Privacy Policy, Sovereign Secrecy & Personal Data Protection
This Fiduciary Charter governs the collection, cryptographic encryption, compartmented retention, and sovereign protection of personal, institutional, and financial information entrusted to G.Mercury & Cie by public authorities, institutional investors (Limited Partners), family offices, and industrial executives.
1. Identity of the Fiduciary Data Controller
The controller of personal and institutional data collected through the https://gmercury-cie.com portal is G.Mercury & Cie, a Strategic Advisory, Financial Structuring, and Commercial Diplomacy firm headquartered at Ledger Hotel, BP 14559, Brazzaville, Republic of the Congo.
Any formal notification regarding personal data protection, the exercise of statutory rights, or audit inquiries may be addressed directly to the Compliance Officer and Executive College at: contact@gmercury-cie.com.
2. Applicable Legal Frameworks & International Standards
Given the cross-border nature of our mandates across Central Africa, the Gulf of Guinea, Europe, and North America, G.Mercury & Cie applies the highest cumulative standard of data protection:
- European General Data Protection Regulation (Regulation (EU) 2016/679 — GDPR) for all counterparties domiciled or operating within the European Economic Area;
- Swiss Federal Act on Data Protection (nFADP) and institutional private-wealth confidentiality standards;
- OHADA Uniform Acts & CEMAC Banking/AML Regulations (COBAC / GABAC) applicable to financial structuring and anti-money laundering compliance;
- AICPA SOC 2 Type II & ISO/IEC 27001 logical and physical security controls for our encrypted data rooms.
3. Categories of Data Processed & Strict Minimization Principle
G.Mercury & Cie collects only the information strictly necessary to evaluate an institutional referral, prepare a ministerial hearing, or accredit a qualified investor:
Full name, ministerial or executive title, institution/ministry/company name, professional email address, and direct telephone number voluntarily submitted via our contact form or audience scheduling tool.
Corporate registries, ultimate beneficial ownership (UBO) declarations, accredited investor certificates (MiFID II / LP), and executed Non-Circumvention & Non-Disclosure Agreements (NCNDA).
4. Total Client-Side Confidentiality of the Financial Simulators
All parameters, asset valuations, discount rates, debt ratios, and cash-flow assumptions entered into our three interactive simulators (For States, For Investors, For Enterprises) are computed exclusively locally in the volatile memory (RAM) of your web browser. No simulation figure is ever recorded, logged, or transmitted to our servers unless you explicitly choose to send a formal inquiry via the contact form.
5. Legal Bases & Purposes of Processing
- Explicit Consent: Processing of contact inquiries and subscriptions to our periodic sectoral intelligence briefings (checked voluntarily by the user);
- Pre-Contractual & Contractual Execution: Preparation of NCNDA protocols, structuring mandates, SPV documentation, and access to the Limited Partners Portal;
- Statutory & Regulatory Compliance: Mandatory verification of counterparty integrity under international AML/CFT (Anti-Money Laundering and Counter-Financing of Terrorism) standards.
6. Sovereign Secrecy, Non-Disclosure & Absence of Third-Party Monetization
G.Mercury & Cie never sells, rents, trades, or transfers any personal or institutional data to commercial third parties, data brokers, or advertising networks. Information relating to a mandate is accessible solely on a strict need-to-know basis by the Partners in charge of the dossier and, where required by the mandate, by externally retained legal, technical, or statutory audit firms bound by professional secrecy.
7. Cryptographic Security & Infrastructure Ring-Fencing
All communications with our digital infrastructure are protected by TLS 1.3 transport encryption. Documents hosted within our Limited Partners Data Room are encrypted at rest (AES-256) and watermarked with a SHA-256 cryptographic hash ensuring tamper-proof traceability.
8. Statutory Retention Periods
- Initial Contact Inquiries (without subsequent mandate): Retained for a maximum of twenty-four (24) months from the last exchange, then permanently purged;
- Executed Mandates, SPV Deeds & KYC/AML Records: Archived in a segregated vault for ten (10) years following the completion or maturity of the operation, in accordance with OHADA commercial law and international AML statutes;
- Newsletter Subscriptions: Retained until the subscriber clicks the unsubscribe link or requests removal.
9. Cookie Policy & Absence of Intrusive Trackers
The gmercury-cie.com website uses zero third-party advertising cookies, zero behavioral pixels, and zero cross-site tracking scripts. Only strictly necessary technical session storage (such as language preference or encrypted LP portal authentication state) is utilized.
10. Your Statutory Rights & Direct Referral Procedure
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw your consent at any time. To exercise these rights without intermediary, write to contact@gmercury-cie.com with the subject line [Personal Data Rights]. All requests are processed within thirty (30) calendar days.