LEGAL
This notice explains how Substify B.V. collects and uses personal data relating to website visitors, prospects, customer and agent contacts, suppliers and other business contacts. It should be read with applicable contracts and service-specific notices.
How Substify B.V. handles personal data
Substify B.V., registration number 175465, registered address: Pletterijweg z/n, Soli Deo Office Park, Curaçao, is responsible for the processing described in this notice unless a service agreement identifies Substify as a processor acting for a customer. Privacy enquiries and requests may be sent to info@substify.cw.
We process personal data where necessary to take steps at a person’s request, perform a contract, comply with legal and regulatory duties, protect security and legal rights, pursue legitimate business interests, or where valid consent is required and obtained. Purposes include responding to enquiries, onboarding, due diligence, service delivery, billing, support, security, fraud prevention, recordkeeping, service improvement and relevant business marketing.
Regulated or higher-risk relationships may require identity, ownership, source-of-funds, sanctions, adverse-media and licensing checks. We request only information reasonably necessary for the relevant purpose. Customers and agents must ensure they may lawfully provide information about directors, owners, staff, users and other individuals.
Substify is based in Curaçao and may use providers or serve customers in other jurisdictions. Personal data may therefore be accessed or processed outside Curaçao. Where required, we use contractual, organisational and technical safeguards appropriate to the transfer and the nature of the data.
We retain personal data only as long as reasonably necessary for the relevant service, legal, regulatory, tax, security and dispute-resolution purposes. Retention periods vary by record type and contractual relationship. Data may be retained longer where required by law, a legal hold or a competent authority.
We use reasonable technical and organisational measures designed to protect personal data, including access controls, confidentiality duties, secure systems and monitoring. No system is completely secure. Customers remain responsible for credentials, authorised users, endpoint security and prompt incident reporting.
Subject to applicable law and relevant exemptions, individuals may request access, correction, deletion, restriction or information about processing and may object to certain processing or withdraw consent. We may verify identity and retain data where a legal duty or overriding lawful basis applies. Complaints may be submitted to the competent Curaçao privacy supervisory authority.
We may send relevant business communications to existing contacts and prospects where legally permitted. Recipients may unsubscribe at any time using the message link or by contacting us. Service and legal notices are not marketing and may continue while a relationship remains active.
Our Cookie Notice explains the categories of cookies and similar technologies used on substify.cw and available choices. Website forms should not request confidential or highly sensitive information unless a secure channel is provided.
We may update this notice to reflect legal, operational or service changes. The current effective date and version will be published. Material changes will be communicated where required.
