Privacy policy

Last updated: 13 August 2026

BRIDGEGOLD ΜΟΝΟΠΡΟΣΩΠΗ ΙΚΕ ("Bridgegold", "we", "us" or "our") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, store and share personal information when you visit bridgegold.com, contact us, make an enquiry, or engage with us in connection with our services.

About Bridgegold
Bridgegold is a bespoke private investment group serving a small circle of families and investors seeking global access through residence, citizenship and real estate-linked routes.

For the purposes of applicable data protection law, the relevant entity is:

BRIDGEGOLD ΜΟΝΟΠΡΟΣΩΠΗ ΙΚΕ Registered Address: Kifissias Avenue 16, 11526 Athens, Greece Country of Registration: Greece VAT / Tax ID (ΑΦΜ): EL801010238 GEMI No.: 146883801000 Telephone: +30 211 198 9764 Email: [email protected] Website: www.bridgegold.com

Where BRIDGEGOLD ΜΟΝΟΠΡΟΣΩΠΗ ΙΚΕ determines the purposes and means of processing personal data, it acts as the data controller for the purposes of applicable data protection law.

Information We May Collect
Depending on how you interact with Bridgegold, we may collect and process information including:

Information you provide directly

This may include:

your name;
email address;
telephone number;
country of residence or nationality, where relevant;
information contained in enquiries or correspondence;
information about your residence, citizenship, investment or real estate interests;
identification, eligibility, financial or supporting information provided during an engagement; and
other information you voluntarily provide to us.
Where Bridgegold is engaged to assist with a particular matter, additional information may be required to assess eligibility, conduct due diligence, coordinate professional services or support an application.

We will only request information that is reasonably necessary for the relevant purpose.

Information collected through our website

When you visit our website, certain technical information may be collected automatically, such as:

IP address;
browser and device information;
operating system;
pages visited;
date and time of access;
referring website; and
cookie or similar technology information.
The precise information collected will depend on the technologies and cookies operating on the website.

How We Use Personal Information
We may process personal information to:

respond to enquiries and consultation requests;
understand your objectives and requirements;
assess potential residence, citizenship or real estate-linked routes;
provide or coordinate services you request;
communicate with you regarding an existing or prospective engagement;
coordinate with relevant professional advisers and service providers where necessary;
support document preparation, due diligence and application processes;
comply with legal, regulatory, compliance and record-keeping obligations;
protect Bridgegold, its clients and third parties against fraud, misuse or unlawful activity;
operate, secure and improve our website and services; and
send communications where we have an appropriate lawful basis to do so.
We do not use personal information for purposes incompatible with the reason for which it was collected unless permitted or required by law.

Legal Bases for Processing
Where applicable data protection law requires a lawful basis, including under the General Data Protection Regulation (GDPR), we process personal information on the following grounds:

Pre-contractual steps - when you submit an enquiry or request a consultation, we process your information as a step necessary prior to entering into a potential engagement.
Contract - where processing is necessary to perform an agreement with you or to provide the services you have engaged us for.
Legal obligation - where processing is necessary to comply with applicable law, regulation or compliance requirements, including due diligence, anti-money-laundering and record-keeping obligations.
Legitimate interests - where processing is reasonably necessary for our legitimate business interests, such as improving our services, protecting against fraud and maintaining website security, provided those interests are not overridden by your rights and interests.
Consent - where you have given us specific permission for a particular use, such as receiving marketing communications. You may withdraw consent at any time without affecting processing undertaken before withdrawal.
Where special-category personal data is processed, we will do so only where an appropriate legal basis and additional condition for processing applies.

Due Diligence and Compliance Information
Residence, citizenship and investment-related matters may require identification, eligibility, source-of-funds, source-of-wealth or other due-diligence information.

Where such information is required, it may be processed to assess an engagement, comply with applicable legal or regulatory requirements, support an application or facilitate checks performed by appropriately authorised third parties.

The information required will depend upon the relevant programme, jurisdiction and individual circumstances.

Sharing Personal Information
Where reasonably necessary for the purposes described in this Policy, we may share personal information with parties involved in providing or supporting our services, including:

legal and tax professionals;
regulated financial or banking professionals;
authorised agents and programme specialists;
property professionals and developers;
due-diligence and compliance providers;
government authorities and programme administrators;
technology, hosting, communications and security providers; and
other professional advisers or service providers involved in your matter.
Information will only be shared where there is an appropriate purpose and lawful basis for doing so.

We may also disclose information where required by applicable law, regulation, court order or competent authority, or where necessary to establish, exercise or defend legal rights.

Bridgegold does not sell personal information.

International Transfers
Given the international nature of residence, citizenship and investment matters, personal information may need to be transferred to, accessed from or processed in countries outside Greece and the European Economic Area ("EEA").

Where required by applicable data protection law, we will use appropriate safeguards for international transfers of personal data.

These safeguards may include an adequacy decision of the European Commission or appropriate contractual safeguards where applicable.

Data Security
We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy applicable legal, regulatory, compliance, accounting and legitimate business requirements.

The following approximate retention periods apply:

Enquiry details (name, contact information, initial correspondence): retained for up to 2 years from the date of the last interaction, unless an engagement follows.
Client records (engagement documentation, correspondence, advisory records): retained for the duration of the engagement and for up to 7 years following its conclusion, or longer where required by applicable law.
Compliance and due-diligence documents (identification, source-of-funds, eligibility records): retained for the period required by applicable anti-money-laundering, regulatory and record-keeping obligations, which may be 5 to 10 years or longer depending on the jurisdiction.
Website data (technical logs, analytics, cookie data): retained for up to 12 months, unless a longer period is required for security or legal purposes.
Retention periods may vary depending on the nature of the information, the service concerned and applicable legal obligations. Where personal information is no longer required, it will be securely deleted or anonymised.

Cookies and Similar Technologies
Bridgegold.com uses HubSpot tracking cookies for the purposes of analytics, lead attribution and website functionality.

These cookies enable us to understand how visitors interact with our website, attribute enquiries to their source and improve the user experience.

Consent will be obtained before activating non-essential cookies. Where applicable law requires it, a cookie notice or consent mechanism will be presented when you first visit the website, allowing you to accept or decline non-essential cookies.

Bridgegold does not currently use any additional third-party advertising, retargeting or social-media tracking cookies beyond HubSpot.

Automated Decision-Making
Bridgegold does not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals. All assessments relating to eligibility, suitability and engagement decisions involve human review.

Your Data Protection Rights
Subject to the GDPR and other applicable law, you may have rights including the right to:

obtain confirmation as to whether we process your personal data and request access to it;
request correction of inaccurate or incomplete personal data;
request erasure of personal data in certain circumstances;
request restriction of processing;
object to processing in certain circumstances;
withdraw consent at any time where processing is based on consent, without affecting processing undertaken before withdrawal;
receive certain personal data in a structured, commonly used and machine-readable format and request its transmission where the right to data portability applies; and
lodge a complaint with a competent supervisory authority.
These rights are subject to the conditions, limitations and exemptions provided by applicable law.

To exercise an applicable privacy right, contact:

[email protected]

We may request information reasonably necessary to verify your identity before responding to a request.

Supervisory Authority
As Bridgegold is registered in Greece, individuals may have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) where it is the competent supervisory authority.

You may also have the right to complain to another competent data protection supervisory authority depending on your circumstances and location.

Third-Party Websites
Our website may contain links to websites operated by third parties.

Bridgegold does not control and is not responsible for the privacy practices, security or content of third-party websites. You should review the relevant privacy information before providing personal data to those organisations.

Children
Bridgegold's services are not directed at children.

We do not knowingly seek to collect personal information directly from children through our website except where such information is lawfully required in connection with a family application and is provided by, or with the appropriate involvement of, a parent, guardian or authorised representative.

Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes to our services, technology, legal requirements or privacy practices.

The current version will be published on this page together with the date of the latest revision.

Contact
Questions about this Privacy Policy, the exercise of data protection rights, or Bridgegold's handling of personal information may be directed to: