Effective Date: 21 April 2026
Last Updated: 21 April 2026
MFSC Managements Limited (“MFSC”, “we”, “us”, or “our”) is committed to protecting your privacy and handling personal data responsibly and transparently.
This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit our website, contact us, request information about our services, engage us for business purposes, or otherwise interact with us.
By using our website, you agree to the terms of this Privacy Policy.
1. Company Information
Company Name: MFSC Managements Limited
Registration No.: HE 382400
Phone: +357 2301 0343
Email: info@mfsc-boaas.com
Address: 59 Nikou Pattichi, Ground Floor, 3070, Limassol, Cyprus
2. Scope of This Policy
This Privacy Policy applies to personal data collected through:
- our website;
- email or other direct communications;
- contact forms or inquiry forms;
- client onboarding and service discussions;
- supplier, contractor, and business partner interactions;
- operational support services we provide.
3. Personal Data We May Collect
We may collect and process the following categories of personal data:
Identity and Contact Information
- Full name
- Company name
- Job title
- Email address
- Phone number
- Postal address
Business Relationship Information
- Inquiry details
- Service interests
- Correspondence and communication history
- Contractual and billing information
- Business records relevant to our services
Compliance and Operational Information
Where relevant to the services we provide, we may process:
- Customer onboarding information
- Verification workflow data
- Compliance-related records
- Transaction review information
- Audit support documentation
Technical Information
- IP address
- Browser type
- Device type
- Pages visited
- Website usage data
- Cookie and analytics data, where applicable
Recruitment or Supplier Information
If you apply to work with us or provide services to us, we may collect information necessary to assess and manage that relationship.
4. How We Collect Personal Data
We may collect personal data:
- directly from you when you contact us or submit information;
- from your employer or organization during a business relationship;
- from clients when delivering services;
- from publicly available sources where relevant and lawful;
- automatically through website technologies such as cookies and analytics tools.
5. How We Use Personal Data
We may use personal data for the following purposes:
- to respond to inquiries and requests;
- to provide information about our services and products;
- to manage client, supplier, and partner relationships;
- to perform contractual obligations;
- to provide operational, compliance, onboarding, payment support, reporting, fraud, and back office services;
- to maintain internal records and business administration;
- to improve our website and services;
- to protect our systems, operations, and business interests;
- to comply with legal, regulatory, audit, and reporting obligations;
- to establish, exercise, or defend legal claims.
6. Legal Basis for Processing
We process personal data where there is a valid legal basis to do so, including:
- where processing is necessary to perform a contract or take steps before entering into a contract;
- where processing is necessary for our legitimate business interests;
- where processing is necessary to comply with legal or regulatory obligations;
- where you have provided consent, where consent is required;
- where processing is necessary to protect our legal rights.
7. Controller and Processor Roles
Depending on the circumstances, MFSC may act either as a data controller or a data processor.
When We Act as Data Controller
We act as a data controller in relation to:
- website visitor information;
- direct inquiries and contact requests;
- our own business administration;
- supplier and contractor data;
- marketing and relationship management communications.
When We Act as Data Processor
We may act as a data processor when we handle personal data on behalf of clients and under their instructions, including as part of outsourced back office, onboarding, compliance, or operational support services.
8. Sharing of Personal Data
We may share personal data with:
- professional advisers, consultants, and auditors;
- IT, hosting, and communications providers;
- payment, accounting, and administrative service providers;
- contractors, subcontractors, or business partners supporting service delivery;
- regulators, courts, law enforcement agencies, and public authorities, where required by law;
- clients, where relevant to the services being delivered.
We take reasonable steps to ensure that third parties handling personal data on our behalf do so securely and lawfully.
9. International Data Transfers
Where personal data is transferred outside the European Economic Area, we will take appropriate steps to ensure that such transfers are protected and carried out in accordance with applicable data protection laws.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including for:
- contractual and business needs;
- legal and regulatory obligations;
- audit and reporting requirements;
- dispute resolution and legal claims;
- operational record-keeping.
Retention periods may vary depending on the nature of the data and the purpose for which it is processed.
11. Data Security
We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include:
- access controls;
- secure systems and storage;
- confidentiality procedures;
- internal operational safeguards;
- vendor and service provider oversight.
While we take reasonable steps to protect personal data, no method of transmission or storage can be guaranteed to be completely secure.
12. Your Rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing activities;
- request transfer of your data where applicable;
- withdraw consent where processing is based on consent;
- lodge a complaint with the relevant supervisory authority.
To exercise any of these rights, please contact us at:
info@mfsc-boaas.com
We may request verification of your identity before responding to your request.
13. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
- ensure proper website functionality;
- improve security and performance;
- remember user preferences;
- analyze website traffic and usage.
Where required, we will seek consent before using non-essential cookies. You may also manage cookies through your browser settings.
A separate Cookie Policy may provide further details.
14. Third-Party Websites
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage users to review the privacy policies of any third-party websites they visit.
15. Children’s Privacy
Our website and services are intended for business and professional use. We do not knowingly collect personal data from children through our website.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, legal obligations, or website practices.
Any updates will be posted on this page with a revised effective date.
17. Contact Us
If you have any questions about this Privacy Policy or how we handle personal data, please contact us at:
Company Name: MFSC Managements Limited
Registration No.: HE 382400
Phone: +357 2301 0343
Email: info@mfsc-boaas.com
Address: 59 Nikou Pattichi, Ground Floor, 3070, Limassol, Cyprus
