Privacy Notice

Last updated: 1 December 2025

1. Who We Are (Data Controller)

Provena Capital Ltd is the data controller for personal data processed through this website.

We determine the purposes and means of processing personal information that you provide when using our website or submitting an enquiry.

Registered Office (UK):
Provena Capital Ltd
Email: contact@provenacapital.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Information you provide directly

• Name
• Email address
• Organisation and role
• Any information included in enquiry forms or correspondence

Information collected automatically

• IP address
• Device identifiers
• Browser type
• Website usage statistics
• Pages viewed and interaction data

(Collected via analytics tools such as privacy-friendly session analytics.)

Optional cookies or tracking technologies

We may use cookies or tracking technologies to improve website functionality, security, and user experience.

You can adjust cookie preferences in your browser settings.

3. How We Use Personal Data

We process your personal data for the following purposes:

• Responding to enquiries and managing our relationship with you
• Assessing your eligibility to receive certain information or participate in investment opportunities
• Providing information about our services
• Improving our website, analytics, and communication processes
• Ensuring security, preventing fraud, and maintaining system integrity
• Complying with legal and regulatory obligations applicable to financial-services entities

4. Legal Bases for Processing (UK GDPR / EU GDPR)

We rely on the following lawful bases:

a) Consent

Where you submit a contact form or expressly request information.

b) Legitimate Interests

For responding to enquiries, performing analytics, maintaining website security, and managing relationships with prospective partners and investors.

c) Legal Obligations

Where required to comply with regulatory, anti-money laundering, sanctions, or reporting requirements.

We only process personal data where one of these lawful bases applies.

5. Sharing of Personal Data

We may share personal data with:

• Service providers supporting hosting, IT, analytics, compliance, or communication tools
• Professional advisors including legal, regulatory, audit, or risk experts
• Regulators or competent authorities, where required by law
• Affiliated service providers supporting platform operations (without disclosing unnecessary internal structures)

We do not sell your personal data under any circumstances.

6. International Transfers

If your personal data is transferred outside the UK or European Economic Area, we ensure an adequate level of protection, such as:

• Adequacy regulations issued by the UK Government or European Commission
• Standard Contractual Clauses (SCCs)
• Contractual or technical safeguards

You may request details of these safeguards at any time.

7. Data Retention

We retain personal data only for as long as necessary to:

• Respond to and manage enquiries
• Maintain records in accordance with legal, regulatory, and audit requirements
• Fulfil any obligations arising from a prospective or ongoing business relationship

Retention periods vary by data type and legal requirement, but we apply strict deletion protocols once data is no longer needed.

8. Your Rights Under GDPR

Depending on your location, you may have the following rights:

• Access – request a copy of your personal data
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion of your data, subject to legal exceptions
• Restriction – request limits on how we process your data
• Objection – object to processing based on legitimate interests
• Portability – request your data in a transferable format
• Withdraw consent – where processing is based on consent

We may need to verify your identity before responding to such requests.

To exercise your rights, contact: contact@provenacapital.com

9. Security Measures

We use appropriate technical and organisational measures to protect personal data from:

• Unauthorised access
• Loss or misuse
• Alteration or destruction

While we use industry-standard protections, no system is completely secure. We continuously review and enhance our controls.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects on individuals.

11. Updates to This Privacy Notice

We may update this Privacy Notice periodically to reflect legal, operational, or technological changes.

The "Last Updated" date will be amended accordingly.

12. Contact Us

For questions about this Privacy Notice or our handling of personal data, please contact:

Provena Capital Ltd
Email: contact@provenacapital.com