1. Who we are
Substify B.V. is a company established in Curaçao. We provide substance infrastructure and related professional services for regulated financial operators.
For privacy questions, contact us at info@substify.com or write to Substify B.V., Willemstad, Curaçao.
2. Information we collect
We collect information you provide directly and information generated through your use of our website.
- Identity and contact details — name, company, email address, phone number, and message content when you enquire or book a consultation
- Professional context — role, organisation, and project details you choose to share
- Technical data — IP address, browser type, device information, and pages visited (via server logs and, where enabled, analytics)
- Cookie data — preferences and usage signals as described in our Cookie Policy
3. How we use information
We use personal data only for legitimate business purposes.
- To respond to enquiries and provide requested services
- To operate, secure, and improve our website
- To send service-related or consented marketing communications
- To meet legal, regulatory, or contractual obligations
- To protect our rights, users, and infrastructure against misuse
4. Legal bases
Depending on the activity and applicable law, we rely on one or more of: your consent; performance of a contract or pre-contractual steps; our legitimate interests (for example, securing our site and responding to business enquiries); and compliance with legal obligations.
5. Sharing and processors
We do not sell personal data. We may share information with trusted service providers who support hosting, email, analytics, or operations — under agreements that require appropriate protection — and with professional advisers or authorities where required by law.
6. International transfers
Substify operates from Curaçao and may process data in other jurisdictions where our providers are located. Where required, we use appropriate safeguards for cross-border transfers.
7. Retention
We keep personal data only as long as needed for the purposes collected, including legal, accounting, or reporting requirements. Enquiry records are typically retained for a limited business period unless a longer relationship or obligation applies.
8. Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. No method of transmission or storage is completely secure; we work to reduce residual risk.
9. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data; object to or restrict certain processing; withdraw consent where processing is consent-based; and lodge a complaint with a competent supervisory authority.
To exercise these rights, email info@substify.com. We may need to verify your identity before responding.
10. Children
Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change when we do. Continued use of the site after changes means you acknowledge the updated policy.