Information Governance and Privacy Framework

This privacy framework outlines the operational protocols and regulatory compliance standards maintained by BLUEHAVEN CAPITAL PARTNERS regarding the acquisition, management, and safeguarding of personal data on this landing page. In strict alignment with applicable European legislative frameworks governing data protection and digital privacy on this platform as of 2026-09-11, we are dedicated to maintaining the utmost transparency and security across all our digital touchpoints. This document serves to inform prospective clients and website visitors of their statutory rights, the precise mechanisms of information utilization, and the rigorous safeguards implemented to uphold confidentiality. By accessing our services and interacting with this digital interface, you acknowledge the data collection practices detailed herein.

Categories of Collected Data and Acquisition Methods

To deliver our specialized advisory services and optimize your user experience, we collect specific categories of information through direct interactions, automated technologies, and secure communications. The scope of information gathered encompasses the following categories:

• Directly Provided Information: Full legal names, professional titles, corporate affiliations, email addresses designated via [email protected], telephone numbers formatted through 32 485 34 91 02, and specific financial inquiries submitted via our web forms.
• Technical and Device Data: Internet protocol addresses, browser configurations, operating systems, referral sources, interaction timestamps, and general geographic location derived from network routing.
• Behavioral Telemetry: Page navigation paths, duration of session engagements, clickstream data, and interaction metrics with landing page content.

Purposes of Processing and Legal Foundations

The processing of personal information by BLUEHAVEN CAPITAL PARTNERS is strictly bound to legitimate business purposes and supported by robust legal bases recognized under regional regulatory frameworks. We do not process information incompatibly with the initial collection intent. The primary operational objectives include:

• Execution of Pre-Contractual Measures: Processing identifying data to evaluate client eligibility, respond to direct inquiries regarding our financial advisory services, and prepare tailored commercial proposals.
• Consent-Driven Communications: Utilizing contact details provided via [email protected] and 32 485 34 91 02 to transmit periodic financial market updates, analytical insights, and service notifications, subject to explicit opt-in consent.
• Legitimate Interest Optimization: Analyzing behavioral telemetry to enhance website security, debug technical anomalies, and improve the structural usability of our landing page.
• Legal and Regulatory Compliance: Maintaining transactional logs and identity verification records to satisfy mandatory financial auditing and anti-money laundering frameworks.

Data Retention Schedules

Personal information is preserved solely for the duration necessary to fulfill the specific operational purposes for which it was collected, or as mandated by statutory retention periods. In accordance with accountability principles:

• Inquiry and Lead Data: Information submitted via contact forms is retained for a maximum of twenty-four months from the date of last interaction, provided no formal contract is established.
• Contractual Records: Data associated with executed service agreements is archived for a period of ten years following the termination of the business relationship to comply with mandatory financial and tax legislation.
• Technical Telemetry: Log files and anonymous analytics data are automatically purged or anonymized after a rolling period of ninety days.

Third-Party Data Disclosure and Cross-Border Transfers

BLUEHAVEN CAPITAL PARTNERS maintains a strict policy against the commercial monetization of personal data. Information is disclosed to external third parties only under strictly regulated operational necessities:

• Authorized Processors: Trusted technology vendors, cloud storage providers, and customer relationship management platforms that assist in hosting infrastructure and managing communications, bound by rigorous data processing agreements.
• Legal Authorities: Regulatory bodies, law enforcement agencies, or judicial tribunals when disclosure is strictly mandated by applicable regional legislation or court orders.
• Any transfer of information outside the regional economic area is executed exclusively under approved standard contractual clauses or adequacy decisions ensuring equivalent data protection standards.

Security Measures and Infrastructure Protection

We deploy comprehensive administrative, physical, and technical security controls designed to protect personal information against accidental loss, unauthorized alteration, unlawful disclosure, or malicious acquisition. Our defensive posture incorporates:

• Encryption Standards: Deployment of Transport Layer Security (TLS) protocols for data in transit and robust cryptographic algorithms for data at rest within our secure databases.
• Access Control Policies: Enforcement of the principle of least privilege, ensuring that only authorized personnel requiring access for specific operational duties may view personal data.
• Continuous Auditing: Regular vulnerability assessments, penetration testing, and continuous monitoring of our network perimeters located at our administrative base situated at Raveschoot 22, 9080 Lochristi, Belgium.

Data Subject Rights and Exercise Protocols

Individuals retain comprehensive statutory rights regarding their personal data processed through this landing page. You are entitled to exercise the following prerogatives:

• Right of Access: Request formal confirmation as to whether your personal data is being processed, alongside a detailed copy of the data held.
• Right of Rectification: Demand the immediate correction of inaccurate or incomplete personal information currently maintained in our systems.
• Right to Erasure: Request the deletion of personal data when such information is no longer necessary for the purposes for which it was gathered, subject to statutory retention exceptions.
• Right to Restrict or Object: Limit the processing of your data under specific circumstances or withdraw previously granted consent at any time without retroactive penalty.

To formally execute any of the aforementioned rights, or to submit inquiries concerning our data governance practices, please direct your correspondence to our designated privacy office through [email protected] or via postal mail at Raveschoot 22, 9080 Lochristi, Belgium. We commit to responding to all legitimate requests within the legally mandated timeframes.