Privacy Notice
Last updated: 11 September 2026
Scope. This notice covers the WealthArc corporate website (wealtharc.com) and the associated marketing and sales tools, such as HubSpot. It does not cover the WealthArc SaaS platform, WealthArc Data Box, WISDOM, Prism, Creator, WealthArc Data Intelligence (WADI), or any customer production environment, all of which are governed by the applicable client agreements and data processing addenda. Careers and applicant data collected through our PeopleForce portal is governed by PeopleForce’s own privacy notice, linked at the point of redirect.
Who we are: the controller
WealthArc AG, a company incorporated in Switzerland with its registered office at Seefeldstrasse 35, 8008 Zürich, Switzerland, is the primary data controller responsible for personal data processed through this Website and the associated marketing systems. WealthArc AG determines the purposes and means of processing, operates the Website, signs client and prospect agreements, and administers our shared HubSpot CRM instance.
WealthArc AG is a subsidiary of WealthArc, Inc., a Delaware holding company (“WealthArc, Inc.” or the “Parent”). WealthArc, Inc. does not itself operate the Website or the services described in this notice and is not a controller for the purposes of this notice, except to the extent described in section 4 regarding its US-based sales personnel.
References to “WealthArc,” “we,” “us,” or “our” in this notice mean WealthArc AG, unless specifically stated otherwise.
Group structure and operational roles
| Entity | Location and address | Role and relationship |
|---|---|---|
| WealthArc AG | Seefeldstrasse 35, 8008 Zürich, Switzerland | Data controller. Primary operating company; operates the Website, signs client contracts, and administers the HubSpot CRM. |
| WealthArc, Inc. | 966 Hungerford Drive, Suite 3B, Rockville, MD 20850, USA | US parent entity, data processor. Holding company; direct employer of US sales personnel supporting global business development under intra-group Standard Contractual Clauses. |
| WealthArc sp. z o.o. | Krakowskie Przedmieście 13, 00-071 Warsaw, Poland | EEA subsidiary, data processor. Sister subsidiary providing software development, customer support, and marketing services under an intra-group agreement with Standard Contractual Clauses. |
| Singapore sales contractor | Singapore | Independent contractor, data processor. Engaged directly by WealthArc AG under a service contract with Standard Contractual Clauses to support business development across Asia-Pacific. |
Personal data we collect and why
We collect personal data that you provide directly, for example through contact forms, demo requests, and newsletter subscriptions, and data collected automatically through cookies and tracking technologies.
Information collected through Website contact forms
When you fill out the information request form on our Website, we collect:
- Contact details: first name, last name, business email address, and telephone number.
- Organization details: company name and type of firm, such as family office, asset manager, private bank, or technology partner.
- Inquiry details: your reason for contact and any message you submit in the form text field.
- Consent preferences: your explicit selection regarding data processing to fulfill your request, and your optional opt-in to receive our periodical wealth management newsletter.
Purposes and legal bases
- Fulfilling inquiries and pre-contractual steps. To respond to demo requests and provide information about our solutions, including Connector, WealthArc Data Box, WISDOM, Prism, Creator, WealthArc Data Intelligence, and Portfolio Management System offerings. Legal basis (EU GDPR and Swiss FADP): performance of pre-contractual steps at your request, Art. 6(1)(b) GDPR and Swiss FADP Art. 6, or our legitimate interest in managing commercial inquiries.
- Marketing pipeline and sales management. To manage prospect relationships and conduct sales outreach through HubSpot. Legal basis: legitimate interests, Art. 6(1)(f) GDPR and Swiss FADP, in developing our commercial operations.
- Periodical industry newsletters. To send marketing materials and industry updates. Legal basis: your explicit consent, Art. 6(1)(a) GDPR and Swiss FADP. You may withdraw consent at any time using the unsubscribe link in any email.
- Website security and optimization. To secure, operate, and analyze Website performance. Legal basis: legitimate interests, Art. 6(1)(f) GDPR.
Singapore PDPA note. Personal data collected from business communications is handled in accordance with transparent PDPA standards. Business contact information used solely for commercial communications is processed pursuant to Section 4(2) of the PDPA.
Who has access to your data: personnel
Your data in our HubSpot CRM instance is accessed on a strict need-to-know basis by authorized personnel across our entities:
- Switzerland: employees of WealthArc AG, the controller.
- Poland (EEA): personnel of WealthArc sp. z o.o., providing sales-support and development services.
- United States: personnel of WealthArc, Inc., supporting US sales and business development.
- Singapore: independent sales contractors supporting Asia-Pacific business development.
All access is governed by binding written data processing terms and Standard Contractual Clauses.
International data transfers
WealthArc AG is located in Switzerland. Personal data is accessed from Poland (EEA), the United States, and Singapore. To ensure an adequate level of data protection across borders, all transfers outside Switzerland and the EEA rely on the Standard Contractual Clauses recognized by the Swiss Federal Data Protection and Information Commissioner, the Swiss-adapted SCCs, and on the EU Standard Contractual Clauses under Commission Decision 2021/914.
Data retention
We retain personal data only as long as necessary to fulfill the purposes described in this notice:
- Website form inquiries and leads: personal data provided through contact forms is retained for the duration of active commercial outreach. Inactive prospect records are securely deleted or anonymized 24 months after the last interaction.
- Newsletter subscriptions: retained until you withdraw consent or unsubscribe, plus a minimal suppression record to ensure your preference is respected.
- Cookies and technical data: session and persistent cookie retention durations are detailed in the Usercentrics preference center.
Your individual privacy rights
Switzerland, the EEA, and the United Kingdom (FADP and GDPR)
If you are subject to the Swiss FADP, the EU GDPR, or the UK GDPR, you have the right to access, rectify, or erase your data; to restrict or object to processing; to request data portability; and to withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with the Swiss FDPIC (fdpic.admin.ch) or with your local supervisory authority.
Singapore (PDPA)
Under the PDPA, you have the right to access and correct your personal data, or to withdraw consent for marketing communications. Contact gdpr@wealtharc.com to exercise these rights.
United States
Residents of US states with applicable comprehensive privacy laws, including California, Maryland, Virginia, Colorado, and Connecticut, have the right to know, access, delete, and correct personal data, and to opt out of targeted advertising or data sales. We recognize Global Privacy Control signals sent by browsers.
To exercise your rights, email gdpr@wealtharc.com.
Children’s privacy
This Website is directed strictly to B2B commercial professionals and does not knowingly collect data from individuals under 18 years of age.
Changes to this notice
We may update this notice from time to time. The “Last updated” date at the top reflects the effective date of revisions.
Contact us
Questions and requests about this notice may be sent to gdpr@wealtharc.com.
Primary controller
Seefeldstrasse 35
CH-8008 Zürich
Switzerland WealthArc, Inc.
US parent entity
966 Hungerford Drive, Suite 3B
Rockville, MD 20850
United States WealthArc sp. z o.o.
EEA subsidiary
Krakowskie Przedmieście 13
00-071 Warsaw
Poland