Privacy Policy

Last updated on 24/08/2026

1. Who We Are 

• • The Data Controller of Your Personal Data is WH Partners, a Maltese law firm having its registered address at Quantum House, 75 Abate Rigord Street, Ta’ Xbiex XBX1120, Malta (the “We” “Us” “Our”). The purpose of this Privacy Notice is to inform You of how We collect, process, use, store and protect Your Personal Data as well as the rights You have with respect to the processing of Your Personal Data.
  • This Privacy Notice sets out the terms under which We collect and process Your Personal Data.
  • By registering to the Digital Assets Regulatory Compass, You acknowledge reading and fully considering this Privacy Notice.
  • We acknowledge that in collecting Your Personal Data We are bound by the laws of Malta and will process Your Personal Data in accordance with the GDPR. For any further request or query about how We use Your Personal Data, You may address Us through the following email address: [email protected]

2. Definitions

Capitalised terms in this Privacy Notice shall have the meaning assigned to them under the GDPR, and shall be construed accordingly. Furthermore, the following definitions shall apply:

• GDPR – the General Data Protection Regulation (EU) 2016/679, of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC, as amended, replaced or superseded and in force from time to time.

• Service – the Digital Assets Regulatory Compass, a multi-jurisdictional guide series providing access to content relating to digital asset regulatory frameworks in various jurisdictions worldwide.

• Participant– any person who registers to access the Service (“You”, “Your”).

3. Types of Personal Data We Process

At the point of Your registration to access the Service, We collect and processYour  “Registration Data”, including the following:

• Name and surname;
• Position;
• Company
• Email address; and
• Any other Personal Data directly provided by You during Your interaction with Us.

4. Purposes and Legal Basis for Data Processing

We may process Your Personal Data where necessary for the performance of Our Terms and Conditions, for the following purposes:

• Registering and managing Your user account;
• Providing access to the Digital Assets Regulatory Compass and its content;
• Maintaining and securing the Service; and
• Communicating with You regarding Your account or use of the Service.

We may process Your Personal Data on the basis of Your consent for the following purposes:

• Commercial communications, marketing and advertising; and
• Sharing Your name, surname, position, company name and email address with firms that have contributed content to the Digital Assets Regulatory Compass, as identified in this Privacy Notice, where You have expressly consented to such sharing.

5. Data Recipients

For the execution of the purposes mentioned in this Privacy Notice, We may provide access or transmit Your Personal Data to the following recipients:

• Our internet and data hosting providers for hosting purposes; and
• Third-party providers for the smooth operation of Service.

Where the beforementioned recipients process Personal Data on Our behalf as Data Processors, such processing is governed by a contract requiring them to implement appropriate safeguards and maintain a level of protection consistent with applicable data protection laws.

Where you have expressly consented to the disclosure of your Personal Data to firms that have contributed content to the Digital Assets Regulatory Compass (“Contributing Firms”), We may provide access or transmit Your Personal data to the following recipients:

• Rajah & Tann Asia Singapore LLP;
• Segev LLP;
• Walkers (Bermuda) Limited;
• Ogier;
• Harneys;
• Mischon de Reya LLP;
• YYC Legal LLP in association with East & Concord Partners (Hong Kong) Law Firm;
• MME; and
• CLO.

In such cases, the following Personal Data may be shared: name, surname, position, company name and email address.

When we disclose Your Personal Data to Contributing Firms established outside of the European Union,  we will take all reasonable legal, technical, and organisational measures to ensure that Your Personal Data is adequately protected, at the same level as it would have been within the European Union, using relevant safeguards in the form of Standard Contractual Clauses issued by the EU Commission.

Where Your Personal Data is disclosed to a Contributing Firm pursuant to Your consent, that firm may process Your Personal Data as an independent controller for its own business and marketing purposes. Further information regarding the processing of Your Personal Data by such firms will be available in their respective privacy notices.

6. Data Security and Confidentiality

We apply internal policies and take all appropriate organizational, technical and procedural security measures, as well as technical standards, in accordance with applicable laws and regulations for the proper use and integrity of Your Personal Data and to prevent unauthorised or accidental access, processing, deletion, alteration or other use.

Your Personal Data is processed solely by Our authorised personnel, bound by strict obligations of  confidentiality, except where disclosure is made in accordance with this Notice.

7. Retention of Personal Data

We retain Your Personal Data for as long as is necessary to fulfill the relevant purposes of processing explained in this Notice, in accordance with the Data Minimisation and Storage Limitation principles.

Furthermore, We may retain Your Personal Data after the expiration of the relevant processing purposes for the following reasons:

• In case We have a legal obligation to retain Your Personal Data under a relevant statutory provision; and
• Based on Our legitimate interest to defend ourselves against any potential legal claims, before any competent court or public authority.

After the lapse of the retention period, Your Personal Data is erased from Our databases and systems.

For more information about data retention terms in relation to specific Personal Data, please contact Us at [email protected].

8. Your Rights

You have the right:

• To request access to Your Personal Data and information related to its processing and obtain a copy thereof;
• To request for the rectification of any inaccuracies or missing Personal Data;
• To request the erasure of Your Personal Data;
• To request the restriction of the processing of Your Personal Data in cases explicitly provided for by law;
• To request the portability of Your Personal Data to another Data Controller in a structured, commonly used and machine-readable format;
• To object to the processing of Your Personal Data in cases explicitly provided for by law;
• To object to a decision taken solely on the basis of automated processing, including profiling, which has impact on You or significantly affects You.

Any requests relevant to the above Section 8.1 must be addressed in writing to [email protected].

Whereby the legal basis for processing is Your consent pursuant to Section 4, You have the right to withdraw Your consent at any time in writing to Our contact details mentioned in Section 1 of this Notice or by ticking the ‘unsubscribe box’ which will be provided in all emails you will receive from Us. Withdrawal of Your consent does not affect the lawfulness of the treatment of Your data prior to its revocation.

If You feel that Your rights are infringed, You have the right to file a complaint with the Malta Office of the Information and Data Protection Commissioner at the following website: IDPC Complaint Form.

9. Your Obligations

By using the Service and by providing Your Personal Data, You acknowledge that You are required to provide Your actual, accurate and complete data as requested by Us.