At Capital Trust Asset, we collect and process information that is necessary to provide our services, maintain regulatory compliance, and ensure a secure client experience. The types of information we may collect include:
Personal Identification Information
Full name, date of birth, nationality, and identification documents (e.g., passport, driver’s license).
Contact Information
Email address, phone number, residential address, and business address.
Financial and Investment Information
Banking details, investment preferences, transaction history, risk profile, and account activity.
Technical and Usage Information
Device information, IP address, browser type, operating system, and activity logs when interacting with our digital platforms.
Compliance Information
Data required under anti-money laundering (AML), know-your-customer (KYC), and other applicable regulatory obligations.
Communication Records
Records of correspondence, inquiries, feedback, and communications with our support or advisory teams.
We collect this information directly from you, through your interactions with our services, or from authorized third parties as permitted by law. All data is collected strictly for legitimate business purposes and handled with the highest standards of confidentiality and security.
Capital Trust Asset uses the information we collect for the following legitimate purposes:
Service Delivery
To establish and manage client accounts, process transactions, and provide tailored investment solutions.
Regulatory Compliance
To fulfill obligations under applicable laws and regulations, including Anti-Money Laundering (AML), Know-Your-Customer (KYC), tax reporting, and other statutory requirements.
Risk Management & Security
To protect client assets, monitor suspicious activity, detect fraud, and ensure the integrity of our systems.
Client Communication
To correspond with clients regarding account updates, investment opportunities, service notifications, and other relevant communications.
Business Operations & Improvement
To conduct internal audits, data analysis, and performance reviews for the purpose of enhancing our services and operational efficiency.
Personalization
To tailor investment recommendations and services in line with client profiles, objectives, and preferences.
Legal Enforcement
To defend our legal rights, resolve disputes, and enforce agreements with clients and third parties.
All personal data is processed with strict adherence to confidentiality standards and is only retained for as long as necessary to fulfill the purposes outlined above or as required by applicable law.
At Capital Trust Asset, we treat client information with the highest level of confidentiality. We do not sell, trade, or rent personal data to unauthorized third parties. However, in the course of conducting our business, we may disclose information under the following circumstances:
Regulatory and Legal Obligations
We may disclose client information to regulatory authorities, law enforcement agencies, tax authorities, or other government bodies when required to comply with applicable laws and regulations.
Authorized Service Providers
We may share information with trusted third-party service providers who perform essential business operations on our behalf (such as IT support, payment processing, auditing, or compliance services). These parties are bound by strict confidentiality agreements and may only use the data for the specified purposes.
Business Partners
In certain cases, we may share limited information with financial institutions, custodians, or investment partners as necessary to facilitate transactions or provide investment services.
Corporate Transactions
In the event of a merger, acquisition, restructuring, or sale of assets, client information may be transferred as part of the transaction, subject to continued protection under this Privacy Policy.
Protection of Rights and Interests
We may disclose information to safeguard the rights, property, or safety of Capital Trust Asset, our clients, or others, including for fraud prevention and risk management purposes.
Any sharing of data is conducted with strict oversight, and we ensure that appropriate technical, contractual, and organizational measures are in place to maintain security and confidentiality.
At Capital Trust Asset, we are committed to protecting the confidentiality, integrity, and availability of client information. We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes and enforce agreements.
Retention Periods
Personal and financial information is retained for the duration of the client relationship and, where required, for a statutory period thereafter in accordance with applicable laws and regulations.
Once the retention period expires, data is securely deleted, anonymized, or archived in compliance with regulatory requirements.
Data Security Measures
We employ advanced technical and organizational safeguards to protect information against unauthorized access, alteration, disclosure, or destruction.
Security measures include data encryption, firewalls, secure servers, restricted access protocols, and continuous monitoring of our IT infrastructure.
Access Control
Client information is accessible only to authorized personnel and trusted service providers who require such access for legitimate business purposes and who are bound by confidentiality obligations.
Incident Response
In the unlikely event of a data breach, we will take immediate steps to contain the incident, investigate its cause, and implement corrective measures. Where required by law, we will notify affected clients and relevant authorities without undue delay.
We continuously review and enhance our data protection practices to ensure the highest standards of security and compliance with evolving regulatory requirements.
At Capital Trust Asset, we recognize and respect the rights of our clients regarding their personal information. In accordance with applicable data protection laws, you may exercise the following rights:
Right of Access
You have the right to request confirmation of whether we hold your personal data and to obtain a copy of such data, along with details on how it is being processed.
Right to Rectification
You may request the correction or updating of inaccurate or incomplete personal information we hold about you.
Right to Erasure (“Right to be Forgotten”)
Subject to legal and regulatory obligations, you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You may request that we limit the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested or the processing is unlawful.
Right to Data Portability
You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
Right to Object
You may object, at any time, to the processing of your personal data for direct marketing purposes or other processing based on legitimate interests.
Right to Withdraw Consent
Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
Right to Lodge a Complaint
If you believe your rights have been infringed, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
To exercise any of these rights, please contact us through the details provided in the Contact Us section of this Privacy Policy. We will respond to all valid requests within the timeframe required by applicable law.
If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which Capital Trust Asset processes your personal information, please contact us through the following channels:
Email: info@capitaltrustasset.com
Location: 800S, Salt Lake City, USA
All inquiries will be handled with the highest priority and in accordance with applicable data protection laws. We are committed to addressing your requests promptly, fairly, and transparently.