Privacy policy
Last updated 30.10.2026Controller
Cherry-Hill Capital S.à r.l. (Kerdo), 20 Rue des Peupliers, L-2328 Luxembourg (RCS B283967) is the controller of personal data processed through this website and the partner platform. Contact: info@kerdo.io.
Data processed
| Context | Data | Purpose and legal basis |
|---|---|---|
| Contact form | Name, firm, email, message, professional-investor confirmation | Replying to the request; legitimate interest and pre-contractual steps (Art. 6(1)(b) and (f) GDPR) |
| Platform account | Email, name, firm, country, investor type, professional-investor declaration, access requests and confidentiality undertaking, sign-in events, documents downloaded | Providing the platform, checking access levels and keeping a record of access to confidential documentation; contract and legitimate interest (Art. 6(1)(b) and (f) GDPR) |
| Verification (KYC) | Identity and contact details, date of birth, nationality, address, tax residence, occupation or company details, beneficial owners, investor classification, source of wealth or funds, politically exposed person status, copies of identity documents, proof of residence and corporate documents | Verifying the identity and professional status of investors before giving access to confidential information and transactions; pre-contractual steps, legal obligations and legitimate interest (Art. 6(1)(b), (c) and (f) GDPR). Documents are stored in a private, encrypted area readable only by Kerdo. |
| Interests in opportunities | Indicative amount, currency, note | Following up on the interest expressed; pre-contractual steps and legitimate interest (Art. 6(1)(b) and (f) GDPR) |
| Kerdo briefing | Email, name, firm | Sending the newsletter; consent (Art. 6(1)(a) GDPR), which can be withdrawn at any time from the account page or by email |
| Website hosting | IP address and technical request data in server logs | Security and operation of the website; legitimate interest (Art. 6(1)(f) GDPR) |
The website does not use advertising or analytics cookies. The partner platform stores a session token in the browser’s local storage to keep the user signed in.
Processors
- Netlify, Inc. — website hosting and contact form processing
- Supabase, Inc. — platform database, authentication and document storage, hosted in the European Union
- The newsletter service provider used to send the Kerdo briefing
Where a processor transfers data outside the European Economic Area, transfers rely on the EU-U.S. Data Privacy Framework or standard contractual clauses.
Retention
Contact requests are kept for up to three years after the last exchange. Verification data and documents are kept for the duration of the relationship and for five years after it ends, the period applicable to identification records under anti-money-laundering rules, unless a longer period is required by law. Platform accounts are kept until the member closes the account or for the duration of the relationship, and deleted within twelve months of its end, except where a longer retention is required by law. Access logs are kept for five years.
Your rights
You may request access to, rectification or erasure of your data, restriction of or objection to processing, and data portability by writing to info@kerdo.io. You may lodge a complaint with the Commission nationale pour la protection des données (CNPD), Luxembourg.