Trust & data handling

Privacy, retention and security

How the Business Onboarding Portal handles your case information and documents. Version 2026-10-30.

What this portal holds

Your name, company, email and phone; your case reference, service type, stage, next action and follow-up dates; internal staff notes (never shown to you); the documents you upload; and a record of every change made to your case.


Who can see your case

You, and the Eastking representative assigned to your case. Administrators can see all cases in order to run the service. Other clients cannot see your case: every request is checked against the case’s owner before any data is returned. Staff see only cases assigned to them.


How documents are protected

  • Files are encrypted with AES-256-GCM before they are written to disk, using a key held outside the website files.
  • Each file is bound to your case, so an encrypted file copied to another case will not open.
  • Files are stored outside the public website folder. There is no public link to any uploaded document.
  • Downloads are authorised per request and recorded in the audit trail.
  • Identity and other requested documents accept PDF, JPG, PNG or WEBP, up to 15 MB each; file contents are checked against the extension.
  • The completed Client Service Request Form has its own upload field and accepts PDF only, up to 15 MB. It is attached only to your case, encrypted like other documents, and never emailed as an attachment.

Retention

Documents are deleted automatically after the periods below. A scheduled job enforces them, and each deletion is written to the audit trail.

Uploaded documents after a case closes
90 days
Abandoned or rejected uploads
30 days
Unconfirmed accounts
14 days
Audit metadata
7 years

Case metadata and the audit trail are kept longer than the files so Eastking can show what happened and when. Ask us if you want your case closed and your documents deleted sooner.


Email notifications

Emails tell you that a stage changed or that an action is needed, and link you to the portal. They never contain your documents, and no document is ever attached. Please do not reply with identity documents.


Search engines and public access

The portal requires sign-in and sends no-index instructions on every page. Uploaded files are not in the public website folder at all, so they cannot be indexed or guessed by URL.


Your choices

You can ask to see the information held about you, ask for a correction, or ask for your case to be closed. Write to info@eastkingglobalserviceslimited.com. If you believe your account has been accessed without permission, contact us immediately so the account can be locked and the audit trail reviewed.


Important informationEastking Global Services Limited is a trade-finance consultancy and facilitator, not a bank or instrument issuer. Any instrument is issued directly by a licensed bank, subject to that bank’s independent KYC, compliance review and approval. A case status is not a promise of issuance.

Eastking Global Services Limited · Privacy & retention · Download the service request form