Appleby (Bermuda) Limited, Appleby BVI, Appleby (Cayman) Ltd., Appleby (Guernsey) LLP, Appleby Hong Kong, Appleby (Isle of Man) LLC, Appleby (Jersey) LLP, Appleby Seychelles and Appleby (JV) Ltd & Cie and its representative office in Shanghai and our affiliated businesses (collectively, “Appleby”) are committed to being a responsible custodian of the information you provide to us and the information we collect in the course of operating our business.
This Privacy Policy describes how Appleby may collect, use, and share information, particularly in association with the operation of our main website (www.applebyglobal.com) and all of our websites, mobile applications, and HTML-formatted emails that link to this Privacy Policy (collectively, “Online Services”).
This Privacy Policy sets out how Appleby may collect, use and share information and describes:
- The types of information, including personal information, we may collect;
- How we may use and share the information we collect;
- The measures we have in place to protect and safely store the information we collect;
- Legal grounds for using personal information;
- Your choices and rights in respect of the information we hold;
- Retention of the information we collect;
- How to contact us;
- Complaints; and
- Changes to this Privacy Policy
The types of information, including personal information, we may collect
We collect your personal information when you provide it to us. “Personal information” is any information that can be used to identify you or that we can link to you as an individual. We may automatically collect certain information when you use, access, or interact with our Online Services. We may also collect information from other sources, such as social media platforms that may share information about how you interact with our social media content.
Information you provide to us voluntarily
Generally, you can use our Online Services without providing us with any personal information.
We collect information that you voluntarily provide to us, including when you communicate with us via email or other channels; when you sign up for or request that we send you our e-alerts, or other legal or marketing materials; when you submit an application for an employment position with us; when you sign up for an event; and when you respond to our communications or requests for information. The information you provide may include your name, contact information, title, and information about the organisation with which you are affiliated. Some of our Online Services may require that you enter a password or other information in order to access certain features, and we collect such credentials when you enter them for the sole purpose of authenticating you with the service, credentials are stored in encrypted form.
Information we may collect from third party sources
We may receive information about you from other sources, including third parties and publicly available information that help us: update, expand, and analyse our records; identify new customers or prevent or detect fraud. We may also receive information about you from social media platforms, including but not limited to, when you interact with us on those platforms or access our social media content. Please note that the information we may receive from those third party sites is governed by the privacy settings, policies, and/or procedures of the applicable platform, and we strongly encourage you to review them before submitting any information to them.
Precise location information
When you access the Online Services via a mobile device, we may collect precise location information if you permit the Online Services to access such information. We use this information to provide you with content based on your location.
How we use the information we may collect
We may use the information we collect:
- To respond to your enquiries;
- To provide you withlegal and other services that you request;
- To operate and improve the OnlineServices;
- To send you e-alerts and other legal updates, marketing communications and other information or materials that may be of interest to you or which you have expressed an interest in receiving;
- To maintain our list of contacts;
- To understand how people use our Online Services, including by generating and analysing statistics;
- For Appleby’s business purposes, including improving the provision of our legal services, data analysis; submitting invoices; detecting, preventing, and responding to actual or potential fraud, illegal activities, or intellectual property infringement;
- To assess the effectiveness of our events, promotional campaigns and publications;
- To evaluate, recruit, and hire personnel; and
- As we believe reasonably necessary or appropriate to: comply with our legal obligations; respond to legal process or requests for information issued by government authorities or other third parties; or protect your, our, or others’ rights.
Legal grounds for using personal information
We rely on the following legal grounds to process personal information, namely:
- Consent – We may use personal information as described in this Privacy Policy subject to your consent. To withdraw your consent to such use, you can contact us via our Contact Us page. Where required by applicable laws, we will rely on your consent for direct marketing and to collect information from your device or computer.
- Performance of a contract – We may need to collect and use personal information to enter into a contract with you or to perform a contract that you have entered into with us. For example, when you engage Appleby to provide legal services we will use your personal information to respond to provide you with such services.
- Legal obligation – We may need to collect and use personal information to comply with legal obligations to which Appleby is subject. This includes undertaking client due diligence and background checks (known as “KYC” or “know your client” checks) as well as all other anti-money laundering or other legal obligations.
- Legitimate interests – We may use your personal information for our legitimate interests to provide legal services and to improve our services. Consistent with our legitimate interests and any choices that we offer or consents that may be required under applicable laws, we may use personal information for our marketing purposes and other technical information as described in this Privacy Policy.
Third party services and content
Our Online Services may include integrated content or links to content provided by third parties (such as video materials). This Privacy Policy does not address the privacy, security, or other practices of the third parties that provide such content.
We engage third parties that support the operation of our Online Services, such as analytics providers. These third parties may use technologies to track your online activities over time and across different websites and online platforms. Please see our Cookies Policy for more information.
Measures we take to protect and safely store the information we collect
Appleby is a global provider of offshore legal services. The Online Services are controlled and operated by Appleby Global Group LLC. We may store or process the information we collect in the jurisdictions in which we operate or in other jurisdictions where we or our service providers have facilities, including but not limited to Bermuda, BVI, Cayman Islands, Guernsey, Hong Kong, Isle of Man, Jersey, Mauritius, Seychelles and Shanghai. There is an adequacy decision by the European Commission (“EC”) in respect of Guernsey, Jersey and the Isle of Man so these jurisdictions are considered to provide an adequate level of protection for your personal information in accordance with European Union standards. This means that the remaining countries to which we transfer your data are not deemed to provide an adequate level of protection for your personal information, or have not yet been assessed for such purposes by the EC.
However, to ensure that your personal information does receive an adequate level of protection we have put in place standard data protection clauses (reflecting the updated SCCs issued by the EU in June 2021) with all members of the Appleby Group or service providers who we may share information with to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the laws on data protection within Guernsey, Jersey and the Isle of Man. If you require further information about this protective measure, please contact us via our Contact Us page.
In addition we deploy administrative, technical, and physical safeguards designed to comply with applicable legal requirements and safeguard the information that we collect. This includes, when required or appropriate and feasible, obtaining written assurances from third parties that may access your data that they will protect the data with safeguards designed to provide a level of protection equivalent to that adopted by Appleby.
However, no information system can be 100% secure. So, we cannot guarantee the absolute security of your information. Moreover, we are not responsible for the security of information you transmit to us over networks that we do not control, including the Internet and wireless networks.
Retention of the information we collect
We retain the information we collect for no longer than is reasonably necessary to fulfil the purposes for which
we collect the information and to comply with our legal obligations.
Your choices and rights
To withdraw your consent to the use of your information as described in this Privacy Policy you can contact us via our Contact Us page. Please note that in some circumstances this may mean that we can no longer provide our services to you. If you no longer wish to receive marketing communications from us, you can also let us know via our Contact Us page. The electronic marketing communications we send you also contain opt-out mechanisms that allow you to opt-out from receiving those communications, update your contact information or change your preferences at any time. We will honour your choice and refrain from sending you such announcements. You may also opt back in to receive those communications at any time.
You have a number of rights in relation to the information that we hold about you. These rights include:
- the right to access information we hold about you and to obtain information about how we process it;
- the right to withdraw your consent to our processing of your information, which you can do at any time.
We may continue to process your information if we have another legitimate reason or legal obligation for doing so;
- in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party;
- the right to request that we rectify your information if it is inaccurate or incomplete;
- in some circumstances, the right to request that we erase your information. We may continue to retain your information if we are entitled or required to retain it;
- the right to request that we restrict our processing of your information in some circumstances. There may be situations where you object to, or ask us to restrict, our processing of your information but we are entitled to continue processing your information and / or to refuse that request.
You can exercise your rights by contacting us using the details set out below. As an individual you also have a right to complain to the data protection regulator in the country where you live or work.
If you would like to discuss or exercise the rights you may have, you can contact us via our Contact Us page.
How to contact us
We welcome your enquiries and comments, but please note that if you are not a client we may not be able to treat the information you send us as confidential or privileged. If you wish to contact us regarding legal or other services, please contact one of our offices near you. You can find a list of our offices on our main website at www.applebyglobal.com.
If you would like to contact us with questions about our privacy or data protection practices, please send us an email via our Contact Us page or by writing to:
Mr Carey Cooper, Privacy Officer [email protected]
EU Representative – We have appointed Saltire Data Protection Services Limited to act as our representative in the European Union as required under Article 27 EU GDPR. You can always contact us directly if you are located in the EU and wish to raise any issues or queries you may have relating to the processing of your personal data. However, if you wish to contact Saltire Data Protection Services Limited you can do so by clicking this form: https://app.saltiredataprotection.eu/enquiry/rs/appleby
UK Representative – We have appointed Shepherd and Wedderburn LLP to act as our representative in the United Kingdom as required under Article 27 UK GDPR. You can always contact us directly if you are located in the UK and wish to raise any issues or queries you may have relating to the processing of your personal data. However, if you wish to contact Shepherd and Wedderburn LLP you can do so by clicking this form: https://app.saltiredataprotection.co.uk/enquiry/rs/appleby
Complaints
We are committed to working with you to obtain a fair resolution of any complaint or concern about your privacy. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to complain to the data protection authority/regulator, as applicable, in your jurisdiction. We have set out below the contact details for the relevant authority/regulator in each Appleby jurisdiction:
| Bermuda | Privacy Commissioner Maxwell Roberts Building, 4th Floor 1 Church Street Hamilton HM11 Bermuda Telephone: +1 441 543 7748 Email: [email protected] |
| British Virgin Islands | British Virgin Islands Financial Services Commission Pasea Estate P.O. Box 418 Road Town, Tortola, VG 1110 British Virgin Islands Telephone: +1 284 494 1324 Email: [email protected] |
| Cayman Islands | Information Commissioner’s Office PO Box 2252 Grand Cayman, KY1-1107 Cayman Islands Telephone: +1 345 946 6283 Email: [email protected] |
| Guernsey | The Office of the Data Protection Authority St Martin’s House Le Bordage St Peter Port Guernsey GY1 1BR Telephone: +44 1481 742074 Email: [email protected] |
| Hong Kong | Privacy Commissioner for Personal Data 12/F Sunlight Tower 248 Queen’s Road East Wanchai, Hong Kong Telephone: +852 2827 2827 Email: [email protected] |
| Isle of Man | Isle of Man Information Commissioner First Floor, Prospect House Prospect Hill Douglas Isle of Man IM1 1ET Telephone: +44 1624 693260 Email: [email protected] |
| Jersey | Jersey Office of the Information Commissioner 2nd Floor 5 Castle Street St Helier Jersey JE2 3BT Telephone: +44 1534 716530 Email: [email protected] |
| Mauritius | The Data Protection Commissioner Mauritius Level 5, SICOM Tower Wall Street Ebene Cyber City, Ebene Republic of Mauritius Telephone: +230 460 0251 Email: [email protected] |
| Seychelles | Department of Information Communications Technology PO Box 737 3rd Floor, Caravelle House Manglier Street Victoria Seychelles Telephone: +248 4 28 66 00 Email: [email protected] |
| Shanghai | Cyberspace Administration of China 225 Chaoyangmennei Da Jie Beijing China 100010 Telephone: +10 8805 0686 Website: www.cac.gov.cn |
Changes to this Privacy Policy
We may update this Privacy Policy from time to time and we encourage you to review this page periodically. If we make any material changes in the way we collect, use, and/or share the personal information that you have provided, we will notify you by posting notice of the changes in clear and conspicuous manner on the Appleby website www.applebyglobal.com.