Privacy Notice

Who we are

Noetiva Foundation, a Multiform Foundation constituted on Nevis under the Nevis Multiform Foundations Ordinance, 2004, registration F 461, is the controller of the personal data described here.

Registered office: A.L. Evelyn Ltd Building, Suite 1, P.O. Box 258, Main Street, Charlestown, Nevis. Contact: enquiries@noetiva.org.

This notice covers this website only. Personal data processed in the course of a subscription, of client due diligence, or of the administration of Foundation assets is governed by the documentation issued in that relationship, not by this notice.

What we collect

What you type into the enquiry form. Your name, the institution you write on behalf of, your email address, and the content of your message. The fields marked as required must be completed for the form to be submitted. Providing them is voluntary, but without them we cannot answer you.

Your IP address, briefly. When the enquiry form is submitted, your IP address is recorded so that repeated submissions from one origin can be rate limited. It is stored as part of a counter, not attached to the content of your enquiry.

What you send us by email. Where you write to us directly at the address given on this site, we receive your email address, whatever you choose to include in your message or its attachments, and the technical headers that accompany any email.

Technical server records. Our hosting provider keeps operational logs of requests to this website, which include IP addresses. These are generated by the hosting infrastructure rather than by us, and are retained for the provider’s own security and availability purposes.

We run no analytics, no tracking pixels, no advertising tags and no third-party scripts. Typefaces are served from this website rather than from a font network, so loading a page here does not disclose your visit to anyone else. No profiling and no automated decision-making take place.

Why, and on what basis

• To answer your enquiry. Our legitimate interest in responding to institutional correspondence addressed to us, whether through the form or by email, and in keeping a record of it.
• To protect the form from abuse, and to keep the site running. Our legitimate interest in keeping this website available and free of automated submissions. This is the only reason your IP address is recorded by us, and the reason technical server records exist.

Where the correspondence itself progresses toward a subscription, later processing is carried out to comply with the legal obligations that apply to client due diligence and to anti-money-laundering record keeping.

Our assessment of the balance between those interests and your rights is available on request.

How long we keep it

• Rate-limiting records, including IP addresses: six hours. They are deleted automatically once that window has passed.
• Technical server records: retained by the hosting provider for a limited period under its own retention practice, and not used by us for any other purpose.
• Enquiries and email correspondence: deleted once no longer needed for the purpose for which they were received, and in any event reviewed against that purpose at least annually. This applies both to enquiries sent through the form and to correspondence sent to the address given on this site, unless a legal obligation requires retention for longer or the correspondence has become part of an active subscription file.

Who else sees it

Enquiries sent through the form are readable only by the Foundation’s administrator, through a private area of this website that the public cannot reach. Email correspondence is held in the Foundation’s mailbox with its email provider.

Your enquiry or correspondence may in addition be:

• processed on our behalf by service providers acting solely on our instructions and for no purpose of their own, such as providers of hosting and of email services;
• disclosed to those who administer the Foundation and to our professional advisers, each bound by duties of confidentiality;
• where your correspondence follows an introduction made to us, confirmed to the person who made that introduction, for that purpose only;
• disclosed where we are required to do so by law.

We do not sell personal data, and we do not share it for anyone else’s marketing.

Onward processing that arises once correspondence progresses toward a subscription is governed by the documentation issued in that relationship, not by this notice.

Cookies

This website sets no cookies on its public pages. There is no cookie banner because there is nothing to consent to: no analytics cookie, no preference cookie, no third-party cookie.

A strictly necessary session cookie exists in the Foundation’s private administration area, which visitors to this site do not reach. Cookies of that kind do not require consent.

Where data is held

This website and its database are held with a hosting provider acting as our processor and storing the data on our instructions.

Where the hosting infrastructure is located outside the European Economic Area or the United Kingdom and you are located within either, the transfer is made under appropriate safeguards permitted by the applicable law, including standard contractual clauses where those are required. Details of the safeguards in place at any given time may be requested at the address below.

Your rights

Subject to the data-protection law that applies to you, you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, and object to processing carried out on the basis of legitimate interest. Because we do not rely on consent or on the performance of a contract for the processing described here, the right to data portability does not arise. Where processing is required by anti-money-laundering law, some of these rights are limited.

Write to enquiries@noetiva.org. If you are in the European Economic Area or the United Kingdom and are not satisfied with our answer, you may complain to your national supervisory authority.

Children

This website is intended for institutional correspondence. It is not directed at children, and we do not knowingly collect personal data from them.

Security

This website is served over an encrypted connection. Access to enquiries is restricted, requires authentication with more than one factor, and is protected by technical measures proportionate to the volume and nature of the data involved.

Changes and contact

If this notice changes, the date at the top changes with it. Questions about it go to enquiries@noetiva.org.