above, from time-to-time, we may have to transfer your Personal Data from the European Economic Area (EEA) to a third party outside of the EEA and in a jurisdiction not being subject to an adequacy decision of the European Commission. Details of any such jurisdictions are set out in the Appendix hereto, which may be updated from time to time. In such cases, we will always ensure that there is a legal basis and a relevant safeguard method for such data transfer so that your Personal Data is treated in a manner that is consistent with and respects the EU laws and other applicable laws and regulations on data protection.
Disclosure of Personal Information to Affiliates. Titanbay may share Personal Data with its affiliates to the extent necessary or appropriate for such affiliates to perform services for your benefit, provided that such affiliates will be obligated to keep such personal information confidential to the same extent as Titanbay.
Third Parties
The website may, from time to time, include links to third-party websites or enable individuals the opportunity to disclose information directly to third parties. This Privacy Policy does not apply to such third-party websites or organisations. You assume all privacy, security, and other risks associated with providing any data, including personal information, to third parties via the website. For a description of the privacy protections associated with providing information to third parties, you should refer to the privacy statements, if any, provided by those third parties.
Third Parties: Analytics. This website and the Titanbay platform use Cookiebot, Google Analytics and Heap Analytics to understand how our website and platform are used, so we can improve performance. These tools may use first- and third-party cookies to collect usage data like page views and device information. Cookiebot helps manage your consent in line with GDPR. Data is used for analytics only, and we do not sell or profile your data. Information is processed securely by our providers and not shared further.
Your rights in relation to your information
You have rights as an individual which you can exercise under certain circumstances in relation to your Personal Data that we hold. These rights are to:
- request access to your Personal Data (commonly known as a “data subject access request”) and request certain information in relation to its processing;
- request rectification of your Personal Data;
- request the erasure of your Personal Data;
- request the restriction of processing of your Personal Data;
- object to the processing of your Personal Data where we are relying on our legitimate interest(s) (or those of a third party) as a lawful basis for such processing;
- request the transfer of your Personal Data to another organisation, or directly to you, under certain conditions; and
- not be subject to solely automated decision making, including profiling, which produces a legal effect or other similarly significant effect on you. This right is subject to certain restrictions and safeguards, and does not apply where the decision is (a) necessary for entering into or performance of a contract with you or (b) authorised by EU or member state law or (c) based on your explicit consent.
You also have the right to make a complaint at any time to the Data Protection Commission using the contact form at forms.dataprotection.ie/contact. You also have the right to make a complaint via your local national data protection regulator.
If you wish to receive a copy of personally identifiable data we store about you, this can be made available on request. Once we have verified your identity, we will supply you with a digital record of all your personal data as soon as we can, but in any event, it will be within one calendar month.
We will not charge you for supplying copies of your personal data in the first instance. However, in the event we find data subject access requests to be manifestly unfounded or excessive, particularly where repetitive, we will need to consider the effort required to handle such requests and charge a reasonable administrative fee.
Right to withdraw consent
In case you have provided your consent to the collection, processing and transfer of your Personal Data, you have the right to fully or partly withdraw your consent (which will not affect the lawfulness of any processing done before the consent was withdrawn). Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there are compelling legitimate grounds for further processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. In case we processed your Personal Data for direct marketing purposes, you have the right to object at any time, in which case we will no longer process your Personal Data for such marketing purposes.
How long will we retain your information?
We will only retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected and processed, including for the purposes of satisfying any legal, regulatory, accounting or reporting requirements, or to enforce our terms and conditions or for the protection of our rights in the context of legal claims, litigation, arbitration or similar proceedings.
To determine the appropriate retention period for your Personal Data, we will consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymise your Personal Data so that it can no longer be associated with you, in which case it is no longer Personal Data.
Upon expiry of the applicable retention period we will securely destroy your Personal Data in accordance with applicable laws and regulations.
Changes to this Privacy Policy
Titanbay reserves the right to update this Privacy Policy at any time, and we will make an updated copy available on our website.
Further information
In our capacity as data controllers for this website, if you have any queries, questions, concerns or require any further information in relation to the Privacy Policy or you wish to exercise any of your rights, please do not hesitate to contact us at compliance@titanbay.com.
We endeavour to respond to all legitimate requests within one calendar month. Occasionally it may take us longer than one calendar month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated and endeavour to respond to your request as soon as reasonably practicable.
Appendix
Jurisdictions outside of the EEA not being subject to an adequacy decision of the European Commission to which your data may be transferred:
- None.