Effective Date: 5 October 2026
Elaris Corporate Services (“Elaris”, “we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you interact with us, request our services, or communicate with our team.
By submitting an enquiry or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Elaris Corporate Services is a specialist provider of international corporate formation, regulatory advisory, and AML/compliance services. As a data controller, we determine the purposes and means by which personal data is processed in connection with the provision of our services.
For all privacy matters, you may contact our Data Protection Officer at: privacy@elariscorporate.com
2. Personal Data We Collect
We collect and process the following categories of personal data:
2.1 Information You Provide Directly
- Full name and title
- Corporate email address and business address
- Company name, type, and jurisdiction of operation
- Nature of the services you are enquiring about
- Correspondence and communications sent to us
2.2 Know Your Customer (KYC) and Due Diligence Data
As a regulated corporate services provider, we are legally required to collect and verify identity documentation. This may include:
- Government-issued identification documents (passport, national identity card)
- Proof of address
- Source of funds and source of wealth documentation
- Corporate structure charts and beneficial ownership information
- Politically exposed person (PEP) status declarations
2.3 Technical Data
- IP address and browser type (collected automatically when you visit our website)
- Pages visited and time spent on our website
- Referring website or search terms used to find us
3. How We Use Your Personal Data
We process personal data for the following purposes:
- Provision of services: to carry out corporate formation, regulatory filing, compliance advisory, and related services you have engaged us for
- Client onboarding and KYC: to fulfil our legal obligations under anti-money laundering and counter-terrorism financing legislation
- Communication: to respond to your enquiries, provide updates on engagements, and send service-related notices
- Legal compliance: to comply with applicable laws, regulations, court orders, and requests from regulatory and governmental authorities
- Service improvement: to analyse how our website is used and improve the quality of our services
4. Legal Basis for Processing
We process personal data on the following legal grounds under the General Data Protection Regulation (GDPR) and applicable data protection laws:
- Contract: processing is necessary for the performance of a contract with you or to take steps at your request prior to entering a contract
- Legal obligation: processing is necessary to comply with applicable AML, regulatory, and reporting obligations
- Legitimate interests: processing is necessary for our legitimate business interests, including responding to enquiries and improving our services, provided these interests are not overridden by your rights
- Consent: where you have given explicit consent for specific processing activities, such as receiving commercial communications
5. International Data Transfers
Elaris Corporate Services operates across multiple jurisdictions. In delivering our services, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions issued by the relevant data protection authority
- Binding Corporate Rules where applicable
6. Disclosure of Personal Data
We do not sell, rent, or trade personal data. We may disclose your information in the following circumstances:
- Regulatory authorities: company registries, financial intelligence units, and other governmental bodies as required by law
- Professional advisers: lawyers, accountants, bankers, and auditors engaged under obligations of professional confidentiality
- Service providers: third-party providers who assist us in delivering our services (e.g., secure document management, compliance screening), subject to contractual data protection obligations
- Legal proceedings: where disclosure is required by applicable law, court order, or to protect the rights and interests of Elaris or third parties
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. In particular:
- Client files and KYC documentation are retained for a minimum of five (5) years following the end of the client relationship, in accordance with applicable AML legislation
- Enquiry and correspondence records are retained for three (3) years from the date of last contact
- Website analytics data is retained for a maximum of twenty-six (26) months
These periods may be extended where required by law or for the resolution of disputes.
8. Cookies
Our website uses essential cookies necessary for basic site functionality. We do not use third-party advertising or tracking cookies. You may configure your browser to refuse cookies, though this may affect your ability to use certain features of our website. We do not use session recording or behavioural profiling tools.
9. Your Data Protection Rights
Subject to applicable law and certain exceptions, you have the following rights with respect to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your personal data where we no longer have a legal basis to retain it
- Right to restriction: to request that we restrict processing in certain circumstances
- Right to data portability: to receive your personal data in a structured, commonly used format
- Right to object: to object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at privacy@elariscorporate.com. We will respond within thirty (30) days. You also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.
10. Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include encrypted communications, access controls, and regular security assessments. While we take all reasonable precautions, no transmission over the internet or electronic storage system can be guaranteed to be completely secure.
11. Third-Party Links
Our website may contain links to external websites operated by third parties. This Privacy Policy applies only to Elaris Corporate Services. We are not responsible for the privacy practices of third-party websites and encourage you to review their respective privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. We will post the revised policy with an updated effective date. Continued use of our services following any material changes constitutes your acknowledgement of the updated policy.
13. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please contact:
Data Protection Officer
Elaris Corporate Services
privacy@elariscorporate.com