Effective: March 31, 2026
Shorecrest Capital ("Shorecrest," "we," "us") is a multi-family office registered as a Registered Person under the Securities Investment Business Act (SIBA) of the Cayman Islands and regulated by the Cayman Islands Monetary Authority (CIMA). Our registered office is at 190 Elgin Avenue, George Town, Grand Cayman, KY1-9008, Cayman Islands.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit www.shorecrest.capital or engage with our services. We process personal data in compliance with the Cayman Islands Data Protection Act, 2017 (as revised) (the "DPA").
When you submit our contact form, we collect your first name, last name, email address, and the content of your message. This data is transmitted to our team via email and is not stored in a database.
When you use our retirement calculator and submit your results, we collect contact details (name, email, phone, company), financial scenario data (ages, balances, projected outcomes), and any notes you include. This data is transmitted securely via a Cloudflare Worker and stored in a Supabase database hosted in the United States (AWS us-east-1). Submissions are protected by Cloudflare Turnstile verification and server-side input validation.
When you visit our website, certain technical information is collected automatically through Cloudflare, including IP address, browser type, device type, pages visited, and referral source. We do not use third-party advertising trackers or social media pixels.
If you become a client, we collect additional data required for know-your-client (KYC) and anti-money laundering (AML) procedures, including government-issued identification, proof of address, source of wealth documentation, and tax residency information for CRS and FATCA reporting. Client data processing is governed by our engagement agreements.
| Purpose | Data Used | Legal Basis (DPA) |
|---|---|---|
| Responding to enquiries | Contact form submissions | Legitimate interest |
| Providing calculator results | Calculator submissions | Consent (voluntary submission) |
| Website security and performance | Technical data | Legitimate interest |
| Regulatory compliance | Client onboarding data | Legal obligation |
We do not sell personal data. We share data only with the following service providers, each of which maintains appropriate security standards:
| Provider | Service | Data Accessed |
|---|---|---|
| Cloudflare | CDN, WAF, DNS, Turnstile | IP addresses, traffic data, form tokens |
| Supabase | Database hosting | Calculator submissions |
| Microsoft 365 | Email, document management | Contact form messages |
| Claritas | Compliance (AML, audit) | Client data as required |
We may also disclose personal data where required by law, including to CIMA, the Cayman Islands Ombudsman, or tax authorities under CRS and FATCA obligations.
We implement appropriate technical and organisational measures to protect personal data, including TLS 1.2+ encryption for all data in transit, Cloudflare WAF and DDoS protection, Supabase Row Level Security, multi-factor authentication on all administrative systems, Content Security Policy headers, and server-side validation of all form submissions via Cloudflare Workers.
Under the Cayman Islands Data Protection Act, you have the right to access, rectify, erase, restrict processing of, and object to processing of your personal data. To exercise any of these rights, please contact us at the address below. We will respond within 30 days of receiving a verified request.
Our website does not use cookies for advertising or tracking. Cloudflare may set functional cookies for security purposes (bot detection). Our retirement calculator uses browser localStorage as a temporary client-side cache during your session; this data remains on your device and is not transmitted unless you explicitly submit your results.
Calculator submission data is stored in the United States via Supabase. Email is processed by Microsoft 365 infrastructure, which may involve data centres outside the Cayman Islands. Our service providers maintain SOC 2 Type II certifications and implement appropriate safeguards for cross-border data transfers.
Our services are not directed at individuals under 18. We do not knowingly collect data from minors. If you believe we have collected such data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the effective date at the top of this page.
Shorecrest Capital
190 Elgin Avenue, George Town
Grand Cayman KY1-9008, Cayman Islands
Email: info@shorecrest.capital
If you are unsatisfied with our response, you have the right to lodge a complaint with the Cayman Islands Ombudsman, who serves as the data protection authority under the DPA.