Privacy policy
Last updated 17 February 2026
Last updated:17 February 2026
This Privacy Policy explains how CV5 Capital ("CV5 Capital", "we", "us", "our") collects, uses, discloses, stores, and protects personal data when you interact with our website, communicate with us, or use our services.
We process personal data in accordance with the Data Protection Act, 2017 (as amended) of the Cayman Islands (the "DPA") and applicable Cayman Islands regulations and guidance.
This Privacy Policy explains how CV5 Capital ("CV5 Capital", "we", "us", "our") collects, uses, discloses, stores, and protects personal data when you interact with our website, communicate with us, or use our services.
We process personal data in accordance with the Data Protection Act, 2017 (as amended) of the Cayman Islands (the "DPA") and applicable Cayman Islands regulations and guidance.
1. Who we are and how to contact us
Data Controller: CV5 Capital (we determine the purposes and means of processing personal data).
Contact (Privacy / Compliance): compliance@cv5capital.io
Postal address: CV5 Capital, 52A Edgewater Way, #1651, Grand Cayman, KY1-9006, Cayman Islands.
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us using the details above.
2. What personal data we collect
We may collect the following categories of personal data (depending on your interaction with us):
2.1 Identity and contact data
- Name, job title, employer/company name
- Email address, telephone number, postal address
- Identifiers you provide when enquiring about services
2.2 Professional and business information
- Role, business activities, investment-related preferences (where relevant to an enquiry)
- Communications with us (emails, messages, meeting notes)
2.3 Website and technical data
- IP address, browser type/version, device identifiers
- Pages visited, time spent, referral URLs, logs, and similar analytics data
- Cookie identifiers (where cookies are used—see section 9)
2.4 Client/investor onboarding and compliance data (where applicable)
Where you (or an entity you represent) engages us for regulated services, we may collect information required for due diligence, AML/KYC, and sanctions screening, such as:
- Government-issued identification details
- Proof of address
- Beneficial ownership and control information
- Source of funds / source of wealth information
- Corporate documents and signatory information
Sensitive data: We do not seek to collect "sensitive personal data" unless necessary for a specific purpose and permitted by law (for example, where required to meet legal or regulatory obligations). If we must process such data, we will take enhanced safeguards.
3. How we collect personal data
We collect personal data:
- Directly from you (forms, emails, calls, meetings, submissions via the website)
- From your organisation, advisers, or authorised representatives
- From publicly available sources (e.g., company registers, professional profiles) where relevant
- From third parties performing services on our behalf (e.g., website analytics providers)
- From compliance/verification sources where required (e.g., identity verification, screening databases), where applicable and lawful
4. Why we use your personal data and our lawful basis
Under the DPA, we process personal data on one or more lawful bases, including:
4.1 To respond to enquiries and provide information
- Purpose: handling enquiries, arranging calls, sending requested materials
- Lawful basis: legitimate interests; or performance of a contract / steps prior to entering a contract
4.2 To provide services and manage relationships
- Purpose: onboarding, administering our relationship, providing platform/services, billing, operations
- Lawful basis: performance of a contract; legitimate interests
4.3 Legal and regulatory compliance
- Purpose: AML/KYC, sanctions screening, fraud prevention, recordkeeping, regulatory and audit obligations
- Lawful basis: compliance with legal obligations; legitimate interests
4.4 Website operations, security, and improvement
- Purpose: maintaining and securing the website, analytics, troubleshooting, preventing misuse
- Lawful basis: legitimate interests; and/or consent where required for certain cookies
4.5 Marketing and communications (where permitted)
- Purpose: sending updates about CV5 Capital, services, insights, events
- Lawful basis: legitimate interests and/or consent (depending on the nature of the communication and applicable rules)
You can opt out at any time (see section 8).
5. How we share personal data
We may share personal data with:
- Service providers who support our operations (e.g., hosting, IT support, analytics, CRM, email services), acting under our instructions and subject to appropriate safeguards
- Professional advisers (legal, audit, compliance, tax) subject to confidentiality
- Regulators, courts, law enforcement, or competent authorities where required by law, regulation, or to protect rights and safety
- Transaction counterparties or fund/service-provider ecosystems (e.g., administrators, custodians, auditors) only where relevant to the services being provided and subject to appropriate safeguards
We do not sell personal data.
6. International transfers
Your personal data may be transferred to and processed in jurisdictions outside the Cayman Islands (for example, where service providers or counterparties operate internationally).
Where we transfer personal data internationally, we take appropriate steps to ensure an adequate level of protection consistent with the DPA, such as:
- contractual protections with recipients/service providers;
- limiting access to those who need it; and
- using secure transfer and storage arrangements.
7. Data security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption where appropriate, secure hosting, and policies/procedures for handling confidential information.
No method of transmission over the internet is completely secure; however, we work to maintain appropriate safeguards proportionate to the risks.
8. Marketing preferences
If you receive marketing communications from us, you may opt out at any time by:
- using the unsubscribe link (where available), or
- emailing compliance@cv5capital.io with your request.
We will continue to send non-marketing communications where necessary (e.g., service-related or legally required notices).
9. Cookies and analytics
We may use cookies and similar technologies to:
- enable core website functionality,
- understand how visitors use the website, and
- improve performance and user experience.
Where required, we will seek consent for non-essential cookies. You can control cookies through your browser settings and, where implemented, our cookie controls on the website. Disabling some cookies may impact site functionality.
10. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including:
- to provide services and manage our relationship,
- to meet legal/regulatory obligations (including AML/KYC and record retention requirements),
- to resolve disputes, and
- to enforce agreements.
Retention periods vary depending on the type of data and the context in which it is collected.
11. Your rights under Cayman data protection
Subject to applicable limitations and exemptions under the DPA, you may have the right to:
- Access your personal data held by us
- Correct inaccurate or incomplete personal data
- Stop or restrict certain processing
- Object to processing in certain circumstances
- Withdraw consent (where processing is based on consent)
- Request deletion of personal data in certain circumstances
- Request data portability where applicable
To exercise your rights, contactcompliance@cv5capital.io. We may need to verify your identity before responding.
12. Complaints
If you have concerns about how we handle personal data, please contact us first at compliance@cv5capital.io so we can address your concerns.
You may also have the right to complain to the Cayman Islands authority responsible for oversight of data protection matters (currently the Office of the Ombudsman).
13. Children
This website is not intended for children, and we do not knowingly collect personal data from children.
14. Third-party websites
Our website may link to third-party websites. We are not responsible for the privacy practices of those websites. Please review their privacy notices before providing personal data.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time by publishing the updated version on our website. The "Last updated" date above indicates when changes were made.