Privacy Policy

Last updated — 13 June 2026

This Privacy Policy explains how The First China Investment and Trust Co., Ltd. (“FCT”, “we”, “us”) handles personal information collected through this website. It applies to visitors to the website only. The administration of client trust arrangements is governed separately by the relevant engagement documents and applicable regulation.

Who we are

The data controller is The First China Investment and Trust Co., Ltd., a licensed trust company incorporated in the Kingdom of Cambodia, with its registered office at 6th Floor, VTRUST Tower, Street 169, Sangkat Veal Vong, Khan 7 Makara, Phnom Penh. For any privacy matter, please write to admin@tfcinvesttrust.com.kh.

Information we collect

Information you provide

If you contact us by email, we receive the information you choose to send — typically your name, email address, and the content of your message.

Personal information collected in the course of a client relationship — including any information required to meet our due-diligence, anti-money-laundering, and regulatory obligations — is handled separately, under the relevant engagement documents and applicable law, and is not the subject of this website policy.

Information collected automatically

We use Cloudflare Web Analytics to understand, in aggregate, how this website is used. It is a privacy-focused service that does not use cookies, does not collect personal information, and does not build profiles of visitors; it reports anonymised, aggregate metrics only (such as page views, referring sites, country, and device type). Separately, our hosting provider may, for security and operational purposes, process limited technical data such as IP address, browser type, and the date and time of access in standard server logs.

Cookies

We do not set advertising or tracking cookies, and our analytics provider does not use cookies. If this changes in future, this policy will be updated and, where required, your consent will be requested.

Typefaces used on this website are served from our own infrastructure rather than a third-party font service, so no font-related data is shared with external providers.

How we use information

• To respond to enquiries and correspond with you;
• To maintain the security and proper operation of the website;
• To comply with applicable legal and regulatory obligations.

Legal bases (visitors in the EEA / United Kingdom)

To the extent the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases: your consent; our legitimate interests in operating and securing the website and responding to enquiries; and compliance with legal obligations.

Depending on where a visitor is located, other data-protection laws may apply — including the EU General Data Protection Regulation, the Personal Data Protection Act of Taiwan, data-protection regulation in the Kingdom of Cambodia, and applicable laws in other jurisdictions we serve. We seek to handle personal information in accordance with the laws applicable to us.

Sharing and disclosure

We do not sell personal information. We may share information with service providers who operate the website on our behalf (such as our hosting provider), and with regulators, authorities, or other parties where required by law or to protect our legal rights.

International transfers

Because our website infrastructure and service providers may be located outside your country, your information may be processed in other jurisdictions. Where required, we take steps intended to ensure an appropriate level of protection for such transfers.

Data retention

We retain personal information only for as long as necessary for the purposes set out above, or as required by applicable law and regulation. Where information is no longer needed, it is deleted or anonymised.

Your rights

Subject to applicable law, you may have the right to access, correct, update, or request deletion of your personal information, to object to or restrict certain processing, and to data portability. To exercise any of these rights, please contact admin@tfcinvesttrust.com.kh. You may also have the right to complain to a supervisory authority.

Security

We take reasonable technical and organisational measures intended to protect personal information against loss, misuse, and unauthorised access. No method of transmission or storage is, however, completely secure.

Children

This website is intended for a professional and institutional audience and is not directed to children.

Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised.

Contact

Questions about this policy or about how we handle personal information may be sent to admin@tfcinvesttrust.com.kh, or by post to the registered office above. For any data-protection matter, this is the contact point for the firm.