Privacy Policy

Maystone PLC is deeply committed to protecting the privacy and security of your personal data. This Privacy Policy details how we collect, use, store, and share your personal information to provide our services and meet our legal and regulatory obligations.

Data We Collect and How We Use It

To effectively provide our global corporate services, we collect a range of personal and professional data. The data collected and its purpose are as follows:

Personal Identification: This includes your full name, date of birth, nationality, and a copy of your passport or national ID card. We use this to verify your identity and conduct mandatory due diligence checks.
Contact Information: This includes your postal address, email address, and telephone number. We use this to communicate with you, send service updates, and manage your account.
Professional and Business Information: We collect detailed information about your business model, source of funds, source of wealth, and supporting KYC (Know Your Customer) documentation. This information is critical for assessing risk and complying with anti-money laundering (AML) and counter-terrorism financing (CTF) regulations.
Financial Data: We may require financial statements, bank statements, or other financial records to assist with bank account opening and due diligence. This data is handled with the highest level of security and confidentiality.
Website Usage Data: We use cookies and similar technologies to collect information about your interactions with our website, such as IP addresses, browser types, and pages visited. This helps us improve our website's functionality and user experience.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contractual Necessity: The processing of your data is necessary to fulfill our obligations under the service agreement we have with you.
Legal Compliance: We are legally required to process certain data to comply with international regulations, including but not limited to AML, CTF, and FATCA.
Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our systems, provided your data protection rights are not overridden.

Data Sharing and International Transfers

To deliver our services, we may need to share your personal data with trusted third parties. This includes:

Governmental and Regulatory Bodies: We share data with company registrars, tax authorities, and other government agencies as required for incorporation and compliance.
Financial Institutions: We may share your data with banks and electronic money institutions (EMIs) to facilitate the opening of business accounts.
Professional Partners: This may include lawyers, notaries, and accountants in different jurisdictions who assist in delivering our services.

As a global company, your data may be transferred to and stored in countries outside your country of residence. When this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), to protect your data to a level equivalent to the standards in your jurisdiction.

Data Security and Retention

We employ robust technical and organizational security measures to protect your data from unauthorized access, accidental loss, or destruction. Our systems use encryption, access controls, and regular security audits. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with our legal and regulatory obligations.