Privacy Policy

Last updated: 16 September 2026.

1. Who is responsible for your data

We are a corporate services practice based in Road Town, Tortola, British Virgin Islands, and we are the data controller for the personal data described here. You can reach us at clients@example.com.

2. What we collect

Only what the work requires, which is more than most websites need because a registered agent is obliged by law to know who it is acting for.

• Contact details: name, email address, telephone number, and the message you send us.
• Application details: the proposed company name, its intended activities, the capital structure and the roles each person will hold.
• Identity data: full name, date and place of birth, nationality, residential address, passport or other photographic identity, and proof of address, for every beneficial owner, director and shareholder.
• Source of funds and wealth: bank references, financial statements and the explanations you give us for where the money comes from.
• Payment records: what was ordered, what it cost, when it was paid and the reference our payment provider gives the transaction. We do not receive or store your card number.
• Technical data: the request logs our hosting produces, which include an IP address and a timestamp.

3. Where it comes from

Almost all of it comes from you. Some comes from the screening and verification providers we are required to use, and from public sources such as company registries and sanctions lists. Where you give us data about somebody else, such as a fellow director or a beneficial owner, you must have their agreement to do so, and you should show them this policy.

4. Why we use it

• To answer your enquiry and quote for the work.
• To perform the contract: to incorporate the company, act as registered agent, make filings and handle renewals.
• To meet our legal obligations, in particular anti-money-laundering, counter-terrorist-financing, sanctions screening and the record-keeping the BVI Business Companies Act and the regulations under it require of a registered agent.
• To take payment and keep accounting records.
• To protect the service against fraud and abuse, and to keep it working.

The lawful bases we rely on are performance of a contract, compliance with a legal obligation, and our legitimate interest in running and defending the practice. We do not use your data for advertising, and we do not sell it.

5. Who else sees it

• The BVI Registry of Corporate Affairs and the Financial Services Commission, for the filings the company must make and for information they are entitled to require from us.
• Competent authorities: law enforcement, tax authorities and regulators, where we are compelled to disclose. We are sometimes forbidden by law to tell you that this has happened.
• Our service providers: hosting, email delivery, document storage, identity screening and the payment provider, each under contract and only to the extent they need it.
• Banks and professional advisers, where you ask us to provide documents to them.

6. Transfers out of the Territory

Some of our providers operate outside the British Virgin Islands. Where data is transferred we require the provider to protect it to a standard equivalent to the one we are held to, by contract.

7. How long we keep it

For as long as we act, and then for the period the law requires, which for the records a registered agent must hold is at least five years after the engagement ends or the company is struck off, whichever is later. Enquiries that do not become engagements are deleted within twelve months. Our systems delete what is out of retention automatically rather than waiting for somebody to remember.

8. How we protect it

Identity data is encrypted where it is stored, and access to it is restricted to the people who need it and recorded when it happens. The site is served over HTTPS. Card details are entered directly with our payment provider and never pass through our systems. No system is perfect, but we do not keep what we do not need, and we do not keep it in the clear.

9. Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, or object to a particular use of it. Write to clients@example.com and we will respond within one month.

Those rights have limits. We cannot delete records we are legally required to keep, and we cannot act on a request until we are satisfied that it comes from you.

10. Cookies

This site does not use advertising or analytics cookies and does not track you across other sites. It stores your unfinished application in your own browser so that you can come back to it, and it sets a cookie to keep you signed in if you are a member of staff using the admin panel. Clearing your browser storage removes the saved application.

11. Changes to this policy

We may change this policy. The date above tells you when this version took effect, and material changes will be brought to your attention rather than quietly published.

12. Complaints

If you think we have handled your data badly, tell us first at bviformation@proton.me. Most things are fixed faster that way. You also have the right to complain to the data protection authority in the British Virgin Islands.

13. Related

Our Terms and Conditions cover the rest of the relationship.