PRIVACY POLICY

Last updated: 31 December 2025

1. General Provisions
This Privacy Policy (“Policy”) governs the collection, use, storage and protection of personal data by MYFIRM GLOBAL LTD (the “Company”, “we”, “us”) in connection with the operation of this website and any affiliated platforms (the “Website”).
This Policy applies to all users of the Website (“you”, the “User”) who browse the Website, submit inquiries, use contact forms or otherwise interact with its content and services.
Once a service agreement is concluded between you and the Company, the processing of confidential information provided within the scope of the Services shall be governed by the relevant contractual documentation and/or a Non-Disclosure Agreement (NDA), which shall prevail over this Policy in case of conflict.
By using the Website, you confirm that you have read and understood this Policy and agree to the processing of your personal data in accordance with its terms.
We reserve the right to amend this Policy at any time. Any updated version will be published on the Website with a revised “Last updated” date. We recommend reviewing this Policy periodically.

2. Purposes of Personal Data Processing
We process personal data solely to the extent necessary for the following purposes:

• providing access to the Website and its functionality;
• responding to inquiries and requests submitted by Users;
• communicating with Users regarding services and consultations;
• improving the Website’s performance, usability and content;
• ensuring security and preventing misuse or fraud;
• complying with legal and regulatory obligations, including Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures when using certain services.

3. Categories of Personal Data Collected
Depending on how you interact with the Website, we may collect the following categories of personal data:

• contact details voluntarily provided via forms (full name, email address, phone number, messenger or communication details, country of residence);
• IP address and technical identifiers automatically recorded upon form submission or Website interaction;
• content of messages and inquiries submitted by Users;
• information provided in connection with job applications, if applicable.

The Company does not intentionally collect sensitive personal data, biometric data or payment information through the Website.

4. Cookies and Similar Technologies
4.1 Use of Cookies
The Website uses cookies and similar technologies in accordance with applicable data protection and privacy laws, including the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).
Strictly necessary cookies are used automatically to ensure the proper functioning, security and stability of the Website.
All other cookies, including analytics, performance and functional cookies, are used only where permitted by applicable law and subject to your explicit consent, which is collected via a cookie banner or cookie management tool available on the Website.
You may manage or withdraw your consent to non-essential cookies at any time through your browser settings or via the cookie management tool, where available.
Further information about the types of cookies used, their purposes and how to manage them is available in our Cookie Policy, which forms an integral part of this Privacy Policy.
4.2 Types of Cookies
Strictly necessary (functional):

• technical cookies required for Website functionality and content display (e.g. JavaScript support, embedded media players).

Analytics and performance (optional):

• Google Analytics cookies (e.g. _ga, _gid) — website usage analytics;
• Yandex.Metrika cookies — analytics and behavioral statistics;
• Google Tag Manager — tag management (may load third-party analytics tools);
• third-party chat or video services (e.g. Bitrix24, YouTube, Vimeo), where enabled by the User.

You may manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect Website functionality.

5. Legal Basis for Processing
We process personal data on the basis of one or more of the following legal grounds:

• your consent;
• performance of pre-contractual steps taken at your request;
• performance of contractual obligations;
• compliance with legal or regulatory requirements;
• legitimate interests of the Company, provided such interests do not override your rights and freedoms.

Legitimate interests of the Company include ensuring website security, preventing fraud, performing analytics to improve the Website, and complying with regulatory obligations, provided such interests do not override your rights and freedoms.

6. Data Retention and Security
Personal data will be retained only as long as necessary to achieve the purposes for which it was collected, or according to the criteria used to determine retention periods.
We implement appropriate technical and organisational measures to protect personal data, including:

• secure data transmission and storage;
• restricted access on a need-to-know basis;
• internal access control and monitoring procedures;
• safeguards against unauthorized access, alteration or disclosure.

Personal data collected for KYC/AML purposes will be retained for no longer than necessary to comply with regulatory obligations. Data submitted via contact forms or inquiries will be retained for a period of 3 years unless otherwise required by law. Usage data and analytics information will be retained for up to 24 months.

7. Disclosure to Third Parties
We do not sell or trade your personal data.
Personal data may be disclosed to third parties only in the following cases:

• where required by applicable law or lawful requests from public authorities;
• to service providers acting as data processors on our behalf (e.g. hosting, analytics), subject to appropriate safeguards;
• in the context of corporate restructuring, merger or acquisition, provided Users’ rights are preserved;
• in anonymized or aggregated form for analytical or improvement purposes.

8. Your Rights
Subject to applicable law, you have the right to:

• access your personal data;
• request correction or deletion of inaccurate or outdated data;
• withdraw consent at any time;
• request restriction of processing;
• request data portability, where applicable;
• lodge a complaint with a competent supervisory authority.

Requests may be submitted using the contact details provided below.

9. Minors
The Website is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from minors without parental or legal guardian consent. If we become aware that such data has been collected, we will take appropriate steps to delete it.

10. Personal Data Breach
In the event of a personal data breach, we will take all necessary measures in accordance with applicable law, including notifying competent authorities and affected Users where legally required.

11. Cross-Border Data Transfers
When personal data is transferred outside your country of residence, the Company ensures appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office, to protect personal data in accordance with applicable data protection laws.

12. Final Provisions
If you do not agree with the terms of this Policy, please refrain from using the Website.
This Policy shall be governed by and construed in accordance with applicable data protection laws.

13. Contact Information
For questions or requests related to this Privacy Policy or personal data processing, please contact us:

Email: mafirmaglobal@gmail.com
Website: http://myfirmglobal.tilda.ws/privacypolicy