PRIVACY POLICY

Last updated: 01 June 2026

Bosfor ("Bosfor", the "Company", "we", "us", or "our") is committed to protecting the privacy of your personal data and processing your information in accordance with applicable data protection laws.

This Privacy Policy explains how your personal data is collected, used, stored, and protected through our website (the "Website"), consultancy services, communication channels, and business relationships.

Bosfor processes personal data in compliance with applicable data protection legislation, including, in particular, the UK General Data Protection Regulation (UK GDPR), the European Union General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and the Turkish Personal Data Protection Law ("KVKK").

1. Data Controller

The data controller responsible for the personal data processed under this Policy is:

Bosfor

Email: [bosfor@bosfor.co](mailto:bosfor@bosfor.co)

Website: [www.bosfor.co](http://www.bosfor.co)

2. Information We Collect

Depending on the nature of our activities, we may collect the following categories of personal data:

Identity Information

* Full name

* Date of birth

* Nationality

* Passport or identification details

* Marital status

Contact Information

* Email address

* Telephone number

* Residential address

* Correspondence address

Professional Information

* Profession

* Job title

* Company information

* Employment history

Financial Information

* Income and wealth information

* Banking information

* Investment portfolio information

* Payment and billing information

Immigration and Compliance Documentation

* Citizenship and residency information

* Immigration application documents

* Source of funds documentation

* Information required for Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures

Technical Information

When you visit our Website, we may automatically collect certain technical information, including:

* IP address

* Browser type

* Operating system

* Device information

* Pages visited

* Traffic data

* Cookie data

3. How We Collect Your Personal Data

We may obtain your personal data through the following methods:

* Contact forms on our Website

* Email correspondence

* Telephone conversations

* Video conference meetings

* Client onboarding procedures

* Contracts and application forms

* Third-party professional advisers

* Government agencies and competent authorities

* Cookies and analytics tools

4. Purposes for Processing Your Personal Data

Your personal data may be processed for the following purposes:

a) Service Delivery

* Providing consultancy services related to citizenship and residency by investment programs

* Delivering global mobility and immigration services

* Providing real estate and investment consultancy

* Providing tax planning and wealth structuring consultancy

b) Contractual Obligations

* Establishing and performing service agreements

* Processing payments

* Managing client files and records

c) Legal and Regulatory Obligations

* Complying with AML and KYC requirements

* Preventing fraud and money laundering

* Managing legal claims and disputes

* Responding to requests from regulatory authorities

d) Communications and Marketing

* Responding to your enquiries

* Sending newsletters

* Sending invitations to events and seminars

* Providing service updates

Where required by law, we will obtain your consent before sending marketing communications.

5. Legal Bases for Processing

Bosfor processes your personal data based on one or more of the following legal grounds:

* Your explicit consent

* The establishment or performance of a contract with you

* Compliance with legal obligations

* Protection of our legitimate interests

* The establishment, exercise, or defence of legal claims

6. Who We May Share Your Personal Data With

Where necessary, we may share your personal data with the following types of recipients:

* Law firms

* Notaries

* Tax advisers

* Banks and financial institutions

* Immigration consultants

* Real estate developers and intermediaries

* Government authorities and regulatory bodies

* Information technology and cloud service providers

* Compliance and due diligence service providers

We do not sell your personal data to third parties.

7. International Data Transfers

Due to the international nature of our activities, your personal data may be transferred to the United Kingdom, countries within the European Union, Turkey, or other jurisdictions where necessary for the provision of our consultancy services.

Appropriate safeguards are implemented for such transfers, including, where required, the use of European Commission Standard Contractual Clauses (SCCs) or equivalent protection mechanisms.

8. How Long We Retain Your Data

Your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law.

Certain documents may be retained for statutory retention periods due to immigration, tax, compliance, and regulatory obligations.

9. Your Rights

Subject to applicable law, you may have the following rights:

* Right to be informed

* Right of access

* Right to rectification

* Right to erasure

* Right to restrict processing

* Right to data portability

* Right to object to processing

* Right to object to automated decision-making

* Right to withdraw consent

To exercise your rights, please contact:

Email: [bosfor@bosfor.co](mailto:bosfor@bosfor.co)

10. Cookies

Our Website uses cookies to improve user experience, ensure security, and analyse website performance.

For further information about our use of cookies, please refer to our Cookie Policy.

11. Data Security

Bosfor implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of data transmission over the internet can be guaranteed to be completely secure.

12. Third-Party Websites

Our Website may contain links to third-party websites. Bosfor is not responsible for the content, privacy practices, or data protection measures of such websites.

13. Updates to This Policy

This Privacy Policy may be updated from time to time.

Any revised version will become effective from the date it is published on our Website. We therefore recommend that you review this Policy periodically.

14. Contact Us

If you have any questions, requests, or concerns regarding the processing of your personal data, please contact:

Bosfor

Email: [bosfor@bosfor.co](mailto:bosfor@bosfor.co)

Website: [www.bosfor.co](http://www.bosfor.co)

Global Mobility • Private Clients • Wealth Structuring

Bosfor