Privacy Policy
Last updated: October 23, 2026
1. Data Controller
JRO Managed Accounts is the data controller responsible for the collection, processing, and security of your personal data. If you have any questions about how your data is handled, you may contact us through the My Data Request page.
2. Data We Collect
When you submit an application, we collect the following information: first name, last name, email address, country of residence, planned investment amount range, previous investment experience, primary investment objective, investment time horizon, any additional comments you provide, GDPR consent status and timestamp, and optional marketing consent. We do not collect sensitive personal data such as date of birth, nationality, or financial account details at the application stage.
3. Why We Collect Your Data
Your data is collected and processed solely for the purpose of reviewing your expression of interest, assessing your suitability for managed account services, contacting you regarding your application and investment opportunities, and complying with applicable legal and regulatory obligations. We do not use your data for any purpose beyond what is described here without obtaining additional consent.
4. How Your Data Is Stored
All personal data is stored in secure, access-controlled databases with industry-standard encryption. Access is restricted to authorized administrators only. Data is transmitted over encrypted connections (TLS/SSL). We do not share your personal data with third parties except where required by law or with your explicit consent.
5. Data Retention
We apply the following retention rules: Rejected applications are automatically deleted 12 months after the rejection date. Approved client data is retained in accordance with contractual and regulatory requirements for the duration of the client relationship and any legally required retention period thereafter. If you withdraw marketing consent, your marketing preferences are deleted immediately and you will no longer receive marketing communications. You may request deletion of your data at any time through the My Data Request page.
6. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights: Right of access — request a copy of the personal data we hold about you. Right to rectification — request correction of inaccurate or incomplete data. Right to erasure — request deletion of your personal data (the 'right to be forgotten'). Right to restriction of processing — request that we limit how we use your data. Right to data portability — receive your data in a structured, machine-readable format. Right to object — object to processing based on legitimate interests. Right to withdraw consent — withdraw your consent at any time without affecting the lawfulness of prior processing.
7. Exercising Your Rights
To exercise any of your rights under GDPR, please submit a request through our My Data Request page. You may request a copy of your data, request a correction, or request deletion. We will respond to your request within 30 days in accordance with GDPR requirements. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Need to access, correct, or delete your data?
Exercise Your Rights