Privacy Notice
Introduction
Bayforest Capital Limited (the “Company”) is dedicated to safeguarding your personal data. This privacy notice outlines how we collect, process, and protect your data when you interact with us as an investor. It applies to all investors in the Company’s funds and related entities globally.
The Company complies with data protection laws including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the Cayman Islands Data Protection Act, 2017 (“DPL”), and other applicable regulations. To ensure compliance, we employ robust technical and organizational measures, including encryption, routine audits, and comprehensive data management policies. Our compliance team continuously monitors updates in data protection laws to adapt our practices accordingly. This notice informs you about your rights and how your personal data is handled.
Bayforest Capital Limited (the “Company”) is dedicated to safeguarding your personal data. This privacy notice outlines how we collect, process, and protect your data when you interact with us as an investor. It applies to all investors in the Company’s funds and related entities globally.
The Company complies with data protection laws including the EU General Data Protection Regulation (“GDPR”), the UK GDPR, the Cayman Islands Data Protection Act, 2017 (“DPL”), and other applicable regulations. This notice informs you about your rights and how your personal data is handled.
Who We Are
For data protection purposes, Bayforest Capital Limited acts as the data controller for your personal data. In specific situations, service providers, such as fund administrators or investment managers, may also act as data controllers.
What Data We Collect
We may collect and process the following categories of personal data:
- Identity Data: Name, date of birth, nationality, passport details, and government identification numbers.
- Contact Data: Residential and business address, email address, and phone numbers.
- Financial Data: Bank account information, investment details, and transaction history.
- Compliance Data: Tax identification numbers, source of funds, anti-money laundering (AML) documentation, and related correspondence records.
- Professional Data: Employment and professional background details.
- Communication Records: Call records, email correspondence, and other communications exchanged with the Company.
- Identity Data: Name, date of birth, nationality, passport details, and government identification numbers.
- Contact Data: Residential and business address, email address, and phone numbers.
- Financial Data: Bank account information, investment details, and transaction history.
- Compliance Data: Tax identification numbers, source of funds, and anti-money laundering (AML) documentation.
- Professional Data: Employment and professional background details.
How We Collect Your Data
We collect your personal data through the following means:
- Information provided by you in application forms and related documentation.
- Communications, including written, electronic, or verbal correspondence.
- Third-party sources, such as public databases, financial advisers, or service providers performing compliance checks.
Purpose and Legal Basis for Processing
Your personal data is processed for the following purposes:
- Legal Compliance: To fulfill obligations under AML, counter-terrorist financing (CTF), and other regulations.
- Contractual Performance: Managing subscriptions, redemptions, and related investor services.
- Legitimate Interests: Maintaining accurate records, improving our services, and securing our systems.
Special Categories of Data
We do not intentionally process sensitive personal data (e.g., health, race, religion). Any incidental collection will be handled in compliance with applicable laws.
Data Sharing
Your personal data may be shared with:
- Fund service providers, such as administrators, custodians, and auditors.
- Regulatory authorities, as required by applicable laws.
- Affiliates within the Company’s group for administrative or compliance purposes.
- Third-party IT and cloud service providers under strict contractual safeguards.
Data Transfers
We may transfer your data to jurisdictions outside the European Economic Area (EEA), the UK, or the Cayman Islands. When such transfers occur, we implement appropriate safeguards to ensure data protection. These safeguards include binding corporate rules, standard contractual clauses approved by regulators, or adherence to certifications like the EU-U.S. Data Privacy Framework where applicable.
Data Retention
We retain personal data for as long as necessary to fulfill legal, regulatory, and operational obligations. Typically, data is retained for seven years after the end of your relationship with us, unless a longer retention period is required by law.
Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request access to your data.
- Correction: Request correction of inaccuracies.
- Deletion: Request deletion of your data in certain circumstances.
- Restriction: Request limitation on data processing.
- Objection: Object to processing based on legitimate interests.
- Data Portability: Request transfer of your data to another party.
To exercise your rights, please contact us using the information provided below. Certain rights may be subject to legal or contractual restrictions.
Security Measures
We implement robust technical and organizational measures to safeguard your personal data from unauthorized access, loss, or misuse. These measures include encryption, access controls, and routine security assessments.
Updates to This Notice
This privacy notice may be updated periodically. Substantial updates will be communicated, and the revised notice will be available on our website.
Contact Information
For questions or to exercise your data rights, please contact:
Email: legal@bayforest.ai
This privacy notice is effective as of 08 January 2025