Privacy Policy

Effective Date: January 1, 2026

Last Updated: January 1, 2026

This Privacy Policy describes how Alba Capital ("we," "us," or "our") collects, uses, discloses, and safeguards your information when you visit our website www.albacapital.com ("Website"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Website.

GDPR Applicability: If you are located in the European Economic Area (EEA), this policy also fulfils our obligations under the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

1. Information We Collect

1.1 Information You Provide Directly

We may collect the following categories of personal data that you voluntarily provide:

• Contact information: name, email address, phone number, postal address
• Inquiry and correspondence data: messages submitted via contact forms or email
• Account credentials: username and password if you register for an account
• Any other information you choose to provide

1.2 Information Collected Automatically

When you access the Website, certain data may be collected automatically:

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visit
• Device data: device identifiers, hardware model, browser language
• Cookie and tracking data: see our Cookie Policy for full details

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Analytics providers (e.g., Google Analytics)
• Social media platforms (if you interact with us via social media)
• Publicly available sources

2. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)): where you have given clear consent to process your data for a specific purpose (e.g., newsletter sign-up, non-essential cookies).
• Contractual necessity (Article 6(1)(b)): where processing is necessary to perform a contract with you or to take steps at your request before entering a contract.
• Legal obligation (Article 6(1)(c)): where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.

Where we rely on consent as the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and maintain the Website
• To respond to enquiries, comments, and requests
• To send administrative and transactional communications
• To send marketing communications where you have opted in
• To improve the Website through analytics and user research
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations and enforce our policies
• To carry out any other purpose for which the information was collected

4. Disclosure of Your Information

4.1 Service Providers

We may share your data with trusted third-party vendors who perform services on our behalf, such as web hosting, analytics, email delivery, and customer support. These parties are contractually obligated to protect your data and may not use it for their own purposes.

4.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Website before your personal data is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., courts, government agencies).

4.4 Protection of Rights

We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to safety, or as evidence in litigation.

4.5 International Transfers (GDPR)

If we transfer your personal data outside the EEA, we ensure an adequate level of protection is in place through one or more of the following safeguards:

• Transfers to countries deemed adequate by the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules where applicable

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data, and applicable legal requirements.

6. Your Rights

6.1 General Rights (All Users)

• Right to know what personal data we hold about you
• Right to opt out of marketing communications at any time
• Right to lodge a complaint with your local data protection authority

6.2 GDPR Rights (EEA Residents)

If you are located in the EEA, you have the following additional rights under the GDPR:

• Right of access (Article 15): obtain a copy of your personal data
• Right to rectification (Article 16): have inaccurate data corrected
• Right to erasure / 'right to be forgotten' (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21): object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making (Article 22)

To exercise any of the above rights, please contact us at privacy@albacapital.com. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

7. Cookies

Our Website uses cookies and similar tracking technologies. For detailed information about the cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please refer to our Cookie Policy.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Website is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of every website you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date above. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

If you are located in the EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your national supervisory authority. A list of EEA supervisory authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en