Legal

Privacy Policy

Last updated: 1 June 2026

1. Introduction

Acalution is committed to protecting the privacy and security of personal data entrusted to us by clients, prospective clients, business partners, suppliers, candidates, website visitors and other individuals with whom we interact.

This Privacy Policy explains how personal data is collected, used, disclosed, stored and protected when you visit our website, communicate with us, engage our services, participate in our business activities or otherwise interact with us.

This Privacy Policy reflects our current consulting, technology advisory and outsourced CTO business activities and applicable data protection requirements, including the Swiss Federal Act on Data Protection ("nFADP").

2. Who We Are

This website is operated by:

Acalution AG

Grafenauweg 8
6300 Zug
Switzerland

Registration No.: CHE-209.116.093
Telephone: +41 41 711 66 99

Acalution Pte. Ltd.

1090 Lower Delta Road
#05-10/11
Singapore 169201

Registration No.: 201436965M
Telephone: +65 6250 9559

For the purposes described in this Privacy Policy, Acalution AG and Acalution Pte. Ltd. may each process personal data in connection with their respective business activities and client engagements.

The Acalution entity with which you communicate, contract, engage, apply for a role or otherwise interact will generally be responsible for the processing of your personal data in relation to that activity.

For privacy-related enquiries, please contact: privacy@acalution.com

3. Scope of this Privacy Policy

This Privacy Policy applies to:

Visitors to our website;
Prospective and existing clients;
Representatives of clients and business partners;
Suppliers and service providers;
Job applicants and prospective contractors;
Individuals participating in consulting, transformation, technology or managed service engagements; and
Individuals who contact us through the website or by email.

This Privacy Policy does not apply to third-party websites that may be linked from our website.

4. Personal Data We Collect

Depending on the nature of our interaction with you, we may collect the following categories of personal data.

Identity and Contact Information

Name;
Employer or organisation;
Job title;
Business address;
Email address; and
Telephone number.

Professional Information

Curriculum vitae or résumé;
Professional qualifications;
Certifications;
Employment history; and
Project and industry experience.

Client and Engagement Information

Information relating to consulting engagements;
Programme and project information;
Business communications;
Service delivery information; and
Operational and support information.

Technical Information

When you visit our website, certain technical information may be collected automatically, including:

IP address;
Browser type and version;
Device information;
Operating system;
Referring website;
Date and time of access; and
Pages visited.

Communications Information

Email correspondence;
Contact form submissions;
Meeting notes;
Business communications; and
Service and support requests.

5. How We Use Personal Data

We may process personal data for the following purposes.

Business Operations

Responding to enquiries;
Managing client and business relationships;
Delivering professional services;
Managing projects and engagements;
Providing outsourced CTO services; and
Operating and supporting technology environments.

Contract Performance

Entering into contracts;
Performing contractual obligations;
Managing service delivery; and
Providing support and operational assistance.

Recruitment

Assessing candidates;
Managing recruitment activities; and
Evaluating professional qualifications and suitability.

Website Operations

Operating and maintaining the website;
Ensuring website security; and
Responding to requests submitted through the website.

Compliance and Risk Management

Complying with legal and regulatory obligations;
Protecting our rights and interests;
Managing disputes and claims; and
Maintaining information security.

6. Legal Basis for Processing

Where required by applicable law, personal data is processed on one or more of the following grounds:

Performance of a contract;
Steps taken prior to entering into a contract;
Compliance with legal obligations;
Legitimate business interests; and
Consent, where consent is required or obtained.

For individuals subject to Swiss law, personal data is processed in accordance with the Swiss Federal Act on Data Protection (nFADP).

7. Consulting, Transformation and Outsourced CTO Services

As part of our business activities, we may process personal data in connection with:

Capital markets and banking transformation programmes;
Securities finance and collateral management initiatives;
Fixed income and core banking projects;
Technology strategy and advisory services;
Architecture and infrastructure engagements;
Outsourced CTO services;
Managed technology and operational support services;
Hosting, cloud and infrastructure environments; and
Service delivery and project management activities.

In many cases, personal data processed within client projects remains under the control of the relevant client organisation.

Where Acalution processes personal data on behalf of a client, such processing is performed in accordance with contractual obligations, documented instructions and applicable legal requirements.

8. Infrastructure, Hosting and Third-Party Providers

To support our business operations and service delivery, we may engage third-party providers including providers of:

Cloud infrastructure and hosting services;
Identity and access management services;
Collaboration and communication platforms;
Security and monitoring services; and
Professional support services.

Such providers may process personal data on our behalf and are required to maintain appropriate technical and organisational measures to protect personal data and preserve confidentiality.

Where required, contractual safeguards are implemented to support compliance with applicable data protection requirements.

9. Disclosure of Personal Data

We may disclose personal data where reasonably necessary to:

Professional advisers;
Auditors;
Technology, hosting and infrastructure providers;
Service providers supporting our operations;
Regulatory authorities;
Courts, law enforcement agencies or government bodies where legally required; and
Acalution AG and Acalution Pte. Ltd. where necessary for service delivery, contractual performance, administration or legal compliance.

We do not sell personal data.

10. International Data Transfers

Given the international nature of our business, personal data may be transferred to and processed in countries outside the country in which it was originally collected.

Where personal data is transferred internationally, we implement appropriate safeguards consistent with applicable legal requirements, which may include:

Contractual safeguards;
Data processing agreements;
Adequacy mechanisms; and
Other recognised transfer mechanisms.

11. Automated Decision-Making

Acalution does not use personal data collected through this website for automated decision-making that produces legal effects or similarly significant effects on individuals.

12. Data Security

We maintain administrative, technical and organisational measures designed to protect personal data against:

Unauthorised access;
Unauthorised disclosure;
Loss;
Misuse;
Alteration; and
Destruction.

Such measures may include:

Access controls;
Authentication mechanisms;
Encryption where appropriate;
Network security controls;
Monitoring and logging;
Security policies and procedures; and
Personnel confidentiality obligations.

No method of transmission or storage can be guaranteed to be completely secure and therefore absolute security cannot be guaranteed.

13. Data Retention

Personal data is retained only for as long as necessary to:

Fulfil the purposes described in this Privacy Policy;
Deliver services;
Comply with legal, regulatory, tax or contractual obligations;
Resolve disputes; and
Enforce agreements.

Retention periods vary depending on the nature of the information and applicable legal requirements.

14. Your Rights

Subject to applicable law, individuals may have rights including:

Access to personal data;
Correction of inaccurate personal data;
Deletion of personal data where permitted by law;
Restriction of processing;
Objection to processing;
Withdrawal of consent where processing is based on consent; and
Data portability where applicable.

Requests may be submitted to: privacy@acalution.com

We may request information necessary to verify identity before responding to a request.

15. Cookies and Similar Technologies

Our website uses a limited number of cookies and similar technologies necessary for website operation, functionality and security.

Acalution does not currently use website analytics tools for visitor tracking or behavioural profiling.

Further information is available in our Cookie Policy.

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content or security of third-party websites and encourage users to review the privacy notices of those websites.

17. Data Breach Management

Acalution maintains procedures for identifying, investigating, managing and responding to security incidents and personal data breaches.

Where required by applicable law, affected individuals and relevant authorities may be notified.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, operational or business developments.

The most current version will be published on this website together with the date of last update.

19. Contact Us