Privacy Policy

1. Introduction

McOrven Group (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website mcorvengroup.com or engage with our business incorporation, consultancy, and relocation services.

We comply with the Gibraltar Data Protection Act 2004 and the EU General Data Protection Regulation (GDPR). By using our website, you consent to the practices described in this policy.

2. Information We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, company name, job title.
• Contact Data: Email address, phone number, physical address.
• Service Data: Information about the services you inquire about or engage us for, including company formation details, business plans, and financial information.
• Technical Data: IP address, browser type, operating system, referring URLs, and browsing behaviour on our website.
• Communication Data: Records of correspondence via our contact form, email, or phone.

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and manage our company incorporation, consultancy, and relocation services.
• To respond to your enquiries and communicate with you about our services.
• To comply with legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• To improve our website, services, and customer experience.
• To send you relevant information about our services, with your consent.

We will only process your personal data where we have a lawful basis to do so, such as your consent, contractual necessity, legal obligation, or legitimate business interest.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service Providers: Trusted third parties who assist us in operating our website and delivering our services (e.g., hosting providers, email services).
• Regulatory Authorities: Government bodies, regulators, and law enforcement agencies where required by law.
• Professional Advisers: Lawyers, accountants, and auditors as necessary for our business operations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

5. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device. We use essential cookies for site functionality and analytics cookies to understand how visitors interact with our website. You can control cookie preferences through your browser settings.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Client records are typically retained for a minimum of six years following the conclusion of our business relationship, in accordance with Gibraltar regulatory requirements.

7. Your Rights

Under the GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete data.
• Erasure: Request deletion of your data in certain circumstances.
• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, please contact us using the details below.

8. International Transfers

As a global business consultancy, we may transfer your data to countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, to protect your data to the standard required by GDPR.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of electronic storage or transmission over the internet is 100% secure.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: