Privacy policy | SigneBridgestreamtas

1. Introduction

This Privacy Notice sets out how Bridgestream collects and handles personal information about you when you, or someone on your behalf, interacts with us in respect to the services we offer, or when you use our website. If you are an entity contracting with Bridgestream, please forward this notice to any individual whose personal information you provide to us.

We take the privacy and security of your personal information very seriously and will only use your personal information as set out in this Privacy Notice or as we may otherwise inform you from time to time.

If you work for Bridgestream you should please refer to our Employee Privacy Notice which is available from Bridgestream Human Resources staff.

References to “Bridgestream”, "we", "us" are, in the context of enquiries made through forms completed and submitted on this website or the information we collect by cookies on this website, references to Bridgestream Limited of One Nexus Way, Camana Bay, Grand Cayman, Cayman Islands which is the controller of that information.

References to "Bridgestream", "we", "us" are, in the context of a potential new client relationship, references to whichever Bridgestream affiliate(s) you are dealing with to become the contracted service provider(s) in respect to such potential new client relationship. The relevant affiliate(s) will be the individual controller(s) of that information.

References to "Bridgestream", "we", "us" are, in the context of an existing client relationship, references to whichever Bridgestream affiliate(s) that is / are the contracted service provider(s) in respect to that client relationship. The relevant Bridgestream affiliate(s) will be the individual controller(s) of that information for its / their own purposes and the processor(s) on behalf of the relevant client controller.

A full list of Bridgestream affiliates and their contact details is at https://www.bridgestreamgroup.com/regulatory

2. Contact details

You can contact the Bridgestream Data Protection Officer in relation to data protection and your rights by email dpo@bridgestreamgroup.com or in writing to:

The Data Protection Officer

Bridgestream Limited

One Nexus Way, Camana Bay

George Town, Grand Cayman

Cayman Islands

4. The personal information we process

4.1 Depending on the nature of our relationship with you, we will collect various types of personal information about you which may include some or all of the following:

4.1.1   Your identification information (which may include your name, ID card and passport numbers, nationality, place and date of birth, gender, photograph and/or IP address and personal information relating to claims, court cases and convictions, politically exposed person (PEP) status, personal information available in the public domain and such other information as may be necessary for Bridgestream to provide its services and to complete its client due diligence process and discharge its AML/CFT obligations);
4.1.2   Your tax status information (which may include your tax residency, tax ID and tax status);
4.1.3   Your contact information (which may include postal residential and business addresses, personal and business e-mail address and your home, business and mobile telephone numbers);
4.1.4   Your family relationships (which may include your marital status, the identity of your spouse and the number of children that you have);
4.1.5   Your professional and employment information (which may include your level of education and professional qualifications, your employment, employer’s name and details of directorships and other offices which you may hold);
4.1.6   Financial information, sources of wealth and your assets (which may include details of your assets, sources of wealth, shareholdings and your beneficial interest in assets, your bank details and your credit history); and
4.1.7   IP Address (we may collect your IP (Internet Protocol) address to help diagnose problems with our server, and to administer our Site. An IP address is a number that is assigned to your computer when you use the Internet. This information does not contain any personally identifiable information about you. Your IP address is also used to help identify you during a particular session and to gather broad demographic data.)

4.2   We may also collect and process personal information regarding people connected to you, either by way of professional (or other) association or by way of family relationship.

5.   Where we obtain your personal information

5.1   We collect your personal information from the following sources:

5.1.1 personal information which you give to us, including but not limited to:

(a) on such other forms and documents as we may request you complete or provide in relation to the administration/management of any of our services;
(b) information gathered through client due diligence carried out as part of our compliance with regulatory requirements; or
(c) any personal information provided by way of correspondence with us by phone, e-mail or otherwise;

5.1.2 personal information we receive from third party sources, such as:

(a)   entities in which you or someone connected to you has an interest;
(b)   your legal and/or financial advisors;
(c)   other financial institutions who hold and process your personal information; and
(d)   credit reference agencies and financial crime databases for the purposes of complying with our regulatory requirements; and

5.1.3 personal information received in the course of dealing with advisors, regulators, official authorities and service providers by whom you are employed or engaged or for whom you act.

6. Why we collect your personal information?

Lawful grounds for processing:

6.1 Unless we inform you otherwise then we may hold and process your personal information on the following lawful grounds:

6.1.1   the processing is necessary to comply with our legal obligations;
6.1.2   the processing is necessary for our legitimate interests or the legitimate interests of a third party to whom your personal information is disclosed, provided your interests and fundamental rights do not override those interests;
6.1.3   the processing is necessary for the performance of a contract to which you are a party, or to take such steps, at your request, with a view to entering you into such a contract;
6.1.4    the processing is necessary in our performance of a public task or in the public interest;
6.1.5    the processing is necessary to exercise, bring or defend a legal claim or to prevent and detect an unlawful act; and
6.1.6    in exceptional circumstances, where we have obtained your consent to processing your personal information for a specific purpose.

Purposes of processing:

6.2 Your personal information may be processed for the purposes set out below ("Purposes"). The Purposes based on our legitimate interests (and in some cases on other lawful bases as stated) are set out in paragraphs 6.2.1 to 6.2.4 inclusive:

6.2.1   facilitating the administration of our business, clients and/or our service providers;
6.2.2   communicating with you as necessary in connection with our services;
6.2.3   monitoring and recording, including of telephone and electronic communications, system use and transactions, for:
(a)    quality, business analysis, training and related purposes in order to improve service delivery and/or to monitor adherence to our internal staff policies and procedures; and
(b) for the prevention, detection, investigation and prosecution of any unlawful act (or omission to act) or in the wider public interest;
6.2.4   disclosing your personal information to any bank or financial institution in providing our services;
6.2.5   to enforce or defend our legal and contractual rights or those of third party service providers;
6.2.6   to comply with legal or regulatory obligations imposed on us;
6.2.7   collecting, processing, transferring and storing customer due diligence, source of funds information and verification data under applicable anti-money laundering and terrorist financing laws and regulations; and
6.2.8   liaising with or reporting to any regulatory authority (including tax authorities) with whom we are either required to co-operate or report to, or with whom we decide or deem it is appropriate to co-operate.

7.   Sharing personal information

7.1   We may share your personal information:

with our group companies (a full list of Bridgestream affiliates and their contact details is at https://www.bridgestreamgroup.com/regulatory);
with third party service providers, including, our insurers and insurance agents, banks, financial institutions or other third party lenders, IT service providers, auditors and legal professionals to facilitate our business and the services which we provide;
pursuant to a legal obligation that necessitates the sharing of this information with parties such as regulatory authorities, tax and revenue authorities, companies registries, governmental departments, courts and law enforcement authorities;
in the context of a merger, sale or acquisition, or other change in our organisational structure.

The group companies to whom your personal information may be transferred are based in the following jurisdictions: the Cayman Islands.

The third party service providers to whom your personal information may be transferred are based primarily in the countries / territories where we have a jurisdictional presence, but may also be based in other countries / territories.

7.2   Where we share your personal information with group companies and/or third party service providers and/or in the context of a change in our organisational structure outside of the Cayman Islands or the European Economic Area, and where we are not otherwise subject to a legal obligation to share your personal information, then we require the recipients of that personal information to put in place adequate measures to protect it, including by entering into appropriate data sharing agreements. If you would like further information about the safeguards we have in place to protect your personal information, please contact dpo@bridgestreamgroup.com

8.   Retention of personal information

8.1   Your personal information will be retained for as long as required:

8.1.1   for the purposes for which the personal information was collected;
8.1.2   in order to establish or defend legal rights or obligations or to satisfy any reporting or accounting obligations; and/or
8.1.3   as required by data protection laws and any other applicable laws or regulatory requirements.

9.   Access to and control of personal information

9.1   Depending on the country/territory in which our processing of your personal information takes place and/or where you are you may have some or all of the following rights (although these may only be exercisable in certain circumstances) in respect of the personal information about you that we process:

9.1.1   the right to access and port personal information;
9.1.2   the right to correct inaccurate, incomplete or out of date personal information;
9.1.3   the right to restrict the use processing of personal information;
9.1.4   the right to have personal information erased;
9.1.5   the right to object to processing of personal information;
9.1.6   the right not to be subject to a decision based solely on our automated processing of your personal information;
9.1.7   the right to compensation where we or another organisation has caused you damage as a result of the processing of your personal information; and
9.1.8   the right to seek a judicial (ie. court) remedy where you consider we have acted or are about to act in breach of the relevant data protection legislation.

9.2 You also have the right to lodge a complaint about our handling of your personal information with a relevant data protection supervisory authority either in the country/territory in which you are located and/or in the jurisdiction in which we are located and process your personal information. The relevant supervisory authority in the Cayman Islands is the Office of the Cayman Islands Ombudsman (https://ombudsman.ky). Whenever you are considering lodging a complaint however we should please be grateful if you would first allow us the opportunity to resolve your complaint by addressing it in writing, and providing as much detail as possible, to dpo@bridgestreamgroup.com

9.3 Where we have relied on consent to process your personal information, you have the right to withdraw consent at any time.

9.4   If you wish to exercise any of the rights set out in this paragraph 9, please contact dpo@bridgestreamgroup.com

10.   Inaccurate or amended information

Please let us know as soon as possible if any of your personal information changes (including your correspondence details). Failure to provide accurate information or to update information when it changes may have a detrimental impact upon our ability to provide services.

11.   Published statements

The views and opinions of Bridgestream employees published on the internet, including social networking websites such as, but not limited to; linkedin.com twitter.com and facebook.com, and in hardcopy media do not necessarily reflect those of Bridgestream. Statements made by Bridgestream, or its employees, are not intended and should not be construed as legal, tax or financial advice and should not be relied on as such. References to any specific commercial products, processes, or services by trade name, trademark, manufacturer, or otherwise do not necessarily constitute or imply their endorsement or recommendation by Bridgestream, nor shall any information or statements in respect to such matters be considered as advertising the same. Neither Bridgestream nor any of its employees make any warranty, express or implied, including but not limited to warranties of merchantability and fitness for a particular purpose in respect to any such products, processes or services. Further, neither Bridgestream nor any of its employees assume any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product or process disclosed; nor do they represent that its use would not infringe privately owned rights.

12.    Copyright

The copyright in this website is owned by Bridgestream limited. The pages in this site may be viewed, copied and printed but any copying or printing of the pages or of any part of the pages must include the copyright notice or must otherwise identify Bridgestream Limited as the owner of the copyright.

13.    Your acknowledgment of this Privacy Notice

By using this website and / or our services you acknowledge having received and read this Privacy Notice.

14. Questions

If you have any questions about this Privacy Notice or how we handle your personal information (e.g. our retention procedures or the security measures we have in place), or if you would like to make a complaint, please contact dpo@bridgestreamgroup.com