Privacy Policy

Last updated: May 12, 2026

Introduction

Investcor Corporate Ltd, hereinafter “InvestCor”, “we”, “us”, or “our”, respects your right to privacy and processes your personal information with care. This Privacy Policy describes how we collect, use, share, store, safeguard or otherwise process the information we hold about you when you visit our website www.investcor.group, or any other sites redirected here, use our services, or interact with us via SMS, email, or other channels.

This policy applies to all clients engaging with our services. We are committed to ensuring your privacy.

In a nutshell:

We never resell your personal information or share it without your consent unless necessary to provide our services.
You own your data and can delete your profile and information at any time.
We apply strict technical and organizational measures to ensure your data remains safe.

By accessing the Site or using InvestCor’s services, you consent to the practices described in this policy. If you do not agree, please do not use the Site or our services.

In our everyday activities we process data concerning individuals, mainly:

Clients
Website visitors
Partners
Employees

Investcor Corporate Ltd applies safeguards as found in the Data Protection Standards, which are equivalent in compliance to the General Data Protection Regulation 2016/679 E.U. GDPR, Law 125(I)/2018, and other relevant European, national, and third-country legislation concerning the protection of personal data and electronic communications.

The data is collected for specific, explicit, and lawful purposes and is not further processed in a way incompatible with our purposes.
We collect only the necessary personal data for all processing purposes and process it lawfully, fairly, and transparently.
We ensure that your data is as accurate and up to date as possible and retain it only for as long as necessary, or as required by applicable legislation.

Changes to this Policy

We may update this Privacy Policy from time to time without prior notice. Any revised policy will be effective immediately upon being posted on the Site. You are encouraged to review these terms periodically to stay informed of any changes.

We may choose, but are not obliged, to notify you through our platform or by email. Continued use of the Services constitutes your agreement to the updated policy.

What Personal Data Do We Process and For What Purpose?

We collect data either directly from you, through forms, registrations, and consultations, automatically via cookies, analytics tools, and platform usage, or from third parties such as custodians and public sources, with appropriate permissions.

1. Data We Collect Automatically Through Our Website

We collect the following categories of information:

Personal Information

Name, email address, phone number, mailing address, company name, position, social media links, photos, financial details such as asset information and risk preferences, and account credentials.

SMS, WhatsApp, and Text Messaging Data

This includes mobile phone number, consent status, message content, delivery status, and interaction data such as opt-in and opt-out timestamps when you sign up for alerts, updates, or notifications.

We use your mobile number only to deliver transactional or service-related messages, such as risk alerts. Message frequency varies. Message and data rates may apply.

Critical A2P Statement: No mobile information, including phone numbers or SMS opt-in consent data, will be shared with any third parties or affiliates for marketing or promotional purposes. SMS consent and opt-in data will not be shared except as necessary with providers of the text messaging services.

Opt-Out of SMS: Reply STOP to any message or contact us. You will receive a confirmation.

Usage and Technical Data

This includes IP address, browser type, device information, approximate location data, and analytics on how you interact with the Site and platform.

Other Information

This includes details provided during consultations, risk assessments, or scenario planning.

We do not knowingly collect sensitive personal data, such as racial or ethnic origin or health data, unless required for specific advisory services and with your explicit consent.

The InvestCor website uses SSL, Secure Sockets Layer, which encrypts data exchanged between devices by establishing a secure connection over the internet.

When you visit our Site, our server collects log files, including:

Internet protocol address when you sign in to the Site
Date and time of entry to the Site
The volume of data sent in bytes
The browser and operating system used
Other information about websites visited and information searched for

The legal basis for collecting and retaining log file data is our legitimate interest in ensuring the security of networks, information, and services against accidental, illegal, or malicious actions that may affect the availability, authenticity, integrity, and confidentiality of stored or transmitted data, as well as our legal obligation to provide a secure environment for processing personal data.

This data will not be transferred or used in any other way. However, we reserve the right to check server logs if specific indications of unauthorized use occur.

Some information may be collected using cookies and similar tracking technology. For more information, please see the “Cookies and Similar Technologies” section below.

2. Clients and Interested Parties

Serving You as a Client

When you apply for our services, we may ask you to provide detailed personal information including identity, nationality, contact, socio-demographic, financial, preference, and documentary data.

The purpose of collecting this data is:

Setting up your account
Onboarding you as a client
Enabling us to provide you with a service

The legal basis for this processing is the performance of a contract between us and compliance with our legal obligations.

For the provision of our services, we process identity, contact, nationality, financial, demographic, transactional, contractual, technical, usage, and communications data in order to:

Deliver and personalize our bespoke services, including ongoing monitoring, risk analysis, structure reviews, and scenario war-gaming
Create and manage your account and profile
Assess your profile before and during our relationship with you
Communicate via email, SMS, or other channels regarding queries, support, alerts, opportunities, notifications, complaints, or platform updates
Manage risk for us and our customers
Conduct our business efficiently and carry out audits
Improve our platform, conduct analytics, and ensure security
Comply with applicable laws, regulations, and regulatory guidance
Facilitate payments and funds transfers
Enable contact sharing and notifications
Personalize AI-generated tasks or reports, if activated

The legal basis for this processing is the performance of a contract between us, our legitimate interest in managing risk and conducting our business efficiently, and compliance with our legal obligations.

We may also process identity, nationality, financial, demographic, transactional, contractual, technical, and usage data to prevent, detect, and report fraud or other financial crime. The legal basis for this processing is compliance with our legal obligations and safeguarding public interest.

Automated Decision-Making and Profiling

In some instances, our use of your personal information may result in automated decisions being taken, including profiling, that legally affect you or similarly significantly affect you.

We may apply automated decisions at account opening, where we check that you qualify for the services or products offered and, where applicable, that these services and products are appropriate for you based on the information you provide to us or the methodology we use in providing or delivering a service.

When we make an automated decision about you, you have the right to contest the decision, express your point of view, and request a human review of the decision. You may be required to prove your identity for us to service you.

Newsletter, Webinar, Community, or Promotional Events

If you subscribe to a newsletter, webinar, or community, we collect your name and email address to keep you up to date with news and global developments we deem relevant to you or the services we provide. The legal basis for this processing is your consent, and you may unsubscribe at any time.

When you register for a promotional or educational event, we collect your name, nationality, and contact data to provide more information about relevant global developments, financial markets, risk-related topics, InvestCor, and the possibility of offering you our services.

3. Data We Collect by Email

When you communicate with us by email, we collect your name, email address, and any other information you provide to us. This data is stored and used exclusively to respond to your request. The legal basis for this processing is your consent and the retention period is five years.

4. Data We Collect Through Social Media

We take reasonable security measures, including technical, organizational, and physical safeguards, to ensure the security of data processing through social media, such as limiting who has access to account management.

InvestCor, its subsidiaries, associated companies, or affiliated companies are not responsible for the way social networking platforms process your data. We recommend that you review their own privacy policies.

5. Advisors, Affiliates, Suppliers, and Vendors’ Data

In order to perform contracts between us, we process data provided by our suppliers, such as name, nationality, contact details, TIN, VAT number, bank account, IBAN, and contractual and financial data.

The legal basis for this processing is the performance of a contract between us and compliance with regulatory, tax, and other legal obligations. We maintain this data for up to seven years from the last provision of services, or as long as required by tax or other relevant legislation.

6. CV Data

If you submit your CV to us by mail, email, or another platform link, you consent for InvestCor to process your personal data for the sole purpose of evaluating your qualifications and skills for any position within the company for which you may be suitable.

The legal basis for this processing is your consent. Your CV data will be deleted after three years unless you update it by submitting new or supplementary data.

7. Legal Claims

We may process strictly necessary data for the establishment, exercise, or defense of legal claims. The legal basis for this processing is our legitimate interests.

Who Has Access to Your Data? Data Transfers

Your data is processed electronically and manually in accordance with procedures and practices related to the purposes above. It is only accessible by authorized personnel who process personal data for the performance of their duties and are bound by confidentiality obligations.

Your data may be communicated to third parties who provide services to us, such as auditing, consulting, platform SaaS, IT, and cloud services, and who act as Data Processors authorized to process personal data on our behalf. These recipients receive only the data necessary for the respective services they provide and process your data only for the purposes stated above and in accordance with data protection laws.

We do not sell your personal information. We may disclose your personal information to the following categories of recipients:

Third-party service providers, professional advisors, custodians, and partners who provide data processing services to us, such as website functionality, auditing, trading platform, IT and cloud services, hosting such as Microsoft Azure, email delivery such as Mailchimp and Mandrill, AI text generation such as OpenAI, and analytics such as Google Analytics
Competent law enforcement bodies, regulatory authorities, or government agencies where disclosure is obligatory
Courts, judicial authorities, or other third parties where disclosure is necessary to establish, exercise, or defend legal rights
Competent authorities or other third parties to protect your vital interests or those of another person
Any other person where you have consented to the disclosure

Other than the above, data will not be disclosed to third parties, individuals, or legal entities and will not be disseminated.

Where possible, we apply equivalent compliance safeguards for data transfers outside the EU, similar to the safeguards set out in Articles 44 and following of the GDPR, including standard contractual clauses approved by the European Commission or transfers to countries considered safe by the European Commission.

How Does InvestCor Keep Your Personal Data Secure?

We use reasonable and appropriate technical, organizational, and physical safeguards to protect the personal information we collect and process about you. Although no system is completely secure, the measures we use are designed to provide a level of security appropriate to the risk of processing your personal information.

In particular, we:

Hold personal information in secure facilities and, where held electronically, on secure servers
Use encrypted transmission links whenever possible
Use safeguards such as firewalls, authentication systems, passwords, and access control mechanisms to prevent unauthorized access to systems and data
Regularly review our information collection, storage, and processing practices, including physical security measures
Restrict access to personal information to employees, contractors, and agents who need to know that information to process it on our behalf and who are subject to strict contractual confidentiality obligations
Adopt and implement Information Security Policies and Business Continuity Plans

Data Retention

We retain your personal information for as long as necessary to carry out the purposes set out in this Privacy Policy, or as long as required by law.

In all cases, the retention period is determined based on relevant legal requirements and the principle of data minimization. You may delete your account at any time to remove your data permanently.

Rights of the Data Subjects

You may contact us at any time by sending a written request to:

InvestCor Corporate Ltd

39 Themistoklis Dervis Str, Office 102

Nicosia, 1066, Cyprus

Email: customer.experience.team@investcor.group

You may exercise your rights under GDPR, POPIA, DPA, PIPL, CCPA, or other similar laws, including:

Right of access and information
Right to rectification of inaccurate and incomplete data
Right to erasure of data, where permitted by law and technically possible
Right to restriction of processing
Right to object, including to informative correspondence
Right to withdraw consent, without affecting the lawfulness of processing before withdrawal
Right not to be subject to an automated individual decision, including profiling
Right to opt out of SMS by replying STOP to any message or contacting us

Please note that you may be required to prove your identity for us to service your request.

You may also submit complaints to the Cyprus Information Commissioner’s Office:

Iasonos 1, 1082 Nicosia, Cyprus

P.O. Box 23378, 1682 Nicosia, Cyprus

Tel: +357 22818456

Email: commissioner@dataprotection.gov.cy

Cookies and Similar Technologies

Like most websites, we use cookies and similar technologies when you access and browse our website to make your visit as comfortable and effective as possible.

Cookies are small text files stored on the hard disk of the computer or other electronic device used to access the Site. Cookies are unique to each browser and contain anonymized information relating to the websites you visit and the devices you use.

Types of Cookies We Use

a) Technical and Functionality Cookies

These cookies are required for the basic functionality of our website, application, and any platform. They are necessary for you to browse our website and access its various sections. The basic web services of the website are not possible without these cookies.

b) Statistical Analysis and Performance Cookies

These cookies are used with your explicit consent. They collect information about how you use our website, such as the site from which your visit originated, the pages you visit most often, and the browser you use.

We use these cookies to analyze traffic and improve website performance. They collect aggregated, anonymous statistical information that cannot lead to visitor identification. You can manage your preferences via your browser.

About Google Analytics

We use Google Analytics to record traffic and improve our website. Google Analytics uses cookies to store certain information, such as length of visit, browser used, visit origin, and visit frequency.

To access this data, we allow Google Analytics to place cookies on the hard disk of the visitor’s computer or electronic device. Google Analytics is owned by Google Inc.

You can block Google Analytics data collection by installing the browser add-on available here: https://tools.google.com/dlpage/gaoptout

c) Commercial Promotion and Targeted Advertising Cookies

We use cookies, usually third-party cookies such as Google, to display personalized advertisements tailored to your preferences. A unique ID may identify information such as your IP address, browser, ads viewed, whether you accessed a webpage through an ad, and your geographic location.

You may reject the installation of these cookies so that the ads shown to you are not personalized.

Cookie Management

You may decide to accept all or part of the cookies when you visit our website. You may also configure your browser to notify you when cookies are being set and choose whether to accept or block them.

Each browser manages cookie settings differently. This is described in the Help menu of each browser, including Internet Explorer, Firefox, Chrome, Safari, and Opera.

Please note that you need to adjust cookie settings separately in each browser and on each device you use. Limiting cookies may prevent you from fully using some of our services and may limit our ability to improve and personalize your website experience.

You can find more information about cookies at: www.allaboutcookies.org and www.youronlinechoices.eu.

You may also disable the use of third-party cookies via the relevant Network Advertising Initiative service.