Privacy Policy
Last updated: 3 October 2026
2. What data we collect. - Identity and contact: name, ID/passport details, address, date of birth, telephone, email. - Financial and debt data: loan agreements, statements, creditor correspondence, enforcement documents, income, assets, tax returns, company financials. - Authorisation documents: powers of attorney. - Platform and website data: account credentials, log data, IP address, device and browser information, cookies (see Cookie Policy). - Communications: emails, call notes, messages within the platform. - Special categories: we do not ask for health, religious, political or similar data. If such data appears in documents you provide (for example medical reasons for arrears), we process it only with your explicit consent and only where relevant to your matter.
3. Why and on what legal basis.
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Responding to enquiries and the free assessment | Pre-contractual steps at your request (6(1)(b)) |
| Providing the services under the Client Agreement | Performance of contract (6(1)(b)) |
| Client identification, invoicing, accounting | Legal obligation (6(1)(c)) — AML, tax and accounting law |
| Negotiating with creditors | Performance of contract; your written authorisation |
| Security, fraud prevention, defence of legal claims | Legitimate interests (6(1)(f)) |
| Anonymised statistical analysis to improve our negotiation models | Legitimate interests (6(1)(f)); data is anonymised so it no longer identifies you |
| Marketing emails to existing clients about our own similar services | Legitimate interests, with opt-out in every message |
| Marketing to prospects, non-essential cookies | Consent (6(1)(a)) — withdrawable at any time |
4. Who receives your data. - Our staff and cooperating attorneys working on your matter (Greek law firm; Bulgarian attorneys), bound by professional secrecy. - Creditors, servicers, funds and public authorities — only the information you have approved for the negotiation or filing. - Service providers acting as processors under written agreements: hosting, email, CRM, e-signature, accounting, analytics and advertising (see Cookie Policy). - Authorities, courts, auditors — where legally required. We do not sell personal data.
5. International transfers. Data is stored in the European Union. Where a provider processes data outside the EEA (for example some analytics or advertising providers), transfers are made under the European Commission’s Standard Contractual Clauses or an adequacy decision. Our UAE affiliate (Kepler Global Holding Limited) does not have access to client files.
6. Retention. Client files: 5 years after the matter closes, or longer where required (AML: 5 years from end of relationship; accounting: 10 years for accounting documents under Bulgarian law). Enquiries that do not become engagements: 12 months. Platform accounts: until deletion at your request plus 30 days. Marketing consents: until withdrawn.
7. Your rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Write to info@solvxcapital.net; we respond within one month. You may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or, if you live in Greece, the Hellenic Data Protection Authority (dpa.gr).
8. Security. See the Security & Confidentiality page: encryption in transit and at rest, two-factor authentication, role-based access, logging, EU hosting, incident procedure.
9. Automated decision-making. Our platform produces analytical scores and suggested strategies. These are always reviewed by a professional; no decision with legal effect on you is taken solely by automated means.
10. Children. Our services are not directed at persons under 18.
11. Changes. We publish the current version here with its date.