GDPR Compliance

Entity Makers processes personal data under the following lawful bases:

• Contract: to deliver the formation, banking or compliance service you purchased.
• Legal obligation: to meet AML, KYC, tax and record-keeping requirements.
• Legitimate interest: to secure our services, improve them and communicate with existing clients.
• Consent: for marketing communications and non-essential cookies.

We process client data to prepare government filings, run identity verification, submit applications to banking and payment partners, deliver websites, and provide ongoing compliance support. A full record of processing activities is maintained by our Data Protection Officer.

Where processing relies on consent, we ask for it clearly and separately, and you can withdraw it at any time by emailing info@entitymakers.com or using the unsubscribe link in our marketing emails.

You can request a copy of the personal data we hold about you at any time. We respond within 30 days and provide the data in a portable format free of charge for the first request in any 12-month period.

If any personal data we hold is inaccurate or incomplete, tell us and we will correct it within 30 days.

You can request deletion of your personal data. Note that where we are legally required to retain records (for example, AML record-keeping for 5 years), we cannot fully erase those records until the retention period ends.

You can ask us to provide your data to you, or transfer it directly to another controller, in a structured, commonly used, machine-readable format.

You may object to processing carried out for our legitimate interests, including direct marketing. Where you object to direct marketing, we will stop immediately.

We apply appropriate technical and organisational measures including encryption at rest and in transit, multi-factor authentication, least-privilege access, staff training and regular vendor reviews.

Where data is transferred outside the UK/EEA, we rely on UK IDTA, EU Standard Contractual Clauses or adequacy decisions and apply supplementary safeguards.

Entity Makers is the data controller for the personal data we process about you. Our Data Protection Officer can be contacted at info@entitymakers.com. UK residents can complain to the Information Commissioner's Office (ICO); EU residents can complain to their local supervisory authority.