Privacy notice

This notice explains what happens to the personal data you send through the enquiry form on amlrregulation.online.

Who we are

The controller is Shoulder Compliance, Malta ([registered address]). Contact: [DPO/contact email].

What we collect and why

Whatever you type into the form: typically your name, email address, company, a phone number if you give one, and your message. We use it to reply to you and to discuss possible services. Our legal basis is our legitimate interest in answering business enquiries and, where you ask for a call, steps taken at your request before a contract (Article 6(1)(f) and (b) GDPR).

How it is stored and shared

Submissions are stored in a Cloudflare D1 database and emailed to Shoulder Compliance in Malta. Cloudflare acts as our processor and may process data outside the EEA under the safeguards in its contract. We do not sell your data or use it for unrelated marketing. We may share it with professional advisers or IT providers who work under confidentiality terms.

How long we keep it

Enquiries that do not lead to an engagement are deleted after [retention period, e.g. 24 months]. Data from an engagement is kept for as long as our legal and professional duties require.

Your rights

Under the GDPR you may ask for access, correction, erasure, restriction or portability, and you may object to processing based on legitimate interest. Write to [DPO/contact email]. You can also complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta.