How we handle personal data.

Controller

ICB Investment & Consulting Bureau SA, Avenue Alfred-Bertrand 9, 1206 Geneva, Switzerland, is responsible for the processing described here. Privacy enquiries may be sent to privacy@icb-partners.com or to the registered office.

Personal data we process

Depending on how you interact with us, we may process your name, organisation, email address, telephone number, selected enquiry category and timing, message content, correspondence and any information you choose to provide. When you access the website, servers and security systems may record IP address, date and time, requested page, referring page, browser, device and operating-system information. The website also stores your cookie preference locally in your browser.

Please do not send confidential transaction documents, special-category data or information about third parties through the initial enquiry form unless we have agreed an appropriate channel.

Purposes and grounds

We process data to operate and secure the website; respond to enquiries; evaluate whether to accept a mandate; communicate with prospective and existing counterparties; establish, manage and document professional relationships; comply with legal, regulatory, accounting and record-keeping duties; and establish, exercise or defend legal claims. Processing is based on the performance or preparation of a contract, legal obligations, consent where requested, and the firm’s legitimate interests in operating and protecting its business.

Sources

We generally obtain data directly from you. Where appropriate for a potential or existing mandate, we may also receive professional information from your organisation, advisers, counterparties, publicly available registers or other lawful sources.

Recipients and service providers

Access is limited to persons who need the data for the relevant purpose. Data may be disclosed to the firm’s personnel, professional advisers, technology and hosting providers, email and document-management providers, security and support providers, and competent authorities where required by law. We do not sell personal data. Website typefaces are hosted with the site and are not requested from an external font provider.

Processing outside Switzerland

Service providers may process data in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries in which they or their subcontractors operate. Where the destination does not provide an adequate level of protection under Swiss law, we rely on recognised contractual safeguards or another lawful exception and apply appropriate technical and organisational measures.

Retention

We retain personal data only for as long as required for the relevant purpose. Unsuccessful initial enquiries are ordinarily deleted or anonymised when no longer needed, subject to a reasonable follow-up and claims period. Records connected with an accepted mandate, accounting, compliance or legal obligations may be retained for the applicable statutory or contractual period, commonly up to ten years after the end of the relationship. Security logs are kept for a shorter operational period unless an incident requires longer retention.

Security

We use proportionate organisational and technical measures intended to protect data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed completely secure.

Your rights

Subject to applicable law and its exceptions, you may request information about your personal data, access, correction, deletion, restriction, objection, data portability or withdrawal of consent. We may need to verify your identity. You may also contact the Swiss Federal Data Protection and Information Commissioner.

Changes

We may update this policy to reflect legal, organisational or technical changes. The version published here applies. Last updated: 13 July 2026.