This page is a summary prepared for a redesign concept. It does not replace Ctrl Alt's current privacy policy, and it needs legal review before publication.
Who is responsible for your data
Four Ctrl Alt entities may handle personal data, depending on the service you use:
- Ctrl Alt Ltd, England and Wales, company no. 16547640, 86-90 Paul Street, London, England, EC2A 4NE
- Ctrl Alt Technologies Limited, Ireland, Companies Registration Office no. 737431
- Ctrl Alt Corporate Services Limited, Guernsey, registration no. 78152
- Ctrl Alt Solutions DMCC, Dubai, company no. DMCC199928
Which entity is the controller of your data, alone or jointly, has to be confirmed for each service and is not decided in this summary. Until a dedicated privacy address is confirmed, send data-protection questions and requests to [email protected].
The regulator and reference number of each entity are on the page of licences and regulatory disclosures.
What we collect and why
Personal data reaches Ctrl Alt from three sources. They are described in general terms here and must be checked against the firm's current policy.
- Enquiries. The enquiry form asks for your name, organisation, work email, area of interest and message. They are used to answer you and to pass the enquiry to the entity that should reply.
- Onboarding. Regulated firms must identify their clients. Onboarding therefore involves identity, verification and client-classification information about the client and the people who act for it.
- Website logs. A web server records technical data such as IP address, browser type and the pages requested. It is used to keep the site secure and working.
This prototype sets no analytics or advertising cookies and loads no third-party scripts. The consent tool on the live site is outside the scope of this concept.
Sharing, retention and your rights
The three statements below are general and need checking against the firm's current policy before publication.
- Sharing. Personal data may be shared between Ctrl Alt entities, with service providers that help deliver a service, and with regulators or other authorities where the law requires it.
- Retention. Data is kept for as long as its purpose requires, including the record-keeping periods that financial regulation sets for client records.
- Your rights. Depending on where you are and which entity holds your data, the law may give you the right to see, correct or delete it, to restrict or object to its use, and to complain to a data-protection authority.
The Dubai entity publishes a Data Privacy Policy as a PDF on the live site. It was not opened for this draft, so nothing here restates it.
To use one of these rights, write to the address above or use the contact details for the entity you deal with. If you are unhappy with how a request was handled, follow the complaints procedure. Use of the site itself is covered by the website terms of use.