Privacy Policy

At Acuity Compliance & Enterprise Strategy (ACES), we value the trust you place in us when sharing information. We are committed to protecting the privacy and security of your personal data in accordance with the Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations.

Effective Date: April 2026

1. What Information We Collect

We collect data necessary to provide our risk and due diligence services. This may include:

• Contact Information: Your name, email address, phone number, and company details provided via our website inquiries or during engagement.
• Business & Due Diligence Data: Information obtained or provided to us to perform our investigative and due diligence services.
• Usage Data: Information collected automatically when you visit our website (e.g., IP address, browser type).

2. How We Use Your Data

We process your personal information for the following specific and legitimate purposes:

• To perform the risk assessments, due diligence reports, and consulting services you have engaged us for.
• To respond to your inquiries, provide updates, and manage our business relationship with you.
• To fulfill our legal and regulatory obligations.
• To protect our website and IT systems from unauthorized access.

3. Data Protection and Security

We implement strict organizational, physical, and technical security measures to protect your personal data from unauthorized access, alteration, or disclosure. We restrict access to your information to only those employees or partners who require it to perform their professional duties.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with third parties only when necessary, such as to service providers who assist in our business operations (bound by confidentiality agreements) or when required by law or government regulation.

5. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights:

• Right to be Informed: To know whether your personal data is being processed.
• Right to Access: To obtain a copy of the personal data we hold about you.
• Right to Object: To object to the processing of your data.
• Right to Correction/Rectification: To correct any inaccuracies.
• Right to Erasure or Blocking: To request the removal of your data where legally permissible.

6. Contact Us

If you have questions about this Privacy Policy, or if you wish to exercise your rights, please contact our Data Protection Officer (DPO):

7. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the updated policy on our website.