Finest Estates Group, operated by Prydox LLC (Florida), is committed to complying with the EU General Data Protection Regulation (GDPR) when handling personal data of individuals located in the European Economic Area (EEA). We collect and process only the minimal personal information necessary to evaluate alignment and facilitate private, invitation-only advisory services.

1. Data We Collect

We collect only essential personal data through our website or communications:

Name

Email address

Optional note submitted via the Request Access form

No cookies, tracking, or third-party marketing tools are employed.

2. Purpose of Data Processing

Personal data is processed solely to:

Assess requests for access

Evaluate alignment with our mandate, values, and client profile

Facilitate private engagement in accordance with our invitation-only model

3. Legal Basis for Processing

We rely on the following lawful bases for processing personal data under GDPR:

Consent: Individuals voluntarily submit their information via the Request Access form.

Legitimate Interest: Processing is necessary to operate our private, invitation-only advisory in a secure and confidential manner.

4. Data Subject Rights

Individuals within the EEA have the following rights under GDPR:

Access: Request access to personal data held about you

Correction: Rectify inaccurate or incomplete data

Erasure: Request deletion of your personal data, subject to legal or regulatory obligations

Restriction of Processing: Request limitations on how your data is used

Data Portability: Request your data in a structured, commonly used format

Objection: Object to processing based on legitimate interests

Requests can be submitted via email to our secure contact address.

5. Data Storage and Security

Personal data is stored securely with access limited to authorized personnel

Reasonable technical and organizational measures are in place to protect against unauthorized access, loss, or disclosure

6. Data Retention

We retain personal data only as long as necessary to evaluate requests or comply with legal obligations. Individuals may request deletion of their data at any time.

‍