Last updated 7 June 2026
Kestrel Private (“Kestrel”, “we”, “us”) is a private-client residence and citizenship-by-investment advisory. We respect your privacy and handle personal information in line with the EU General Data Protection Regulation (GDPR) and South Africa’s Protection of Personal Information Act (POPIA). This policy explains what we collect, why, and your rights.
Kestrel Private is the data controller for the personal information you provide through kestrelprivate.com. We are an advisory firm, not a law firm; regulated legal, tax and immigration work is delivered by admitted local counsel whom we coordinate.
Information you give us through the strategy assessment, dossier requests and enquiry forms — such as your name, email, phone/WhatsApp number, nationality and residence, family structure, budget range, objectives and timeline. To verify a real contact we send a one-time passcode by email or SMS. We do not ask you to enter passport numbers, financial statements or source-of-funds documents on the website; those are only ever exchanged later, securely, within a formal engagement.
We also collect limited technical and usage data (device, browser, pages viewed, and marketing-campaign parameters) to operate and improve the site.
To provide the assessment and advice you request and to follow up on your enquiry (performance of, or steps toward, a contract); to verify your contact details (legitimate interest and your consent); and, where you have ticked the consent box, to keep you informed about relevant programmes (consent, which you may withdraw at any time). Special-category information (for example, criminal-record or health details relevant to a programme) is only ever collected later, within an engagement, on an appropriate lawful basis and with your explicit consent.
With service providers who process data on our behalf under contract — our database and email/SMS providers (for example, Supabase, Resend and Twilio) — and, only when you engage us, with the admitted local counsel and professionals coordinating your matter. We do not sell your personal information. We never reference or share your details with competing advisory firms.
Because residence and citizenship matters are cross-border, your information may be processed in countries outside your own. Where required we put appropriate safeguards in place for such transfers.
We keep enquiry and assessment data only as long as needed for the purpose collected and our legitimate business and legal-record requirements, after which it is deleted or anonymised. If you withdraw consent or ask us to delete your data, we will do so, subject to any records we must retain by law.
You may request access to, correction or deletion of your personal information, object to or restrict processing, withdraw consent, and (under GDPR) request portability or lodge a complaint with a supervisory authority. To exercise any right, email service@kestrelprivate.com.
We use access-controlled databases, encrypted transport, and least-privilege access to protect your information. No system is perfectly secure, but we take reasonable, industry-standard measures.
Questions about this policy? Write to service@kestrelprivate.com.