LEGAL

GDPR Compliance Policy

Last updated: 15 May 2026

1. Our Commitment

Furtiva Capital is committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our obligations as a data controller seriously and are committed to handling personal data lawfully, fairly, and transparently.

2. Data Controller

Furtiva Capital acts as the data controller for personal data collected through this website and through direct business communications. For all data protection enquiries, please contact us at [email protected].

3. Lawful Basis for Processing

We process personal data on the following lawful bases: (a) Legitimate Interests — where we have a legitimate business interest in processing your data to respond to your enquiry or conduct our business activities; (b) Consent — where you have explicitly provided consent for a specific processing activity; (c) Legal Obligation — where we are required to process data to comply with a legal obligation.

4. Data Minimisation

We collect only the personal data that is necessary for the specific purpose for which it is collected. We do not collect excessive or irrelevant personal information.

5. Data Subject Rights

Under UK GDPR, you have the following rights: the right to be informed; the right of access; the right to rectification; the right to erasure ('right to be forgotten'); the right to restrict processing; the right to data portability; the right to object; and rights in relation to automated decision-making and profiling. To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within 30 days.

6. International Transfers

Where we transfer personal data outside the UK or European Economic Area, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Data Breaches

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach, and affected individuals where required.

8. Complaints

If you have a complaint about how we handle your personal data, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

9. Policy Review

This GDPR Compliance Policy is reviewed annually and updated as necessary to reflect changes in legislation, guidance, or our business practices.