This policy explains what personal information we collect through this website, why we collect it, who we share it with and the choices you have. We collect only what we need to respond to your enquiry.
1. Who we are
This website is operated by NK Fintech Advisory (“NK”, “we”, “us”), a business established in the State of Israel. We are the controller (the “database owner” under Israeli law) of the personal information described in this policy.
For any privacy question or request, email info@nkfintech-advisory.com.
2. Information we collect
Information you send us
When you use our client or partner enquiry form, or email us, we collect:
- your full name, business email address and company or organisation name;
- optional details such as your company website, country of incorporation and the markets or services you cover;
- your industry or business activity, the service or partner type you select, and the description or proposal you write; and
- any further correspondence between us.
Please do not send identity documents, financial records or other sensitive personal information through the website. If an engagement goes ahead, any documents needed for onboarding or due diligence are requested separately, under the terms of that engagement.
Information collected automatically
- Technical and security data. Our hosting provider processes your IP address, browser type, the pages you request and the time of each request to deliver the website, keep it secure and investigate misuse.
- Security check. When you use an enquiry form, a security check may run to distinguish people from automated bots. It processes technical data such as your IP address and browser characteristics.
- Cookies. Essential cookies are always used. See our Cookie Policy.
We do not buy personal information, and we do not use the website to make automated decisions that have legal or similarly significant effects on you.
3. How we use it and why
| Purpose | Information used | Legal basis (where GDPR or UK GDPR applies) |
|---|---|---|
| Responding to your enquiry and discussing the services you asked about | Enquiry details and correspondence | Taking steps at your request before entering into a contract; our legitimate interest in responding to business enquiries |
| Assessing and discussing partnership or referral proposals | Partner enquiry details and correspondence | Our legitimate interest in developing business relationships |
| Keeping the website and forms secure, and preventing spam and fraud | Technical and security data | Our legitimate interest in protecting our website, our business and our users |
| Meeting legal obligations and establishing or defending legal claims | Any of the above, as necessary | Compliance with a legal obligation; our legitimate interests |
We will not send you marketing emails unless you ask us to. Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (see section 8).
4. Who we share it with
We do not sell your personal information. We share it only as follows:
- Service providers who process it on our behalf and under our instructions: website hosting (Vercel), email delivery (Resend), security checks (Cloudflare) and the business email service we use to receive and answer enquiries.
- Banks, EMIs, payment providers and licensing specialists, only when you have asked us to arrange an introduction or to coordinate an application, and only the information needed for that purpose.
- Professional advisers, authorities and others where required by law, to protect our rights, or in connection with a reorganisation or sale of our business, subject to appropriate confidentiality.
5. International transfers
We are based in Israel, which the European Commission recognises as providing an adequate level of data protection, so personal information can be transferred from the European Economic Area to us without additional safeguards. Our service providers may process personal information in countries other than yours, including the United States. Where personal information from the European Economic Area, the United Kingdom, Switzerland or another country with transfer rules is sent to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or on an adequacy framework such as the EU–US Data Privacy Framework where the recipient is certified. You can ask us for more information about these safeguards.
6. How long we keep it
- Enquiries that do not lead to an engagement: up to 24 months after our last contact, then deleted.
- Enquiries that lead to an engagement: for the duration of the engagement and afterwards for as long as the law or the engagement terms require.
- Technical and security logs: for the limited periods set by our hosting and security providers.
- Your cookie choice: 6 months, after which we ask again.
7. Security
We protect personal information with technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), strict security headers, access controls and data minimisation. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy of it;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- ask us to restrict how we use it, or object to our use of it, including where we rely on legitimate interests;
- receive the information you gave us in a portable format;
- withdraw your consent at any time, without affecting processing that took place before; and
- complain to a data protection authority: in Israel, the Privacy Protection Authority, or the authority where you live or work. We would appreciate the chance to address your concern first.
To exercise a right, email info@nkfintech-advisory.com. We may need to verify your identity before acting on a request. We respond within the time limits that apply to you, normally within one month. These rights apply under laws including the EU and UK GDPR, the Swiss Federal Act on Data Protection, Israel’s Privacy Protection Law, Brazil’s LGPD and Canada’s PIPEDA, and similar laws in other countries.
9. Notice for California and other US states
If you live in California or another US state with a comprehensive privacy law, you have the right to know what personal information we collect, to access, correct and delete it, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. You will not be treated differently for exercising these rights.
In the last 12 months we collected identifiers and professional information you provided (from the categories in section 2), and internet activity data. We do not sell personal information. We do not use advertising cookies or pixels, so we do not “share” personal information for targeted advertising. Authorised agents may submit requests on your behalf with proof of authorisation.
10. Cookies and similar technologies
We use essential cookies to run this website securely. Our Cookie Policy lists every cookie we use, its purpose and how long it lasts.
11. Children
This website is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version on this page with a new “last updated” date and, where the changes are significant, ask for your cookie choices again.
13. Governing law and jurisdiction
This policy and any dispute arising from it are governed by the laws of the State of Israel, including the Privacy Protection Law, 5741-1981, and its regulations, without regard to conflict-of-laws rules. The competent courts of the State of Israel have exclusive jurisdiction. This does not affect any mandatory rights you have under the data protection laws of the country where you live, including the right to complain to your local data protection authority.
14. Contact us
For questions about this policy or to exercise your privacy rights, contact us: