Privacy

Last updated: January 2026

Urrum is committed to protecting personal information and handling it with integrity, care and transparency.

This Privacy Policy explains how Urrum collects, uses, stores, shares and otherwise processes personal information in connection with its website, communications, business relationships, recruitment activity and other interactions with individuals and organisations.

By engaging with Urrum, using our website or otherwise providing personal information to us, you acknowledge that your information may be processed in accordance with this Privacy Policy.

If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at contact@urrum.com.

Who we are?

For the purposes of this Privacy Policy, “Urrum”, “we”, “us” and “our” refer to the Urrum entity responsible for the website or the relevant interaction with you.

Contact details:

Urrum

4, rue Colnett

Noumea, New Caledonia 98000

Email: contact@urrum.com

The information we collect

The information we collect depends on the nature of your interaction with us.

We may collect personal information such as:

• name;
• business contact details, including email address and telephone number;
• company name, title and professional role;
• correspondence and enquiry content;
• information submitted through contact forms or other website tools;
• identity, due diligence or onboarding information where relevant;
• information relating to directors, officers, beneficial owners or authorised representatives of counterparties;
• recruitment and application information where you apply for a role with us;
• technical and usage information relating to your use of our website, including IP address, browser type, device information and website interaction data.

We may also receive personal information from third parties, including employers, authorised representatives, public registers, service providers, screening providers, professional advisers or other legitimate sources connected to a business relationship or application.

How we use personal information?

We process personal information for legitimate business and operational purposes, including to:

• respond to enquiries, requests and communications;
• operate, maintain and improve our website;
• manage business relationships with clients, suppliers, consultants and other counterparties;
• assess and onboard business partners and service providers;
• support sourcing, procurement, contracts and commercial activities;
• carry out due diligence, compliance and risk management procedures;
• manage recruitment and evaluate applications;
• protect our legal, operational and commercial interests;
• comply with legal, regulatory and contractual obligations;
• investigate concerns, misconduct reports or other compliance matters where relevant.

We process personal information only where we have a valid legal basis to do so, including where processing is necessary for our legitimate interests, to comply with legal obligations, to enter into or perform a contract, or where consent is required and has been obtained.

Legitimate interests

Where we rely on legitimate interests, these may include:

• managing relationships and communications;
• operating and securing our website and systems;
• supporting our business development and service delivery activities;
• carrying out integrity, compliance and due diligence reviews;
• maintaining accurate records and sound governance;
• protecting URRUM, its personnel, counterparties and business interests;
• obtaining professional advice;
• preventing fraud, corruption, misuse or unlawful conduct.

Where we rely on legitimate interests, we consider the impact on individuals and seek to ensure that our processing is fair, proportionate and appropriate.

Who we share information with?

We may share personal information where necessary and appropriate with:

• other Urrum entities or affiliates involved in the relevant engagement;
• service providers supporting our operations, systems, recruitment, compliance or administration;
• professional advisers, including lawyers, accountants, auditors and consultants;
• clients, suppliers, subcontractors, consultants or counterparties where relevant to an engagement or contract;
• financial institutions and payment service providers;
• regulators, courts, law enforcement agencies or public authorities where required or permitted by law;
• prospective purchasers, investors or transaction counterparties in connection with a merger, sale, restructuring or transfer of business or assets.

When we share personal information, we take steps designed to ensure that it is handled securely and in accordance with applicable law.

International transfers

Urrum may operate across jurisdictions and may use international service providers, platforms and business partners. As a result, personal information may be transferred to, stored in or accessed from countries outside the country in which you are located.

Where personal information is transferred internationally, Urrum will take appropriate steps to protect it in accordance with applicable data protection law.

For more information regarding international transfers, please contact contact@urrum.com.

Data retention

Urrum retains personal information only for as long as is reasonably necessary for the purpose for which it was collected, unless a longer period is required or justified by law, regulation, contractual necessity, dispute risk, investigation requirements or legitimate business need.

Retention periods may vary depending on:

• the nature of the information;
• the purpose of processing;
• applicable legal or regulatory requirements;
• limitation periods;
• audit, investigation or contractual considerations.

Data security

Urrum takes appropriate technical, organisational and administrative measures designed to protect personal information against unauthorised access, misuse, disclosure, alteration or loss.

While no system can be guaranteed to be completely secure, we seek to apply a level of security appropriate to the nature of the information and the risks involved.

Your rights

Depending on the laws that apply to you, you may have rights in relation to your personal information, including the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of processing;
• object to certain types of processing;
• withdraw consent where processing is based on consent;
• request transfer of your personal information where applicable;
• lodge a complaint with a competent supervisory authority.

These rights are subject to applicable legal conditions and limitations.

To exercise any of your rights, please contact contact@urrum.com.

We may ask you to verify your identity before responding to your request.

Website use and cookies

Our website may collect technical and usage information and may use cookies or similar technologies to support functionality, performance, analytics and security.

Where required by law, non-essential cookies will only be used with your consent.

Further information may be provided in our Cookie Policy or cookie settings tool, where applicable.

Third-party links

Our website may contain links to third-party websites or services. Urrum is not responsible for the privacy practices, content or security of third-party websites. We encourage users to review the privacy notices of any external websites they visit.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, operational or business changes.

When changes are made, the effective date at the top of this page will be updated accordingly. We encourage you to review this Privacy Policy periodically.

Contact us

If you have any questions about this Privacy Policy, our privacy practices or the way we process personal information, please contact us.