Privacy Notice

Version 2.6. Effective 12 October 2026. Replaces version 2.5.

1. Who is responsible for your data

1.1 Konfido Ltd, a company registered in England and Wales under company number 14478524, with its registered office at 30 Welbeck Street, London W1G 8ER, United Kingdom, is the controller of the personal data described in this notice.

1.2 Questions about this notice and requests about your data can be sent to support@konfido.vip, or by post to the registered office, marked for the attention of the Konfido Privacy Contact.

1.3 This notice describes how Konfido processes personal data in connection with the website konfido.vip, the contact form on it and requests made to Konfido through forms on LinkedIn. Once a client relationship is being considered, the processing connected with the assessment, the onboarding, the account and the services is described in the Client Privacy Notice, which Konfido gives before it collects onboarding information, and in the privacy notices of the licensed partners that provide the regulated services.

2. What this website does and does not do

2.1 The website uses privacy-friendly, cookie-free visit statistics that do not identify visitors (for example pages viewed, referring website, country). Konfido does not use advertising pixels or marketing tracking and does not set non-essential cookies.

2.2 The website does not contain a newsletter sign-up and does not ask for marketing consent. Konfido does not send marketing communications to people who use the contact form or a LinkedIn form.

2.3 The client login link leads to the Konfido platform, which is a separate system with its own notice.

2.4 Links to LinkedIn, Instagram and Companies House lead to third-party websites, whose privacy practices are their own.

2.5 Konfido may advertise on LinkedIn. The audience of an advertisement is selected within LinkedIn, using LinkedIn's own tools, for example professional criteria or previous interaction with Konfido's posts and advertisements. The website does not contribute data to this selection, and Konfido does not upload personal data to LinkedIn for advertising purposes. LinkedIn's processing is governed by its own privacy policy.

3. Data collected through the contact form and LinkedIn forms

3.1 When you use the contact form, Konfido collects the information you type in: first name, last name, email address, the type of contact you selected (private client, company or structure, professional adviser), and, depending on that selection, your country of residence, the name and type of the company or structure, its country of incorporation, your firm and role, the countries involved, the flows you expect and the description of your situation.

3.2 The form also records the page from which it was sent and the time of sending.

3.3 Please do not include passwords, account credentials, identity documents or confidential supporting documents in the form. Documents are requested only once a conversation has started, through the channel indicated by your point of contact.

3.4 If you write to Konfido by email instead, Konfido processes the content of your message and your email address in the same way as a form submission.

3.5 If you request material from Konfido through a form on LinkedIn, LinkedIn passes to Konfido the details shown in that form, which are your first name, last name and email address, together with the name of the form and of the campaign and the time of the request. Konfido uses them to send you what you requested and to reply to you personally, and processes them in the same way as a contact form submission.

4. Why Konfido uses this data

4.1 To read your request, send you any material you asked for and reply to you in writing.

4.2 To assess whether your situation falls within what Konfido can coordinate, and to prepare the conversation that may follow.

4.3 To keep a record of the correspondence, so that the person who follows your request knows what has already been said.

4.4 To protect the website and the form against abuse.

5. Legal basis

5.1 Where a private individual contacts Konfido about potentially becoming a client, processing necessary to assess and respond to that request is based on steps taken at the individual's request before entering into a contract (UK GDPR and EU GDPR, Article 6(1)(b)).

5.2 Where the person contacting Konfido acts for a company, structure, professional adviser or another person, and for general enquiries and requests made through a LinkedIn form, processing is based on Konfido's legitimate interests under Article 6(1)(f): responding to enquiries, assessing whether Konfido can assist, maintaining an orderly record of correspondence and protecting its systems. You may object to processing based on legitimate interests, as described in section 9.

5.3 Konfido does not ask for your consent through the website. Where consent is needed for a specific purpose in the future, it will be requested separately and can be withdrawn at any time.

6. Who receives the data

6.1 HubSpot. The contact form is operated through HubSpot, which stores the submission in Konfido's customer relationship system. Details received through a LinkedIn form are stored in the same system.

6.1A LinkedIn. When you use a LinkedIn form, LinkedIn collects your details on its platform and makes them available to Konfido. LinkedIn's own processing is governed by its own privacy policy.

6.2 Microsoft. Konfido uses Microsoft 365 for email. The notification of a new form submission and the correspondence that follows are handled through Microsoft 365.

6.3 Website delivery and protection. The provider used to deliver and protect the website processes technical data such as IP addresses in connection with the delivery and security of the website. The provider will be named here once the production hosting is confirmed.

6.3A Visit statistics. Konfido uses GoatCounter to count visits to the website. To produce its statistics, GoatCounter receives technical data sent by your browser, such as IP address, browser type, screen size and the referring page, and keeps only aggregate figures, such as pages viewed, referring website, country, browser and screen size. It does not set cookies and does not store IP addresses.

6.4 Konfido does not sell personal data and does not share it with third parties for their own marketing.

6.5 If a client relationship starts, the data needed for onboarding is shared with the licensed partner that provides the regulated services, under the Client Terms and that partner's own notice. If you were introduced by a professional adviser, Konfido corresponds with that adviser about the request, as agreed with you.

7. International transfers

7.1 Where a supplier or its subprocessors transfer personal data outside the United Kingdom or the EEA, Konfido relies on an applicable adequacy decision, including the Data Privacy Framework where the receiving entity is actively certified and the transfer is covered by that certification, or on contractual safeguards such as the EU Standard Contractual Clauses and the UK Addendum, as applicable.

7.2 You may ask Konfido for information about the safeguards used for a specific transfer.

8. How long the data is kept

8.1 Form submissions, including requests received through a LinkedIn form, and related correspondence are retained for up to twenty-four months after the last meaningful contact, unless a client relationship starts or a longer period is required for the establishment, exercise or defence of legal claims. At the end of that period the data is deleted or anonymised.

8.2 If a client relationship starts, the correspondence becomes part of the client file and is kept for the periods set out in the Client Privacy Notice.

8.3 Technical data processed by the provider that delivers and protects the website is retained for the short periods set by that provider.

8A. Complaints

8A.1 If you make a complaint, Konfido processes your identity and contact details, the content of the complaint, the service involved, the correspondence exchanged, the evidence provided and the outcome.

8A.2 This data is used to record, investigate and respond to the complaint and to identify recurring problems in the way Konfido works.

8A.3 For complaints about the handling of personal data, the processing is necessary to comply with Konfido's legal obligations under data protection law (Article 6(1)(c)). For other complaints, it is based on Konfido's legitimate interests in handling complaints properly and in managing any claim that may follow (Article 6(1)(f)).

8A.4 Where a complaint concerns a regulated service, the relevant licensed partner receives the parts of the complaint it must handle. Konfido may also share complaint records with its professional advisers and, where required, with a competent authority.

8A.5 Complaint records are retained for six years from the final response or the closure of the complaint, and longer where a claim, dispute or investigation is pending or reasonably expected. This is longer than the period for contact form submissions because a complaint may give rise to a claim.

9. Your rights

9.1 You have the right to ask for access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive the data you provided in a portable format, within the limits set by the applicable law.

9.2 To exercise these rights, write to support@konfido.vip. Konfido may ask you to confirm your identity before acting on a request.

9.3 You can complain to Konfido about the way it handles your personal data by email to complaints@konfido.vip. Konfido acknowledges the complaint within five business days, investigates it, keeps you informed and tells you the outcome, as described in the Complaints Procedure.

9.4 You have the right to complain to a supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk). If you live in the European Economic Area or in Switzerland, you may complain to the authority of your country of residence.

10. Automated decisions and children

10.1 Konfido does not take automated decisions about you on the basis of the data collected through the website. Every request is read by a person.

10.2 The website and the contact form are not directed at children. Konfido does not knowingly collect data from anyone under eighteen through the website.

11. Changes to this notice

11.1 Konfido may update this notice when the website or the processing changes. The version and date at the top of this page indicate the current text. Material changes to the way data from the contact form or LinkedIn forms is used will be explained on this page.