We have structured our Website so that you can visit us on the internet without identifying yourself or revealing any personal information.

Once you choose to provide us with personal information, we will protect such information and use it only in the ways described below.

 The purpose of this Privacy Policy is to;

Set out the type of personal data Harley & Associates will collect from you and how we will use your personal information.

Set out the basis on which any personal data is processed by Harley & Associates

Make you aware of how Harley & Associates will handle your personal data

Inform you of your data protection rights

We process your personal data appropriately and lawfully, following applicable data protection regulations and the General Data Protection Regulation EU 2016/679 (the “GDPR”), which has been in force since 25 May 2018.

We will comply with local data protection laws in the jurisdictions we operate in and to do so, the personal information we hold about you must be:
Used by us lawfully, fairly, and in a transparent way
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes

Relevant to the purposes we have told you about and limited only to those purposes

Accurate and kept up to date
Kept only as long as necessary for the purposes we have told you about
Kept securely

A. The personal data we collect from you

While using this Website, you may contact our representatives and obtain information relating to the residence and/or citizenship programs or the services offered by Harley & Associates  and start the process of obtaining any of the services in which you may be interested.

We will collect and process the following personal data about you:
These are personal details and include your first name, last name, nationality, country of residence, e-mail address, and phone number. These details also include information on which services you are interested in or details about your enquiry

Such information may be provided by you in the following circumstance by Filling in an enquiry form on the Website.

B. How we use your information:
We shall use this information:

To facilitate the provision of the services that you request and where we need to perform the contract we are about to enter .

In any case Where we need to comply with a legal or regulatory obligation, we will contact you to let you know so you give us the permission to proceed. We can only proceed if your permission is granted through a written personal data privacy statement.
To resolve any issues that you have reported and to provide support-related services

C. Legal Basis for processing
We shall only process your personal data insofar as this is necessary for us to be able to provide the services we offer and/or for the purposes indicated in this Privacy Policy (see section B., ‘How we use your information’).

We may also process your personal data based on any legitimate interest or in order to comply with any legal obligations. These interests and obligations may include the exercise or defense of legal claims or in order to comply with an order of any court, tribunal, or authority, or disclosure to a government or regulatory entity. This must be in relation to performing the services you require from us. We will only proceed with such legal procedures after seeking your permission and received a written granted permission to proceed from you….

D. Disclosure of your information
We may disclose your personal data to any of our  offices or the companies that form partners with Harley & Associates . They may act as joint data controllers or data processors to the company. These offices or companies will be the data controller for your data when you obtain our services and/or they may provide administration, controls, and reporting services. All Harley & Associates companies respect and protect the security of your personal data in accordance with the applicable law (including the GDPR) and apply the security measures and safeguards as described below

E. We may need to share personal data with government agencies and authorities in the country where you seek to obtain residence or citizenship. We shall only provide the necessary information in order to perform services under our contract with you

We may be required to share your data with local agents or other service suppliers (in their capacity as data processors), which is necessary for us to provide the services you request. These local agents and suppliers store and process your data based on strict confidentiality and subject to the appropriate security measures and safeguards in place as described in section H. below.

We may also share your data with other third parties in their capacity as data controllers such as legal, tax, real estate, immigration or other advisors and consultants, (international) banks for payment details, or third parties providing other or additional services or goods to you such as real estate agencies, owners, or developers.

F. Transfers of data to third countries
Where we share your personal data with internal or external third parties, this may involve transferring your data outside the EEA. We will transfer your personal data in accordance with standard contractual clauses (namely, the European Commission: Model contracts for the transfer of personal data to third countries, also known as ‘SCC’) to ensure that your personal data is protected and transferred securely in compliance with applicable law, including the GDPR. These transfers will be strictly to countries who perform the services you require from us.

G. Data security
We will ensure that appropriate security measures are taken against unlawful or unauthorized processing of personal data, and against the accidental loss of or damage to personal data.

The transfer of information between our Website and your device is protected with transport layer security (TLS) certificates. When the Website is accessed using compatible browsers, that technology protects personal information using both server authentication and data encryption to ensure that personal information is safe and secure while in transit. The mainstream browser versions compatible with this technology are Internet Explorer (from version 11), the Mozilla Firefox (from version 27), Google Chrome (from version 32), and Apple Safari (from version 7).

All personal data is stored in a secure server environment that uses a firewall and other advanced technology to protect against interference or unauthorized access.  Usernames and passwords are issued to persons authorized to access the personal data, such as our employees, who are bound by confidentiality not to disclose any personal data.

H. Data storage
We shall only store your data as long as is strictly necessary for the purposes for which it was collected (that is, to provide you with our services or to satisfy any legal, accounting, or reporting requirements).

I. Your rights as a data subject
You are entitled to exercise the following rights under the GDPR

The right to correction

You have the right to obtain correction of any inaccurate personal data about you that we have processed, update any data that is out-of-date, and complete any incomplete personal data including by means of a supplementary statement

 The right to erasure

You have the right to obtain the erasure of personal data we have concerning you when it is no longer required, for cases where:

You withdraw your consent to us processing your personal data on which the processing is originally based or where no other legal grounds for processing exists

Your personal data is no longer necessary in relation to the purpose for which it was originally collected

Your personal data has been unlawfully processed..