Privacy Policy

Orvela Holdings Ltd ('Orvela', 'we', 'our', or 'us') collects information necessary to evaluate, coordinate, and deliver boutique international business advisory services. Because of the bespoke nature of our cross-border advisory, we collect data directly from you and verified institutional sources.

The categories of personal and corporate data we may collect include:

• Identity and contact details: Full legal name, professional title, business email, physical address, and telephone coordinates.
• Corporate documentation: Incorporation records, ownership structures, ultimate beneficial ownership (UBO) declarations, and director registers.
• Regulatory & compliance records: Government-issued identification, proof of tax residency, and relevant source of wealth documentation for anti-money laundering (AML) and know-your-customer (KYC) verifications.
• Advisory correspondence: Meeting summaries, strategic briefs, transaction memoranda, and cross-border expansion objectives shared during advisory consultations.
• Technical telemetry: Anonymized IP addresses, browser specifications, and navigation timestamps when visiting our digital portal.

We process personal and corporate data in strict accordance with applicable global data protection frameworks, including the UK General Data Protection Regulation (UK GDPR), the EU GDPR, the Swiss Federal Act on Data Protection (FADP), and Singapore's Personal Data Protection Act (PDPA).

We rely upon the following lawful bases for processing your information:

• Contractual necessity: To perform formal advisory engagements, feasibility studies, and project structuring mandates.
• Legal & regulatory compliance: To satisfy multi-jurisdictional compliance, counter-terrorist financing obligations, and statutory reporting.
• Legitimate interests: To manage client relationships, safeguard operational integrity, prevent fraud, and refine our advisory practices.
• Explicit consent: Where required by law for specific communications or optional advisory notifications, which may be revoked at any time.

Your information is utilized solely to deliver disciplined strategic stewardship. We never sell, rent, monetize, or publicly distribute client data.

Specifically, information is processed to:

• Assess cross-border business setup requirements and structure international corporate holding entities.
• Coordinate trusted local legal counsel, chartered accountants, tax specialists, and licensing authorities across target jurisdictions.
• Facilitate trade execution, corporate transaction milestones, and fiduciary introductions.
• Maintain formal governance files and statutory client audit trails.

As an international advisory firm operating across key financial hubs—including London, Zurich, Singapore, and Riyadh—data may be transferred across borders to vetted professional counterparties required to fulfill your engagement.

All international data transfers adhere to rigorous legal safeguards:

• Adequacy decisions: Data transfers to countries recognized by relevant authorities as providing equivalent data protection standards.
• Standard contractual clauses: Incorporation of standard data protection clauses approved by the European Commission and the UK Information Commissioner's Office (ICO).
• Confidentiality protocols: Explicit bilateral non-disclosure agreements and secure transfer channels with every coordinated local specialist.

Discretion is the cornerstone of our advisory model. Orvela enforces comprehensive technical and organizational safeguards designed to protect sensitive strategic data against unauthorized access, loss, or disclosure.

Our security infrastructure includes end-to-end cryptographic encryption for data in transit and at rest, multi-factor authentication across all advisory systems, strict role-based access restrictions, and recurring independent vulnerability audits.

Our website uses minimal, privacy-centric cookies necessary for basic site navigation, secure session management, and aggregated performance metrics. We do not employ intrusive tracking pixels, behavioral advertising networks, or third-party profiling tools.

You can configure your browser to block or alert you to cookies; however, certain site features may have reduced functionality if essential cookies are disabled.

We retain personal and corporate information only for as long as necessary to fulfill the advisory purposes for which it was collected, or as required by applicable multi-jurisdictional legal, tax, and regulatory retention mandates (typically between 5 to 7 years following the conclusion of an advisory mandate).

Upon expiration of mandatory retention periods, records are securely expunged or permanently anonymized using verifiable data destruction standards.

Subject to local statutory exemptions and legal compliance obligations, you possess comprehensive rights regarding your personal data:

• Right to access: Request a structured copy of the personal information we hold regarding your profile.
• Right to rectification: Request correction of inaccurate, outdated, or incomplete records.
• Right to erasure: Request deletion of your personal data where retention is no longer legally required.
• Right to restriction & objection: Object to or request restriction of data processing under specific circumstances.
• Right to data portability: Request transfer of your data to another designated professional firm in a standard electronic format.