Legal
Privacy Policy
Last updated: 12 January 2026
1. Data controller
Orvexanova BV, with its registered office at Avenue Louise 287 box 4, 1050 Brussels (Belgium), registered with the Crossroads Bank for Enterprises under number BE 0789.456.123, acts as the data controller for the personal data collected through orvexanova.com.
2. Data we collect
We collect the data you provide through the newsletter form (first name and email address), as well as technical data such as IP address, browser type, language preference and visit statistics. For registered investors we collect additional identification data in order to comply with our legal obligations (KYC/AML).
3. Legal basis and purposes
Your data is processed on the basis of your consent (article 6.1.a GDPR) for marketing communications, on the basis of contract performance (article 6.1.b GDPR) and on the basis of legal obligations (article 6.1.c GDPR) when you invest through our platform. Purposes include: sending project updates, complying with anti-money-laundering regulations and improving our services.
4. Retention period
Newsletter data is kept for as long as you remain subscribed and up to 24 months after unsubscription. Investor data is kept for 10 years after the end of the relationship, in line with the Belgian Anti-Money-Laundering Act of 18 September 2017.
5. Recipients and transfers
Personal data is processed within the European Economic Area by approved service providers (hosting, email delivery, KYC providers). We do not transfer data to countries outside the EEA without appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. You can exercise these rights by sending an email to privacy@orvexanova.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels — contact@apd-gba.be).
7. Security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure. Our infrastructure is hosted in ISO 27001-certified data centres within the European Union.
8. Contact
For any question regarding this privacy policy you can contact our Data Protection Officer at privacy@orvexanova.com or by post at the address above.