Privacy Policy

Introduction

GCP Asset Management Ltd ("GCP", "we", "us", or "our"), an OM24 Group company registered in Mauritius, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website gcp-assetmanagement.com, use our services, or communicate with us. By using our website and services, you consent to the practices described in this policy.

What Data We Collect

We may collect the following categories of personal information:

How We Use Your Data

We use the information we collect for the following purposes:

• To respond to your enquiries and provide the services you have requested
• To communicate with you about our investment management and advisory services
• To improve our website, services, and user experience
• To analyse website traffic and usage patterns (with your consent)
• To comply with legal and regulatory obligations applicable in Mauritius and other relevant jurisdictions
• To protect the security and integrity of our website and services

Third-Party Services

We use the following third-party services that may process your data:

Cookies

Our website uses cookies to enhance your experience. We categorise cookies as follows:

You can manage your cookie preferences at any time via the cookie settings option on our website.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by applicable laws and regulations. Contact form submissions are retained for a period of 24 months unless a longer retention period is required or permitted by law. Analytics data is retained according to Google Analytics' default data retention settings.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption to secure data in transit. While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access — Request a copy of the personal data we hold about you
• Right to Rectification — Request correction of inaccurate or incomplete personal data
• Right to Erasure — Request deletion of your personal data, subject to legal obligations
• Right to Restrict Processing — Request that we limit how we use your data
• Right to Data Portability — Request your data in a structured, machine-readable format
• Right to Object — Object to the processing of your personal data for certain purposes
• Right to Withdraw Consent — Withdraw your consent to analytics cookies at any time via our cookie settings

International Data Transfers

As part of the OM24 Group operating across multiple jurisdictions, your data may be transferred to and processed in countries outside of your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Contact Us About Your Data

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about how we handle your personal information, please contact us:

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any material changes will be posted on this page with an updated revision date. We encourage you to review this Privacy Policy periodically.