1. Scope and Applicable Law

Vasil & Partners operates as an international legal, corporate, and tax advisory firm. We process personal data in compliance with applicable data protection regulations, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and standard international privacy rules relevant to our client engagements.

2. Information We Collect

We collect and process personal data strictly to deliver professional services, fulfill statutory obligations, and manage client relations.

• Client Engagement Data: Names, professional titles, corporate affiliations, residential/business addresses, government-issued identification numbers, tax identification numbers, and contact details collected during client onboarding.

• Due Diligence & Compliance Information: Know Your Customer (KYC), Anti-Money Laundering (AML), and Counter-Terrorist Financing (CTF) verification records required by law.

• Inquiry & Digital Communications: Information provided voluntarily via our online contact forms, email correspondence, or corporate communications (e.g., telephone or secure messaging).

• Technical & Website Usage Data: Standard server log information, IP addresses, browser types, and page access timestamps collected automatically during visits to our Site.

3. How We Use Your Data

We process your information under the following legal bases and for the following purposes:

• Performance of Professional Services: Delivering international tax planning, legal structuring, corporate administrative, and advisory services as stipulated in our engagement agreements.

• Regulatory & Statutory Compliance: Fulfilling mandatory AML, KYC, tax reporting, and professional regulatory requirements.

• Client Relationship Management: Managing billing, account administration, and direct communication regarding active or pending legal/tax matters.

• Portal Integrity: Monitoring and protecting our digital infrastructure against security threats, fraud, or unauthorized access.

4. Confidentiality and Data Sharing

Confidentiality is fundamental to our practice. We do not sell, rent, or commercialize personal data under any circumstances.

We may share personal data only in limited, legally justified situations:

• Intra-Group Coordination: Sharing relevant data on a strict need-to-know basis with affiliated holding or administrative entities within the Vasil Group structure to execute cross-border services.

• Third-Party Service Providers: Utilizing trusted external IT infrastructure providers, secure cloud hosts, or specialized legal/financial software under strict confidentiality and data protection agreements.

• Statutory Disclosure: Disclosure to regulatory, judicial, or governmental authorities when strictly required by governing laws, court orders, or mandatory tax reporting protocols.

5. Cross-Border Transfers

Given the multi-jurisdictional nature of cross-border tax and corporate structuring, your personal data may be processed across international borders (including jurisdictions in the UK, European Union, UAE, and Southeast Asia).

We ensure that all cross-border data transfers are backed by appropriate safeguards, including Standard Contractual Clauses (SCCs), adequacy decisions, or statutory professional secrecy standards.

6. Data Security and Retention

We maintain rigorous technical and organizational security measures—including encrypted storage, restricted access controls, and secure communication protocols—to shield your information from unauthorized access, loss, or alteration.

We retain personal data for the duration of the advisory relationship and for mandatory post-engagement retention periods mandated by applicable statutory, tax, and legal liability limitation laws.

7. Your Rights

Subject to local laws and professional regulatory constraints, you hold the following rights regarding your personal data:

• Access: The right to request copies of the personal data held by us.

• Rectification: The right to request correction of inaccurate or incomplete records.

• Erasure: The right to request deletion of your personal data, provided it is no longer required for statutory AML/KYC or legal retention compliance.

• Restriction & Objection: The right to restrict or object to certain data processing activities.

8. Contact Information

To exercise your privacy rights or submit questions regarding our data practices, please contact our compliance desk:

• Email: office@vasilpartners.com

• Phone: +44 20 3974 1244