Privacy Policy

Last Updated: January 2026

MAK25 Global Limited (“MAK25 Global”, “we”, “us”, “our”) is committed to protecting the privacy and security of personal information provided by clients, prospective clients, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or engaging our advisory services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect and process personal information that you provide directly to us, as well as information generated through your use of our services and website.

Information You Provide Directly

When you engage with MAK25 Global, we may collect the following types of personal information:

Contact and Identity Information: Full name, date of birth, nationality, residential address, email address, telephone numbers, and passport or national identity document details.

Financial Information: Information regarding your financial circumstances, source of funds, investment capacity, and banking details where necessary for advisory purposes.

Professional Information: Employment history, professional qualifications, business interests, and career background.

Family Information: Details of family members who may be included in citizenship or residency applications, including spouses, dependent children, and other qualifying relatives.

Supporting Documentation: Copies of passports, birth certificates, marriage certificates, police clearance certificates, financial statements, tax records, educational certificates, and other documents required for application processes.

Communication Records: Correspondence with our team including emails, telephone calls, meeting notes, and consultation records.

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

Usage Data: Information about how you access and use our website, including pages viewed, time spent on pages, navigation paths, and referring websites.

Device and Browser Information: IP address, browser type and version, device type, operating system, and screen resolution.

Cookies and Tracking Technologies: We use cookies and similar technologies to enhance website functionality and analyse usage patterns. You can control cookie preferences through your browser settings.

How We Use Your Information

We process personal information for specific, legitimate purposes related to our advisory services and business operations.

Advisory Services and Client Support

We use your personal information to provide citizenship and residency advisory services, evaluate programme eligibility, prepare documentation, coordinate with authorised partners and licensed agents, and support your application processes. This processing is necessary to fulfil our contractual obligations and deliver the services you have requested.

Partner Coordination and Introductions

MAK25 Global works with strategic partners, authorised partners, licensed agents, and sub agents who support access to government citizenship and residency programmes. We share relevant personal information with these partners as necessary to facilitate introductions, coordinate application submissions, and support your advisory needs. All partner arrangements include confidentiality obligations and data protection requirements.

Legal and Compliance Obligations

We process personal information to comply with legal and regulatory requirements, including anti money laundering (AML) regulations, know your client (KYC) requirements, due diligence obligations, tax reporting requirements where applicable, and cooperation with government authorities and regulatory bodies when legally required.

Communication and Service Improvement

We use contact information to respond to enquiries, provide updates on your matters, send relevant information about programmes and services, conduct client satisfaction surveys, and improve our advisory processes and service quality.

Business Operations and Administration

Personal information supports essential business functions including contract management, billing and payment processing, risk management and professional indemnity insurance, internal record keeping, and business continuity planning.

Legal Basis for Processing

Under UK GDPR, we process personal information based on the following legal grounds:

Contractual Necessity: Processing is necessary to perform our advisory services contract with you or to take steps at your request before entering into a contract.

Legal Obligation: Processing is required to comply with legal obligations including AML regulations, KYC requirements, and regulatory reporting obligations.

Legitimate Interests: Processing is necessary for our legitimate business interests including providing effective advisory services, managing client relationships, improving service quality, protecting our business and legal rights, and preventing fraud. We balance these interests against your rights and freedoms.

Consent: In specific circumstances, we may seek your explicit consent for processing, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Information Sharing and Disclosure

We share personal information only when necessary for legitimate purposes and with appropriate safeguards in place.

Authorised Partners and Service Providers

We share client information with authorised partners, licensed agents, and sub agents who support citizenship and residency programme applications. These partners are bound by confidentiality obligations and process personal data according to our instructions and applicable data protection laws.

We also engage professional service providers including legal advisors, accountants, notaries, translation services, document authentication services, IT and cloud hosting providers, and payment processors. These providers are carefully selected and contractually bound to protect personal information.

Government Authorities and Regulatory Bodies

We disclose personal information to government citizenship and investment units, immigration authorities, financial regulatory bodies, and law enforcement agencies when required by law or necessary for application processing.

Business Transfers

If MAK25 Global undergoes a merger, acquisition, or sale of assets, personal information may be transferred to the acquiring entity, subject to continued protection under this Privacy Policy or an equivalent policy.

Legal Requirements

We may disclose personal information when required to comply with legal obligations, enforce our terms and conditions, protect our rights and property, prevent fraud or illegal activity, or protect the safety and security of our clients and employees.

International Data Transfers

MAK25 Global operates internationally and provides advisory services relating to citizenship and residency programmes in multiple jurisdictions. Personal information may be transferred to and processed in countries outside the United Kingdom and European Economic Area.

When transferring personal data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, adequacy decisions recognising equivalent data protection standards, and contractual obligations requiring recipients to protect personal data according to UK GDPR standards.

Citizenship and residency applications necessarily involve transfers to government authorities in destination jurisdictions. By engaging our services, you acknowledge and consent to these necessary international transfers.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, and protect our legitimate interests.

Client Records

Active client files are retained throughout the duration of our advisory relationship and application processes. Following completion or termination of services, client records are retained for a minimum of seven years to comply with professional obligations, regulatory requirements, and potential legal claims.

Prospective Client Information

Information from initial consultations and enquiries is retained for up to three years to support follow up communications and demonstrate compliance with professional standards.

Financial Records

Financial transaction records and invoices are retained for seven years in accordance with accounting and tax requirements.

Marketing Communications

Marketing communication preferences and contact information are retained until you unsubscribe or request removal from our mailing lists.

After applicable retention periods expire, personal information is securely deleted or anonymised so it no longer identifies individuals.

Data Security

MAK25 Global implements appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.

Security measures include encrypted data transmission and storage, secure cloud hosting with reputable providers, access controls limiting data access to authorised personnel only, regular security assessments and updates, staff training on data protection and confidentiality, secure document handling and destruction procedures, and regular backups to prevent data loss.

Despite these measures, no method of transmission or storage is completely secure. We cannot guarantee absolute security but continuously work to maintain and improve our security practices.

Your Rights

Under UK GDPR, you have the following rights regarding your personal information:

Right of Access: You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification: You may request correction of inaccurate or incomplete personal information.

Right to Erasure: You may request deletion of personal information in certain circumstances, subject to legal and regulatory retention requirements.

Right to Restriction: You may request that we limit processing of your personal information in specific situations.

Right to Data Portability: You may request transfer of personal information you provided to us in a structured, commonly used, machine readable format.

Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Right to Lodge a Complaint: You may lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.

To exercise these rights, please contact us using the details provided in the Contact Us section. We will respond to requests within one month, though complex requests may require additional time. We may request identification verification before processing requests.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance functionality, analyse usage patterns, and improve user experience.

Types of Cookies We Use

Essential Cookies: Necessary for website operation, enabling core functionality such as security, network management, and accessibility.

Performance Cookies: Collect anonymous information about how visitors use our website, helping us improve website performance and user experience.

Functional Cookies: Remember your preferences and settings to provide enhanced functionality and personalisation.

Analytics Cookies: Help us understand visitor behaviour, traffic sources, and content effectiveness through services such as Google Analytics.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For detailed cookie management instructions, please refer to your browser’s help documentation.

Third Party Websites

Our website may contain links to third party websites, including partner organisations, government authorities, and service providers. This Privacy Policy applies only to MAK25 Global’s website and services. We are not responsible for the privacy practices of third party websites. We encourage you to review the privacy policies of any external websites you visit.

Children's Privacy

MAK25 Global’s services are directed at adults. We do not knowingly collect personal information from children under 18 without parental consent. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information promptly.

Children’s information may be collected as part of family citizenship or residency applications, with parental or guardian consent and in accordance with applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. Material changes will be notified through our website or direct communication with active clients. The “Last Updated” date at the top of this policy indicates when it was most recently revised.

Continued use of our services following policy updates constitutes acceptance of the revised Privacy Policy.