Privacy

Privacy Policy

Last updated: September 2026

01Data Controller

This Privacy Policy explains how INVICTA collects, uses, and protects personal data submitted through this website, in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection law. INVICTA acts as the data controller for personal data submitted through this website. Enquiries regarding this policy may be directed to privacy@invictacx.com.

02Information We Collect

Where you submit an enquiry through our Request an Introduction form, we collect the information you provide directly, which may include your full name, role, organisation, industry, mandate type, and message content. We do not collect data through cookies, analytics, or tracking technologies of any kind.

03How We Use Your Information

Personal data submitted through this website is used solely to assess, respond to, and — where a mandate proceeds — administer your enquiry. We do not use submitted data for marketing purposes without separate, explicit consent.

04Legal Basis for Processing

We process personal data on the basis of legitimate interest in responding to enquiries, and, where an engagement proceeds, on the basis of contractual necessity.

05Data Sharing

We do not sell, rent, or trade personal data. Information is shared with third parties only where necessary to progress a mandate, and exclusively under formalised non-disclosure agreements with Tier-1 regulated institutions or professional entities directly engaged by, or on behalf of, the client.

06International Transfers

Given INVICTA's cross-border operations, personal data may be processed in jurisdictions outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place consistent with GDPR requirements.

07Data Retention

Personal data submitted through this website is retained only for as long as necessary to address the enquiry, or for the duration of an active mandate, and is deleted or anonymised thereafter unless a longer retention period is required by law.

08Cookies

This website does not use cookies, analytics, or third-party tracking scripts.

09Your Rights

Subject to applicable law, you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

10Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, or loss.

11Changes to This Policy

This Privacy Policy may be updated periodically. Material changes will be reflected on this page with an updated revision date.

12Contact

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact privacy@invictacx.com.