Privacy Policy

1. Who We Are

Silk Road Partners ("SRP", "we", "us", "our") is a net zero-emission strategy and investment advisory firm with offices at De Kleetlaan 5BC, B-1831 Diegem, Belgium and in Hong Kong. We are the data controller for personal data collected through this website (www.silkroadpartners.eu).

For any privacy-related enquiries, please contact us at: [email protected]

2. What Personal Data We Collect

We collect the following categories of personal data:

• Contact form data: name, email address, company name, phone number, and message content when you submit an enquiry.
• Chatbot interactions: messages exchanged with our AI assistant, and optionally your name and email if you choose to provide them.
• Resource downloads: we track the number of downloads of our whitepapers and reports (no personal data is linked to individual downloads).
• Website analytics: anonymised usage data (pages visited, session duration, browser type) collected via Umami Analytics, a privacy-friendly, cookie-free analytics tool. No personal data or cross-site tracking is used.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR:

• Consent (Art. 6(1)(a)): for analytics cookies and chatbot data collection, where you have given explicit consent.
• Legitimate interest (Art. 6(1)(f)): for responding to contact form enquiries and improving our services.
• Contractual necessity (Art. 6(1)(b)): when processing is necessary to respond to a service request you have made.

4. How We Use Your Data

We use your personal data to:

• Respond to your enquiries and service requests
• Provide advisory services you have requested
• Send relevant information about our services (only with your consent)
• Improve our website and services through anonymised analytics
• Comply with legal obligations

5. Data Retention

We retain contact form submissions and chatbot conversations for a maximum of 24 months from the date of submission, unless a longer retention period is required by law or by an ongoing business relationship. After this period, data is permanently deleted from our systems.

You may request deletion of your data at any time by contacting us at [email protected].

6. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share data with:

• Service providers: our website hosting provider (Manus) who processes data on our behalf under a data processing agreement.
• Analytics: Umami Analytics — a privacy-first, self-hosted analytics solution that does not use cookies or track individuals across websites.
• Legal authorities: where required by applicable law or court order.

7. International Data Transfers

As Silk Road Partners operates across Europe and Asia, some data may be processed or accessed from outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your personal data.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Belgium, this is the Gegevensbeschermingsautoriteit (GBA).

9. Cookies and Analytics

This website uses Umami Analytics, a privacy-friendly analytics tool that does not use cookies, does not track individuals across websites, and does not collect personally identifiable information. It is fully GDPR-compliant by design.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking cookies. No cookie consent is required for our analytics as no cookies are set.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security audits of our software dependencies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically.

12. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact: