Privacy Statement

1. Introduction & Commitment to Security

Consult TLV is committed to the highest global standards of data integrity and confidentiality. To protect your sensitive business information and strategic advisory communications, our operational infrastructure utilizes zero-access architecture and end-to-end encryption (E2EE). All core legal analyses and correspondence are processed through highly secure infrastructure anchored in Switzerland, benefiting from the strict standards of the Swiss Federal Act on Data Protection (FADP).

2. Scope of this Statement (Controller vs. Processor)

This Privacy Statement applies to the personal data we collect in our capacity as a Data Controller (e.g., website visitors, direct B2B contact information, and administrative billing records).

However, when we receive sensitive corporate intelligence, legal files, or raw data from our clients in the execution of an advisory mandate, we act strictly as a Data Processor on behalf of that client. The handling of such mandate data is governed not by this public statement, but by the strict confidentiality agreements, Data Processing Agreements (DPAs), and terms of engagement signed directly with each client.

3. Data Collection & Legal Basis

For data where we act as the Controller, we operate on a principle of data minimization, collecting only the information strictly necessary to fulfill our mandates. This includes:

• Client Information: Identity, contact details, and initial inquiry documentation.
• Administrative Data: Financial, billing, and compliance records.
• Technical Data: Minimal security logs strictly required to maintain website integrity. We do not use invasive tracking cookies or third-party marketing analytics on our web platform.

4. Cross-Border Transfers & Third Parties

As a consultancy handling mandates across Europe, Latin America, Asia, and the Middle East, data is processed internationally. Because our operations are anchored in Israel and utilize Swiss secure infrastructure, cross-border transfers to our firm benefit from recognized "adequacy decisions" by the European Commission, ensuring equivalent data protection to the GDPR.

Where necessary for other jurisdictions, we implement robust Standard Contractual Clauses (SCCs). We do not sell, trade, or monetize your data. Data is shared only with strictly vetted, contractually bound secure infrastructure providers. Furthermore, we maintain strict ethical governance frameworks regarding the secure, closed-environment use of Artificial Intelligence in our operations.

5. Data Retention & Secure Destruction

We do not store data indefinitely. Active files are retained only for the duration required to execute our service agreements or to satisfy statutory legal and financial reporting obligations. Upon expiration of these terms, electronic data is permanently purged from active systems and temporary caches, and any physical documentation is securely destroyed.

6. Your Global Privacy Rights

Depending on your jurisdiction (e.g., EU GDPR, UK GDPR, CCPA, and applicable regional frameworks), you hold statutory rights regarding your personal data. These include the right to access, rectify, restrict, or erase ("Right to Be Forgotten") your data, as well as the right to data portability and to object to certain processing.

To exercise these rights, or for any regulatory inquiries regarding our data handling and encryption protocols, please contact us at:

• Data Protection Contact: info@consulttlv.com
• Entity: Consult TLV
• Jurisdiction: Tel Aviv District, Israel