Legal
Privacy Notice
This notice explains how Grey Rock Capital Limited ("we", "us") collects and uses personal data when you visit this website or contact us. We are the data controller for the purposes of the Gibraltar General Data Protection Regulation and the Data Protection Act 2004.
Who we are
Grey Rock Capital Limited, a company registered in Gibraltar with its registered office at 14 Governor's Lane, Gibraltar GX11 1AA. Email: info@greyrockcapital.co.uk.
What we collect
- Information you give us through the enquiry form or by email: your name, company, email address, telephone number and the details of your requirement.
- Information we gather if an enquiry proceeds: company and ownership information, identification documents, financial information and other material required to assess a facility and to meet our legal obligations.
- Basic technical information generated when you visit the site, such as IP address and browser type, held in standard server logs.
Why we use it
- To respond to your enquiry and assess whether we can assist (taking steps at your request prior to entering into a contract).
- To carry out customer due diligence and comply with our obligations under the Proceeds of Crime Act 2015 and related Gibraltar anti-money-laundering legislation (legal obligation).
- To administer facilities we provide and to keep records (performance of a contract and legitimate interests).
- To operate and secure this website (legitimate interests).
Sharing
We may share personal data with our professional advisers, with identity verification and screening providers, with other companies in the Grey Rock group, and with regulators, courts or law enforcement where required by law. We do not sell personal data.
International transfers
Where data is transferred outside Gibraltar, the United Kingdom or the European Economic Area, we rely on adequacy decisions or appropriate safeguards such as standard contractual clauses.
Retention
Enquiry data that does not proceed is deleted within twelve months. Records relating to customer due diligence and facilities are retained for at least five years after the relationship ends, as required by law, and otherwise for as long as needed to establish, exercise or defend legal claims.
Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability, subject to legal exceptions. To exercise these rights, email info@greyrockcapital.co.uk. You may also complain to the Gibraltar Regulatory Authority, the supervisory authority for data protection in Gibraltar.
Cookies
This website does not set advertising or analytics cookies. Any cookies used are strictly necessary for the site to function.
Changes
We may update this notice from time to time. The date below shows when it was last revised.