KYC Privacy Notice

This notice explains how Green Equity Partners Limited ("GEPL") processes the information and documents you submit through our KYC (Know Your Customer) counterparty onboarding form, separately from our general website Privacy Policy.

What we collect

Entity identity details (legal name, registration and tax identifiers, incorporation date), registered and operating addresses, beneficial ownership information, risk declarations (politically exposed person status, sanctions, adverse media, source of funds and wealth), and supporting identity documents (certificates of incorporation, passports or national IDs, proof of address, board resolutions, financial statements).

Why we collect it

We process this information to conduct customer due diligence consistent with FATF Recommendation 10, and beneficial ownership identification consistent with FATF Recommendations 24/25 and Bangladesh's Money Laundering Prevention Act 2012 and BFIU circulars, as part of establishing a business relationship with us. The legal basis for this processing is our legitimate interest in, and legal obligation regarding, anti-money laundering and counter-terrorist financing controls.

How we store it

Uploaded documents are stored encrypted at rest, outside our public website's file system, and are never reachable by a direct link — every access is through an authenticated request that is individually logged. Sensitive fields (your name, contact details, and risk-declaration narrative) are encrypted in our database. Beneficial owner names and dates of birth are never displayed by our internal review tools without a separate, individually logged action.

How long we keep it

An incomplete draft submission is deleted, documents included, if abandoned for 30 days. A declined or withdrawn submission has its identifying information erased one year after that decision, keeping only the reference number and outcome for our own records. Where a business relationship proceeds, we retain your information for five years after that relationship ends, consistent with Bangladesh MLPA 2012 s.25(1)(b), BFIU requirements, and FATF Recommendation 11's five-year minimum. Retention periods this long require a lawful basis for holding the data that long; ours is our legal obligation as a matter of anti-money laundering compliance.

Who we share it with

We do not sell this data. It is not shared with any third party except where required by law or regulatory request. Uploaded documents are not scanned for viruses on every hosting environment we operate in — where scanning is unavailable, our admin tools display this plainly rather than a false assurance.

Your rights

You may ask us to access, correct, or erase your information. An erasure request will be fulfilled once any applicable statutory retention period above has passed; if it has not, we will refuse the request and record why, which is itself the evidence the refusal was lawful. To exercise any of these rights, contact us at compliance@geplbd.com, quoting your submission reference.

Changes to this notice

We may update this notice from time to time. Each version is dated and retained.