1. Data Controller
The Group holding entity is Run Capital Partners, registered in England and Wales (registered office: Exhibition House, Addison Bridge Place, London W14 8XP; company number [COMPANY NUMBER]). The holding does not itself carry out regulated activity; data is processed by the operating entity you engage with.
Depending on the service, the data controller is one of the following Group entities:
- RCP Global Markets — United Kingdom. FCA Appointed Representative, reference 1043763. Advisory, distribution, sport & wealth, and structured products partnerships.
- Run Asset Management S.à.r.l — Luxembourg. CSSF reference A00003107. Alternative investment funds, securitisation vehicles, holding structures.
- Run Capital Partners S.r.l — Italy. IVASS Section E, registration E000657518. Italian corporate consultancy and regulated insurance brokerage.
- 3DOTS Capital Advisory — New York (Group spin-off). Nasdaq-listing advisory for Southern European companies.
Where two or more entities act as joint controllers (for example, on a cross-border mandate), this will be made clear in the engagement documentation provided to you.
2. Data We Collect
We only collect personal data that you actively provide or that is strictly required to deliver a service. In practice, on this website that means:
- Contact form (homepage): name, email address, company, and the content of the message you submit, together with the professional-investor self-certification when applicable. The form is submitted via FormSubmit.co, which forwards it to info@runcapital.partners by email. We do not write contact-form submissions to a CRM or external database. Submissions are stored in our corporate inbox and processed manually by the Group team.
- Direct email and phone: the content of any correspondence you send us, plus your contact details.
- Website usage: a minimal language preference (“en”/“it”) saved in your browser’s local storage. The site does not currently load analytics, advertising, social, or behavioural-tracking technologies. See our Cookie Policy for detail.
If you go on to become a client of a regulated Group entity, additional personal data is collected under that entity’s own onboarding process and notice — typically identification data (name, date of birth, nationality, ID document), financial data (source of wealth, source of funds, bank details, tax residency), and the records required to satisfy AML/KYC obligations.
3. Lawful Basis for Processing
We process personal data under one or more of the following bases under UK GDPR and EU GDPR (Regulation 2016/679):
- Consent — when you submit the contact form or otherwise reach out, we process your data on the basis of the consent you provide by initiating contact. You can withdraw it at any time.
- Pre-contract / contract — processing necessary to respond to your enquiry, to enter into a mandate, or to perform an existing engagement.
- Legal obligation — AML, KYC, tax, FCA, CSSF, IVASS, and other regulatory obligations applicable to the relevant entity.
- Legitimate interests — managing the business, protecting against fraud and abuse, and securing our IT systems, balanced against your rights.
4. How We Use Data
Personal data is used to:
- Reply to your enquiry and assess whether and how we can work together.
- Deliver the service you have engaged the relevant Group entity to provide.
- Meet AML, KYC, tax, audit, and other regulatory reporting obligations.
- Communicate with you about your mandate and related matters.
- Maintain and secure our website and internal systems.
We do not use personal data for behavioural advertising, profiling, or automated decision-making. We do not currently operate a marketing newsletter or marketing-automation platform; if that changes, this policy will be updated and any email marketing will be sent only on an opt-in basis with a clear unsubscribe mechanism.
5. Sharing & International Transfers
We share personal data only where necessary, with categories of recipients including:
- Website processors: FormSubmit.co (contact-form delivery, only when you submit the form); Vercel Inc. (website hosting, with EU data-region routing where available). Web fonts are self-hosted on this domain — no third-party font service is contacted on page load.
- Service providers to the Group: depositaries, administrators, auditors, legal counsel, IT and operational providers who support the delivery of regulated services. All are bound by written confidentiality and data-processing terms.
- Regulators and authorities: FCA (UK), CSSF (Luxembourg), IVASS, Banca d’Italia, Consob, OAM, tax authorities, and law-enforcement bodies where required by law.
- Group entities: the other entities of the Run Capital Partners Group listed in section 1, where joint handling of a mandate is needed.
Where personal data is transferred outside the UK/EEA, we rely on adequacy decisions, the EU Standard Contractual Clauses, the UK International Data Transfer Agreement (IDTA), or other safeguards permitted by applicable law.
6. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected:
- Contact-form enquiries and unsolicited emails: retained for up to 24 months from the last interaction, then deleted unless they have given rise to an active engagement.
- Client records (AML/KYC): at least five years after the end of the business relationship, or longer where required by local law (UK: up to 5 years under MLR 2017; Italy: 10 years under D.Lgs. 231/2007; Luxembourg: as required by the applicable law on the fight against money laundering).
- Accounting and tax records: as required by UK, Luxembourg, and Italian fiscal law (typically 7–10 years).
- Website data: the language-preference local-storage value persists in your browser until you clear it; we do not retain any analytics records server-side because no analytics tooling is in use.
7. Your Rights
Under UK GDPR and EU GDPR you have the right to:
- Access the personal data we hold about you and obtain a copy.
- Request correction of inaccurate or incomplete data.
- Request erasure, subject to legal and regulatory retention obligations.
- Object to or restrict certain processing.
- Request data portability for data you provided to us.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority — the Information Commissioner’s Office (ICO) in the UK, the Commission Nationale pour la Protection des Données (CNPD) in Luxembourg, or the Garante per la Protezione dei Dati Personali in Italy.
For privacy questions or to exercise any of your rights, write to info@runcapital.partners or by post to Run Capital Partners, Exhibition House, Addison Bridge Place, London W14 8XP, United Kingdom. Where you wish to address an enquiry to a specific Group entity, please mention it in your message.