What we collect, why we hold it, how long we keep it, and what you can ask us to do about it.
R.R. Verantis, operating as a branch of ENOR SECURITIES, S.A. de C.V., is the controller of personal data processed through this site and through the client relationship. Contact details are in the footer.
Enquiry data you provide (name, contact details, jurisdiction, capacity, message); onboarding and due diligence data required by law (identity documents, source of wealth and source of funds, beneficial ownership, tax residence, sanctions and PEP screening); transactional and account data; communications with us, including recorded telephone lines where applicable; and technical data such as IP address, device and browser information.
To assess suitability and eligibility; to comply with AML, KYC, sanctions, tax reporting and other legal obligations; to perform the contract with you; to operate, secure and improve our services; and for our legitimate interests in managing risk and preventing fraud.
Regulators and public authorities where required; ENOR SECURITIES and entities within the same group; custodians, trustees, correspondent banks, brokers, exchanges and settlement systems necessary to execute your instructions and to route cross-border payments; professional advisers; and vetted technology and service providers under contract. We do not sell personal data.
Serving clients across jurisdictions requires transferring data internationally. Where we do so we use contractual and organisational safeguards appropriate to the receiving jurisdiction.
For the duration of the relationship and thereafter for the period required by applicable AML, tax and commercial record-keeping law — commonly a minimum of five years from the end of the relationship, and longer where a legal claim or investigation requires it.
Subject to applicable law you may request access, correction, deletion, restriction or portability, and object to certain processing. Some rights are limited where we are legally required to retain records — we cannot delete AML records on request. Write to your relationship manager or to the address in the footer.
We apply technical and organisational measures appropriate to the sensitivity of the data, including access control, encryption in transit and at rest, logging and periodic review. No system is entirely without risk.
If you are not satisfied with how we handle your data, write to us first. You may also contact the Superintendencia del Sistema Financiero of El Salvador, or the data protection authority of your own jurisdiction.
Tell us what you hold today and what you want it to do. A partner reads it and replies personally, usually within two business days.