Privacy notice

Who we are

AML Cayman Ltd. ("we", "us") is the data controller for personal data collected through aml.ky. We process personal data in line with the Cayman Islands Data Protection Act (as revised) (the "DPA"). You can contact us about this notice at info@aml.ky or at 2D Landmark Square, 64 Earth Close, Seven Mile Beach, Grand Cayman, Cayman Islands.

What we collect

• Enquiry and quote form: your name, role, entity name, email, phone number, details of your entity and the services you are interested in, the answer to our independence question, and anything you write in the message box.
• Emails and calls: the information you choose to send us.
• Technical data: our hosting provider automatically processes basic technical information, such as IP address, browser type and the pages requested, to deliver and secure the website.

We do not use analytics, advertising or tracking cookies on this website, and we do not sell personal data.

Why we use it and our legal basis

• To respond to your enquiry, check for conflicts of interest and prepare a proposal. This is necessary to take steps at your request before entering into a contract, and is in our legitimate interests in running our business.
• To keep records of enquiries and engagements, and to meet our legal and regulatory obligations.
• To keep the website secure and working properly (legitimate interests).

Hosting and transfers outside the Cayman Islands

This website is hosted by Netlify, Inc., which is based in the United States. Enquiry form submissions are collected and stored by Netlify on servers in the United States. Notifications of submissions are sent to our business email, which is provided by Microsoft. This means your personal data is transferred outside the Cayman Islands. We rely on these providers' contractual data protection commitments, including standard contractual clauses where applicable, to protect your data in line with the eighth data protection principle of the DPA.

Please do not include confidential customer, investor or transaction information in the form. We will agree secure channels for that information once an engagement begins.

Who we share it with

We share personal data only with the service providers who help us run the website and our email, with professional advisers where necessary, or where the law requires it, for example with regulators or law enforcement.

How long we keep it

We delete enquiries that do not lead to an engagement from the website platform within 12 months. Where an engagement follows, we keep records for as long as needed for the engagement and to meet legal, regulatory and professional record-keeping obligations.

Your rights

Under the DPA you have the right to be informed about how your data is used, and the right to access your personal data. You may also ask us to correct inaccurate data, to stop or restrict processing, to stop direct marketing, and to delete data in certain circumstances. To exercise these rights, email info@aml.ky. We will respond within the time the DPA allows.

If you are unhappy with how we have handled your data, you can complain to the Office of the Ombudsman, which supervises data protection in the Cayman Islands (ombudsman.ky).

Security

The website is served only over HTTPS with modern security headers. Access to enquiry data is limited to the people who need it to respond to you.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.