Data Privacy Notice for Investors

Why are you seeing this notice?

  • This Data Privacy Notice applies to you to the extent that applicable legislation or binding regulation relating to the protection of personal data in force in the European Union (EU), European Economic Area (EEA) or UK (including Regulation (EU) 2016/679 (the GDPR)) applies to our processing of your personal data or to the extent you are a located within the EU or EEA for the purposes of the GDPR.  If this Data Privacy Notice applies to you, you have certain rights with respect to your personal data under applicable EU data protection legislation, as outlined below.
  • You may need to provide Personal Data to us as part of your investment into Blackstone Mortgage Trust, Inc. (the “Company”).
  • We want you to understand how and why we use, store and otherwise process your Personal Data when you deal with us or our relevant affiliates.
  • Personal Data” has the meaning given in the EU data protection legislation and includes any information relating to an identifiable individual (such as name, address, date of birth or economic information).

Please read the information below carefully. It explains how and why Personal Data is processed by us.

Who is providing this notice?

The Company is committed to protecting and respecting your privacy.

The Company-related entities on whose behalf this privacy statement is made are: (i) the Company,(ii) The Blackstone Group Inc. and (iii) BXMT Advisors L.L.C. (together, the “Company Parties”).

Where we use the terms “we”, “us” and “our” in this Data Privacy Notice, we are referring to the Company and the Company Parties.

When you provide us with your Personal Data, the Company acts as a “data controller”. In simple terms, this means that:

  • we “control” the Personal Data that you provide – including making sure that it is kept secure
  • we make certain decisions on how to use and protect your Personal Data – but only to the extent that we have informed you about the use or are otherwise permitted by law

What Personal Data do we collect about you?

The types of Personal Data we collect and share depends on the product or service you have with us and the nature of your investment. This information can include or be related to:

  • name, date of birth, country(ies) of citizenship, mailing and permanent address, email address, and telephone number
  • photo identification, including passports, driving license, and other government-issued IDs
  • bank and brokerage account information, including routing and account numbers
  • social security number, national insurance number and tax identification number
  • source of wealth, employment information, education history, number of dependents and income
  • assets and liabilities
  • investment strategy, experience, and activity
  • risk tolerance and transaction history
  • internet protocol address
  • cookie identification 
  • information about your third-party representatives

The Personal Data collected about you will help us provide you with a better service and facilitate our business relationship. 

  • We may combine Personal Data that you provide to us with Personal Data that we collect from, or about you, in some circumstances. 
  • This will include Personal Data collected in an online or offline context.

Where do we obtain your Personal Data?

We collect, and have collected, Personal Data about you from a number of sources, including from you directly:

1. Personal Data that you give us
  • from the forms and any associated documentation that you complete when investing in our shares, as applicable
  • when you provide it to us in correspondence and conversations
  • when you make transactions with respect to the Company
  • when you purchase shares from us and/or tell us where to send money
2. Personal Data we obtain from others
  • publicly available and accessible directories and sources
  • bankruptcy registers
  • tax authorities, including those that are based outside the United Kingdom and the EEA if you are subject to tax in another jurisdiction
  • governmental and competent regulatory authorities to whom we have regulatory obligations
  • credit agencies
  • fraud prevention and detection agencies and organisations

Why do we process your Personal Data?

We process your Personal Data for the following reasons:

1. Contract
It is necessary to perform our contract with you to:
  • administer, manage and set up your stockholder account(s) to allow you to purchase shares in the Company
  • meet any contractual obligations we have to you
  • facilitate the continuation or termination of any contractual relationship between you and the Company, as applicable
  • administer and facilitate any other transactions between you and the Company
2. Compliance with law
It is necessary for compliance with an applicable legal or regulatory obligation to which we are subject to:
  • undertake due diligence
  • carry out verification, know your client (KYC), terrorist financing and anti-money laundering checks
  • verify the identity and addresses of our investors (and, if applicable, their beneficial owners)
  • comply with requests from regulatory, governmental, tax and law enforcement authorities
  • surveillance and investigation
  • carry out audit checks
  • maintain statutory registers
  • prevent and detect fraud
  • comply with sanctions laws
3. Our legitimate interests
For our legitimate interests or those of a third party to:
  • manage and administer your shares in the Company and any related accounts on an ongoing basis
  • assess and process any applications or requests made by you
  • open, maintain or close accounts in connection with your investment in the Company
  • send updates, information and notices or otherwise correspond with you in connection with your investment in the Company
  • address or investigate any complaints, claims, proceedings or disputes
  • provide you with, and inform you about, our investment products and services
  • monitor and improve our relationships with investors
  • comply with applicable regulatory obligations
  • manage our risk and operations
  • comply with our accounting and tax reporting requirements
  • comply with our audit requirements
  • assist with internal compliance with our policies and process
  • ensure appropriate group management and governance
  • keep our internal records
  • prepare reports on incidents / accidents
  • protect our business against fraud, breach of confidence, theft of proprietary materials, and other financial or business crimes (to the extent that this is not required of us by law)
  • analyse and manage commercial risks
  • seek professional advice, including legal advice
  • enable any actual or proposed, assignee or transferee, participant or sub-participant of the Company's or Company vehicles’ rights or obligations to evaluate proposed transactions
  • facilitate business asset transactions involving the Company or Company-related vehicles
  • monitor communications to/from us using our systems
  • protect the security and integrity of our IT systems
We only rely on these interests where we have considered that, on balance, our legitimate interests are not overridden by your interests, fundamental rights or freedoms.


Monitoring as described at (3) above

We monitor communications where the law requires us to do so. We will also monitor where we are required to do so to comply with our regulatory rules and practices and, where we are permitted to do so, to protect our business and the security of our systems.

Who we share your Personal Data with

Your Personal Data will be shared with:

1. Company associates
We share your Personal Data with our associates, related parties and members of our group. This is to:
  • manage our relationship with you
  • the purposes set out in this Data Privacy Notice
2. Company Managers, Depositories, Administrators, Custodians, Investment Advisors
  • delivering the services you require
  • managing your investment
  • supporting and administering investment-related activities
  • complying with applicable investment laws and regulations

Specific details of these third parties can be found in the relevant offering documents you have been provided with

3. Tax Authorities
  • to comply with applicable laws and regulations
  • where required by EEA tax authorities (who, in turn, may share your Personal Data with foreign tax authorities)
  • where required by foreign tax authorities, including outside of the EEA
4. Service Providers
  • delivering and facilitating the services needed to support our business relationship with you
  • supporting and administering investment-related activities
5. Our lawyers, auditors and other professional advisors
  • providing you with investment-related services
  • to comply with applicable legal and regulatory requirements

In exceptional circumstances, we will share your Personal Data with:

  • competent regulatory, prosecuting and other governmental agencies or litigation counterparties, in any country or territory
  • organisations and agencies – where we are required to do so by law

Do you have to provide us with this Personal Data?

Unless otherwise indicated, you should assume that we require the Personal Data for business and/or compliance purposes.

Where we collect Personal Data from you that is purely voluntary and there are no implications for you if you do not wish to provide us with it, we will indicate as such.

Some of the Personal Data we request is necessary for us to perform our contract with you and if you do not wish to provide us with this Personal Data, it will affect our ability to provide our services to you and manage your investment.

Sending your Personal Data internationally

We will transfer your Personal Data to our group members, limited partners of the Company and related parties, and to third party service providers outside of the EEA, which do not have similarly strict data protection and privacy laws.

Where we transfer Personal Data to other members of our group, or our service providers, we have put in place data transfer agreements and safeguards using European Commission approved terms.

Please contact us if you would like to know more about these agreements or receive a copy of them. Please see below for our contact details.

Consent – and your right to withdraw it

We do not generally rely on obtaining your consent to process your Personal Data.

If we do, you have the right to withdraw this consent at any time.

Please contact us or send us an email at at any time if you wish to do so.

Retention and deletion of your Personal Data

We keep your Personal Data for as long as it is required by us for our legitimate business purposes, to perform our contractual obligations, or where longer, such longer period as is required by law or regulatory obligations which apply to us.

  • We will generally retain Personal Data about you throughout the life cycle of any investment you are involved in
  • Some Personal Data will be retained after your relationship with us ends

As a general principle, we do not retain your Personal Data for longer than we need it.

We will usually delete your Personal Data (at the latest) after you cease to be an investor in any investment vehicle related to the Company and there is no longer any legal or regulatory requirement or other legitimate business purpose for retaining your Personal Data.

Your rights

You have certain data protection rights, including:

  • the right to access your Personal Data
  • the right to restrict the use of your Personal Data
  • the right to have incomplete or inaccurate Personal Data corrected
  • the right to ask us to stop processing your Personal Data
  • the right to require us to delete your Personal Data in some limited circumstances

From 25 May 2018, you also have the right in some circumstances to request for us to “port” your Personal Data in a portable, re-usable format to other organisations (where this is possible).

Concerns or queries

We take your concerns very seriously. We encourage you to bring it to our attention if you have any concerns about our processing your Personal Data.

This Data Privacy Notice was drafted with simplicity and clarity in mind. We are, of course, happy to provide any further information or explanation needed. Our contact details are below.

If you want to make a complaint, you can also contact the body regulating data protection in your country, where you live or work, or the location where the data protection issue arose. A list of the EU data protection authorities is available by clicking this link:

Contact us

Please contact us if you have any questions about this Data Privacy Notice or the Personal Data we hold about you.

Contact us by email at

Contact us in writing using the address below:

Blackstone Mortgage Trust Inc.
345 Park Avenue, 42nd Floor
New York, NY 10154

Changes to this Data Privacy Notice

We keep this Data Privacy Notice under regular review.

This Data Privacy Notice was last updated on April 1, 2019.