Privacy
Privacy policy.
This site addresses professional investors and originators. Here is the data we process, why, for how long, and how to exercise your rights.
01
Data controller
Comparto, an issuance platform operated by Hexalend and established in Luxembourg, acts as data controller for the personal data collected through this site.
For any question about this policy or to exercise your rights, write to us through the Contact page.
02
Data we collect
Professional contact details you provide voluntarily through the contact form or by email: name, company, role, email address, telephone number and the content of your message.
Technical data collected automatically as you browse: IP address, browser type, pages viewed and aggregated audience-measurement data, where such tools are enabled.
We do not collect special categories of data within the meaning of Article 9 GDPR, and we do not seek data about individuals outside a professional context.
03
Purposes and legal basis
Responding to a feasibility review request or any other enquiry: performance of pre-contractual steps and our legitimate interest in handling the requests we receive.
Improving the site and measuring its audience: consent, where measurement cookies are used.
Meeting our legal and regulatory obligations, including anti-money-laundering and record-keeping duties: legal obligation.
04
Recipients and transfers
Data is accessible only to authorised staff within Comparto and Hexalend, and to our technical providers (hosting, email, measurement tools) acting as processors.
No data is sold. Any transfer outside the European Economic Area is covered by the European Commission's standard contractual clauses or by an adequacy decision.
05
Retention
Enquiries that do not proceed: 24 months from the last exchange.
Commercial relationships and related documentation: for the duration of the relationship, then retained in line with applicable Luxembourg legal obligations, generally 10 years.
Audience-measurement data: 13 months at most.
06
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time where processing relies on it.
To exercise these rights, send your request through the Contact page. We respond within one month.
You may also lodge a complaint with the Commission nationale pour la protection des données (CNPD) in Luxembourg.
07
Security
We apply appropriate technical and organisational measures — encryption in transit, access control, logging — to protect data against unauthorised access, alteration or disclosure.
Cookies
Managing cookies
How we use cookies, and how to change your preferences, is set out on a dedicated page.
Template copy provided for guidance. It must be reviewed and finalised by legal counsel before being relied upon as a contractual or regulatory document.