Effective date: [27th November, 2025]
Last updated: [27th November, 2025]
By using our website and services, you agree to the practices described in this Privacy Policy.
Who we are
Grilla Capital (“we”, “us”, “our”) is a scam-recovery service provider operating globally. Our website [www.grilla-capital.com] (“Site”) and our services (together, the “Services”) are owned and operated by the Company.
What personal information we collect
We may collect the following categories of personal information from you, directly or indirectly:
Identity & contact data: e.g., name, email address, phone number, mailing address, date of birth (where required).
Transaction & financial data: e.g., details of the alleged scam, amounts involved, trading platform, account numbers, wallet addresses.
Technical & usage data: IP address, browser information, device type, operating system, pages visited, time spent, click b++ehaviour.
Communication data: records of your communications with us (via email, phone, chat).
Sensitive personal data (where required): For example, when verifying your identity or handling regulatory-compliance checks, you may provide government-issued ID, proof of address or banking/crypto wallet evidence.
How we use your information
We use your personal information for the following purposes:
To provide the Services, including assessing your case, conducting recovery work, communicating with you.
To perform identity and fraud checks, risk mitigation, compliance with applicable laws and regulations.
To administer our relationship with you, including invoicing, payments, customer support, and record-keeping.
To monitor and improve our Site and Services, including analytics, security monitoring, detecting abuse, preventing fraud.
To comply with legal or regulatory obligations (e.g., anti-money-laundering, sanctions, tax).
To send marketing communications (only if you have opted in) about our services, industry updates or events.
Legal basis for processing
(If applicable under e.g. GDPR) We rely on one or more of the following legal bases for processing your personal data:
Your consent (where you’ve explicitly provided it).
Performance of a contract (i.e., providing the Services you engage us for).
Compliance with a legal obligation (e.g., AML/KYC laws).
Our legitimate interests (e.g., fraud detection, improving Services) provided your rights don’t override those.
Sharing your information
We may share your personal information with:
Service providers, vendors and subcontractors who support our Services (e.g., analytics providers, payment processors, identity verification firms).
Regulators, law-enforcement, or other governmental bodies when required by law or when we believe disclosure is reasonably necessary to protect rights, property, safety or interests of others.
Other parties involved in your recovery case (with your consent) such as legal advisors or counterparties.
We will not sell your personal information to third-parties for marketing purposes.
International transfers
Because we operate globally, your information may be transferred to, stored in, or processed in jurisdictions other than your own. Where required by law, we will ensure adequate safeguards (such as standard contractual clauses) are in place to protect your data.
Data retention
We will retain your personal information only for as long as it is necessary for the purposes set out above, and to comply with our legal obligations (e.g., record-keeping laws). After that we will securely delete or anonymise it.
Security
We implement reasonable technical and organisational measures to protect your personal information from unauthorized access, loss, misuse, alteration or destruction. However, no system is entirely secure and we cannot guarantee absolute security of the data.
Your rights
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
Access: request a copy of the personal information we hold about you.
Correction: request us to correct inaccurate or incomplete personal information.
Deletion: request erasure of your personal information subject to legal or contractual exceptions.
Restriction/objection: request that we restrict processing or object to processing on legitimate-interest basis.
Data portability: where applicable, obtain your personal information in a structured, machine-readable format.
Withdraw consent: where processing is based on your consent.
If you wish to exercise these rights, please contact us at the details below. We may ask you to verify your identity.
Cookies and tracking technologies
We use cookies and similar technologies on our Site: to recognize you when you visit, to track usage, to deliver content personalized to you, to monitor performance. You can manage cookie preferences via your browser settings or via the banner/tool on our Site.
Children’s data
Our Services are not intended for children under the age of [16/18]. If we become aware that we have collected personal data from a child under that age without parental consent, we will take steps to delete it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and may provide you with notice (e.g., by email or via the Site). We encourage you to review this policy periodically.
Contact us
If you have questions or would like to exercise your rights, please contact support@grilla-capital.com.