Privacy Policy

Introduction

globalcrafts SARL ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website or use our services.

This policy applies to all personal data processing activities carried out by globalcrafts in connection with our personal finance optimisation services. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller Information

globalcrafts SARL is the data controller for the purposes of data protection law. Our contact details are:

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website. The data we collect includes:

• Contact Information: Name, email address, phone number, postal address
• Financial Information: Income details, investment preferences, financial goals, risk tolerance
• Professional Information: Employment details, business information, professional qualifications
• Website Usage Data: IP address, browser type, pages visited, time spent on pages, referring websites
• Communication Records: Records of correspondence, meeting notes, consultation details
• Marketing Preferences: Communication preferences and consent records

How We Use Your Information

We use your personal data for the following purposes, based on legitimate interests, contractual necessity, or your consent:

• Service Delivery: To provide personal finance optimisation services and advice
• Client Communication: To respond to enquiries and maintain ongoing client relationships
• Compliance: To meet regulatory requirements and legal obligations
• Website Improvement: To analyse website usage and improve user experience
• Marketing: To send relevant information about our services (with your consent)
• Risk Management: To assess and manage business risks
• Record Keeping: To maintain accurate client records and service history

The legal basis for processing your data includes contract performance, legitimate interests, legal compliance, and consent where applicable.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We may share your personal data with the following categories of recipients:

• Service Providers: IT support, cloud storage, analytics providers
• Professional Advisors: Lawyers, accountants, auditors
• Regulatory Bodies: Financial regulators and authorities as required
• Business Partners: Where necessary for service delivery
• Legal Requirements: Courts, law enforcement, or other authorities when legally required

We ensure that all third parties are subject to appropriate contractual obligations to protect your data and comply with applicable data protection laws.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specific retention periods include:

• Client Records: 7 years after termination of services or as required by regulation
• Marketing Data: Until you withdraw consent or object to processing
• Website Analytics: 26 months for Google Analytics data
• Communication Records: 3-7 years depending on the nature of communication

After the retention period expires, we securely delete or anonymise your personal data in accordance with our data retention schedule.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@globalcrafts.world or +352 27697867. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Staff training on data protection and security
• Secure disposal of data and equipment
• Regular backup and recovery procedures

Contact Information

If you have any questions about this Privacy Policy or our data processing practices, please contact us:

You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD) if you believe we have not handled your personal data in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.