Privacy Statement

 

Introduction

At KYC For You, your privacy and the security of your personal data are our top priorities. This Privacy Statement explains:  

 

• How we collect, use, disclose, store, and protect personal information.

• The purposes for processing your data and the legal basis for doing so.

• Your rights under the EU General Data Protection Regulation (GDPR) and the Spanish Data Protection and Digital Rights Law (LOPDGDD).

• How to contact us if you have any questions or concerns.

 

This Privacy Statement applies solely to KYC For You services. Separate privacy statements may govern other products or services.  

​

Who We Hold Information About

KYC For You processes personal data to assist organizations, such as:  

• Financial institutions, corporates, and professional services firms.

• Governments, regulators, and law enforcement agencies.  

 

These organizations use our services for due diligence and screening activities, which are carried out to:  

• Comply with anti-money laundering (AML), anti-bribery, and anti-corruption laws.  

• Prevent and detect financial crimes, fraud, or other unethical and unlawful activities.  

• Fulfill their regulatory obligations and manage risk in the public interest.

 

Our services are not intended for children, except in limited circumstances where data about children may be processed (e.g., when they are dependents of Politically Exposed Persons (PEPs)).  

​

What Personal Information We Process

We collect and process the following types of personal data derived from public domain sources:  

 

Identifying Information:

Full name, aliases, date of birth, gender, nationality, country of residence, and passport details.  

 

Identification Numbers: 

Social security numbers, tax identification numbers, or other public identifiers.  

 

Family Circumstances:

Marital status and dependents, particularly in relation to PEPs or their close associates.  

 

Employment and Education Details: 

Job titles, roles, organizational affiliations, and educational background.  

 

Professional and Personal Affiliations: 

Connections to entities or individuals, including those on sanctions lists or involved in unethical practices.  

 

Financial Information:

Bankruptcy filings, insolvency proceedings, or indicators of wealth.  

 

Criminal Allegations or Activities: 

Publicly available information about alleged or confirmed involvement in crimes, including financial crimes, predicate offenses, or environmental offenses.  

 

Public Online Activities: 

Posts on blogs, websites, or social media platforms.  

​

How We Use Your Information  

Your personal information is processed for:  

• Facilitating due diligence and screening activities by our clients.  

• Complying with regulatory requests and legal obligations.  

• Managing the secure and proper operation of KYC For You.  

• Protecting the legal and operational rights of KYC For You and our clients.  

​

Legal Basis for Processing  

We process your data under the following legal bases, as outlined by GDPR:  

 

Legitimate Interests (Article 6(1)(f)):

Processing is necessary for fulfilling regulatory and risk management needs while ensuring secure service delivery.  

 

Substantial Public Interest (Article 9(2)(g)):  

Sensitive data (e.g., political affiliations or criminal allegations) is processed to meet public interest objectives, such as AML and fraud prevention.  

​

Public Domain Data Sources 

The personal information we process is sourced from:  

• Government records, court filings, sanctions lists, and regulatory databases.  

• Widely distributed media, reputable publications, and political websites.  

• Online sources, such as blogs, websites, and social media platforms.  

 

We ensure that all public domain data is lawfully obtained, relevant, and processed in compliance with GDPR and LOPDGDD.  

​

Who We Share Your Data With

Your data is shared only with:  

 

Authorized KYC For You Clients:

Organizations conducting due diligence or screening activities for legitimate purposes.  

 

Service Providers:

Third parties providing IT and support services under strict contractual obligations to protect your data.  

 

Legal Authorities:

Regulatory bodies or law enforcement agencies when required by law.  

 

Business Partners:

Collaborators assisting in delivering KYC For You services.  

​

International Data Transfers

As a global service, your data may be transferred to jurisdictions outside the European Economic Area (EEA). To ensure your privacy, we implement safeguards such as:  

• Standard Contractual Clauses (SCCs) approved by the European Commission.  

• Binding Corporate Rules (BCRs) for certain jurisdictions.  

• Adequacy decisions for transfers to countries deemed secure by the European Commission.  

 

These measures ensure compliance with GDPR Articles 44–50.  

​

How We Protect Your Data

We employ robust security measures to protect your personal data, including:  

• Physical, electronic, and managerial safeguards aligned with international security standards.  

• Regular audits and updates to mitigate emerging threats.  

• Access controls to ensure only authorized personnel and clients can view your data.  

​

Retention Periods

We retain your personal data only as long as necessary to:  

• Fulfill the purposes outlined in this Privacy Statement.  

• Comply with legal and regulatory requirements, such as AML laws mandating data retention for up to five years after the end of a business relationship.  

​

Your Privacy Rights  

Under GDPR and LOPDGDD, you have the following rights:  

 

Access: Request confirmation of whether we process your data and obtain a copy.  

Rectification: Request corrections to inaccurate or incomplete data.  

Erasure: Request deletion of your data under certain circumstances.  

Restriction: Request limited processing of your data.  

Objection: Object to processing based on legitimate interests.  

Data Portability: Request your data in a machine-readable format.  

 

To exercise your rights, email us at privacy@kycforyou.com. We will respond within one month, as required by GDPR.  

​

Accuracy and Updates

While we take steps to ensure the accuracy of public domain data, errors may occur. If you identify inaccuracies or wish to update your information, please contact us at privacy@kycforyou.com.  

​

Data Breach Notification  

In the unlikely event of a data breach that may pose a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals where necessary.  

​

Contact Us 

For any questions or concerns regarding this Privacy Statement or how we process your personal data, please contact:  

Privacy Office

Email: privacy@kycforyou.com  

 

Changes to this Privacy Statement 

We may update this Privacy Statement periodically. Significant changes will be communicated through appropriate channels.