GDPR Compliance Notice

Last updated: August 9, 2026

This notice supplements our Privacy Policy and applies to personal data processed by IFXT, LLC about individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the UK GDPR/Data Protection Act 2018.

1. Controller

IFXT, LLC acts as the data controller for personal data processed in connection with its project-financing activities and website. Contact: info@ifxtllc.com.

2. Categories of Data and Sources

We process identity, contact, professional, transactional, KYC/AML, technical, and communications data, collected directly from you, from your organization, from public registries, and from vetted diligence and screening providers.

3. Purposes and Lawful Bases

Contract (Art. 6(1)(b)): evaluating, negotiating, and administering engagements.
Legal obligation (Art. 6(1)(c)): KYC, AML, sanctions screening, tax, and record-keeping duties.
Legitimate interests (Art. 6(1)(f)): operating and securing our services, preventing fraud and misuse, and managing our business, balanced against your rights.
Consent (Art. 6(1)(a)): where required, e.g., certain optional communications or cookies.

4. Recipients

Personal data may be shared with affiliates, professional advisors, financial counterparties, regulators, and processors (hosting, identity, e-signature, document control) under contractual safeguards. We do not sell personal data.

5. International Transfers

Where personal data is transferred outside the EEA/UK/Switzerland to a country without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) and, where appropriate, the UK International Data Transfer Addendum, together with supplementary technical and organizational measures.

6. Retention

We retain personal data only as long as necessary for the purposes for which it was collected, including regulatory, accounting, and record-keeping obligations and applicable limitation periods.

7. Your Rights

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right to withdraw consent at any time, without affecting prior processing (Art. 7(3))
Right to lodge a complaint with your local supervisory authority

To exercise any right, contact info@ifxtllc.com. We will verify your identity and respond within one month, subject to permitted extensions.

8. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects on you based solely on automated processing without human review.

9. Security

We implement appropriate technical and organizational measures to safeguard personal data, including access controls, encryption in transit, watermarking of controlled documents, and audit logging.

10. Contact and EU/UK Representative

General privacy inquiries: info@ifxtllc.com. If you require an EU or UK representative under Article 27 GDPR for a specific engagement, contact us and we will provide the applicable designation.