Global Privacy Notice

Effective Date: May 11, 2026

Moelis & Company and its affiliates (“Moelis”, “we”, “us”, or “our”) collect information in connection with our business activities worldwide. Obtaining this information is important to our ability to conduct our operations and to deliver the highest level of service, but we also recognize that you expect us to treat this information appropriately. This Global Privacy Notice (“Notice”) describes how we collect, use, share, disclose, and otherwise process personal information.

Moelis is a global independent investment bank that provides innovative, strategic and financial advice to a diverse client base.

This Notice applies to personal information processed by Moelis in connection with our operations, including our advisory services, business relationships, website, communications, events, and other interactions with clients, counterparties, vendors, service providers, visitors, and other individuals acting in a professional or business capacity.

This Notice does not apply to personal information collected in connection with recruitment, employment applications, internships, or other employment-related matters. For information about how we process personal information in those contexts, please refer to Moelis’s candidate privacy disclosures, including applicable regional notices, available here.

Depending on the nature of the interaction and applicable law, one or more Moelis entities may act as a data controller with respect to personal information described in this Notice. The relevant Moelis entity will generally be the entity with which you have a relationship. Where required under applicable law, additional information regarding the identity of the controller may be provided in engagement documentation or upon request.

1. Categories of Personal Information We Collect

Depending on how you interact with us, Moelis may collect and process your personal information. In this Notice, “personal information” means any information that can help us identify you directly or indirectly, and as defined under applicable law. The personal information we may collect and process about you includes:

(a) Identifiers and Contact Information

Name, business contact details (such as email address, telephone number, and mailing address), professional title, employer, and similar identifiers.

(b) Professional and Business Information

Information relating to professional roles, corporate affiliations, business activities, transaction involvement, and communications with Moelis.

Information automatically collected through our website and related systems may include identifiers and online activity information, such as IP address, device and browser identifiers, operating system details, referring URLs, pages viewed, links clicked, and timestamps of access. We may also collect session and authentication-related data, cookie identifiers, and similar tracking information, as well as approximate location derived from IP address. This information is collected through cookies, log files, pixels, and similar technologies and is used for purposes such as operating and securing our services, analytics, and improving user experience.

(d) Compliance, Regulatory, and Due Diligence Information

Information collected to satisfy legal, regulatory, and professional obligations, including anti-money laundering (AML), know-your-customer (KYC), sanctions and watchlist screening, politically exposed person (PEP) status, beneficial ownership information, adverse media screening results, conflicts checks, regulatory reporting information, and related verification data.

(e) Sensitive Personal Information

In limited circumstances and where permitted by law, sensitive personal information, such as accessibility requirements, dietary information for events, or other information necessary to comply with legal or regulatory obligations.

(f) Information from Third Parties and Public Sources

Information obtained from counterparties, service providers, public records, regulatory authorities, or other lawful third-party sources in connection with our business activities.

(g) Communications

The content of communications with Moelis, including correspondence, meeting notes, and other interactions.

(h) Marketing or Subscription Information

Information related to marketing communications, event invitations, newsletters, and other business development outreach, as well as your preferences regarding such communications (including subscription status and opt-out requests).

(i) Security and Access Information

Information collected in connection with physical access to our offices or events, including visitor logs, identification information, CCTV footage, and building access control data, where permitted by applicable law.

We may be legally obliged to process certain personal information in order to perform services and business operations. Provision of personal information may also be required for us to perform our contractual obligations. If you choose not to provide us with the necessary personal information or to restrict us from processing personal information, we may not be able to meet our obligations or deliver the requested services.

2. How We Collect Personal Information

Moelis may collect personal information:

directly from individuals, including when engaging us to provide services, communicating with us, attending meetings or events, participating in business development activities, or otherwise interacting with Moelis;
automatically through our website and electronic communications, including through cookies and similar technologies and through our use of artificial intelligence and other software tools to automatically record, transcribe and summarize meetings and other interactions, as permitted by law;
from clients, counterparties, vendors, and other business partners, including information relating to individuals connected to those organizations in connection with our advisory and other services;
from publicly available sources, including professional networking platforms and other publicly accessible information;
from regulatory authorities, screening databases, or third-party due diligence providers, where necessary to comply with legal, regulatory, or professional obligations; and
through service providers acting on our behalf in connection with our business operations.

These categories of personal information collected will vary depending on the services provided and the context of the interaction.

3. How We Use Personal Information

Moelis processes personal information for legitimate business and commercial purposes, including:

providing advisory and related services;
managing business relationships and engagements;
operating, securing, and maintaining our systems and infrastructure, and technology;
communicating with clients, counterparties, and business contacts;
conducting due diligence, compliance checks, fraud prevention, and risk management activities;
complying with legal, regulatory, and professional obligations;
protecting the rights, safety, and security of Moelis, our personnel, and others;
supporting corporate transactions, including mergers, acquisitions, or reorganizations; and
marketing and business development activities where permitted by law.

Where required by applicable law, including the EU General Data Protection Regulation and the UK GDPR, we process personal information on the basis of one or more lawful grounds, including:

compliance with a legal or regulatory obligation;
performance of a contract or taking steps at your request prior to entering into a contract;
our legitimate business interests (including as set out above and except where such interests are overridden by your rights and interests, or applicable data protection laws); or
your consent, where required by law.

Where we rely on legitimate interests as a lawful basis, we conduct appropriate balancing assessments to ensure that our interests are not overridden by the rights and freedoms of affected individuals.

Moelis is subject to oversight by the U.S. Securities and Exchange Commission (“SEC”), the Financial Industry Regulatory Authority (“FINRA”) and other global regulatory authorities. As such, we use personal information to comply with applicable laws, rules and regulations including AML and counter-terrorist financing regulations, sanctions, anti-bribery and corruption laws, and customer identification, verification and due diligence requirements, including Know-Your-Customer (“KYC”).

Moelis may also use personal information to respond to regulatory inquiries, examinations, investigations, subpoenas and lawful requests from governmental or supervisory authorities.

Personal information processed for these purposes may be retained and disclosed to the extent necessary to comply with applicable legal and regulatory requirements, including recordkeeping and reporting obligations.

4. Cookies and Similar Technologies

Moelis uses cookies and similar technologies in connection with our website and online services. Cookies are small text files placed on a user’s device to enable website functionality, support security, enhance user experience, and collect information about website usage and performance. The information collected through cookies may include device identifiers, browser characteristics, browsing activity, and information about how users interact with the website.

We use cookies to help users navigate efficiently and perform certain functions on the website. Certain cookies are necessary to enable the basic functionalities of the website, while others help us analyze website traffic and usage, remember user preferences, and support content and advertising functionality where applicable.

Cookies may be session-based or persistent, depending on their purpose, and may be set either by Moelis (first-party cookies) or by third parties.

(a) Types of Cookies We Use

Moelis uses the following categories of cookies:

Necessary Cookies: Necessary cookies are required to enable the basic features and functionality of the website, such as maintaining security, managing network traffic, enabling secure log-in functionality where applicable, and storing cookie consent preferences. These cookies do not generally store directly identifiable personal information and cannot be disabled through the cookie preference center.
Functional Cookies: Functional cookies help support enhanced website functionality and personalization, including remembering user preferences and supporting certain third-party features.
Analytics Cookies: Analytics cookies help Moelis understand how visitors interact with the website by collecting information such as visitor numbers, traffic sources, pages viewed, and other usage metrics. This information helps us improve website functionality and user experience.
Performance Cookies: Performance cookies are used to understand and analyze website performance and key performance indicators in order to improve the operation and effectiveness of the website.
Advertisement Cookies: Advertisement cookies may be used to provide users with more relevant content or advertisements and to help analyze the effectiveness of communications or campaigns, where applicable.
Third-Party Cookies: Certain content and functionality on the website may be supported by third-party providers. These providers may set cookies or similar technologies on a user’s device in connection with embedded services, analytics, advertising, video content, or other integrated tools.

(b) Third-Party Technologies

Moelis uses third-party services and infrastructure that may deploy cookies and similar technologies, including providers that support website analytics, performance optimization, embedded content, security, and traffic management. These third-party cookies may be either session-based or persistent depending on their function and are subject to the applicable third party’s privacy policies.

Cookies used on the website may be:

Session cookies, which expire when a user closes their browser and are used to support core functionality; or
Persistent cookies, which remain on a user’s device for a defined period and are used for purposes such as analytics, performance monitoring, and recognizing returning users.

(d) Cookie Management

Moelis uses a cookie consent tool that allows users to accept, reject, or customize their cookie preferences by category. Where required by applicable law, non-essential cookies will only be placed on a user’s device with the user’s consent.

Users may choose to enable or disable certain categories of cookies through the cookie preference center. Necessary cookies are required for the operation of the website and therefore cannot be disabled through the consent tool.

Users may also manage or delete cookies through their browser settings. Please note that disabling certain cookies may affect website functionality or the user experience.

Additional information regarding the cookies used on the website, including cookie categories and purposes, is available through the cookie preference center or by contacting Moelis using the details provided at the end of this Notice.

5. Sharing and Disclosure of Personal Information

Moelis may disclose personal information to the following categories of recipients, as appropriate and permitted by law:

Moelis affiliates and related group entities;
service providers, vendors, and professional advisers;
clients, counterparties, and business partners;
regulators, law enforcement, courts, and governmental authorities;
parties involved in corporate transactions; and
other parties where necessary to protect Moelis’s rights or comply with legal obligations.

We may have shared personal information during the preceding twelve (12) months for these purposes.

Moelis does not sell personal information or share personal information for cross-context behavioral advertising.

6. International Data Transfers

As a global organization, Moelis may transfer personal information across jurisdictions in connection with its operations. Where required by applicable law, Moelis implements appropriate safeguards designed to protect personal information, including reliance on adequacy decisions, standard contractual clauses, and other lawful transfer mechanisms. Where required under applicable law, individuals located in the EEA or the UK may request additional information regarding the safeguards implemented for international transfers, including a copy of relevant standard contractual clauses, subject to appropriate redactions for confidentiality.

7. Data Retention

Moelis retains personal information for as long as reasonably necessary to fulfill the purposes described in this Notice, including for the establishment, management, and conclusion of business relationships; the provision of services; compliance with legal, regulatory, tax, accounting, reporting, audit, and recordkeeping obligations; risk management; and the establishment, exercise, or defense of legal claims.

Required retention periods vary depending on the nature of the personal information, the context in which it was collected, the existence of an ongoing business relationship, and applicable legal or regulatory requirements. In certain circumstances, personal information may be retained for extended periods where required or permitted by law, including in connection with regulatory inquiries, investigations, litigation, preservation obligations, or enforcement matters.

Where personal information is no longer required for the purposes for which it was collected, Moelis will take reasonable steps to delete, anonymize, or securely dispose of such information in accordance with applicable law and internal retention policies. However, Moelis may retain information as necessary to comply with legal obligations or where retention is otherwise permitted under applicable law.

8. Data Security

Moelis maintains reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. Access to personal information is limited to individuals who have a legitimate business need to know such information and who are subject to appropriate confidentiality obligations.

Notwithstanding these measures, no method of transmission over the internet or method of electronic storage is entirely secure. Accordingly, Moelis cannot guarantee the absolute security or confidentiality of information transmitted through electronic means, including email or other online communications. Communications sent over the internet may be subject to interception, loss, delay, or alteration, and Moelis disclaims liability to the extent permitted by law for damages arising from such transmissions.

If Moelis becomes aware of a material security incident involving personal information, we will notify affected individuals and, where required, relevant authorities, in accordance with applicable law.

9. Your Rights

Pursuant to applicable law, individuals may have certain rights in relation to their personal information. These rights may include:

the right to obtain confirmation as to whether we process personal information about you and to access such personal information;
the right to request correction of inaccurate or incomplete personal information;
the right to request deletion of personal information in certain circumstances (sometimes referred to as the “right to be forgotten”);
the right to request restriction of processing in certain circumstances;
the right to object to processing, including processing based on legitimate interests and, where applicable, processing for direct marketing purposes;
the right to data portability in certain circumstances; and
the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, where applicable; and
the right to complain to us about our handling of your personal information.

Where processing is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

These rights are subject to applicable legal limitations and exceptions. Requests may be submitted using the contact information below and are subject to identity verification and applicable legal requirements.

Depending on your location, you may also have the right to lodge a complaint with a supervisory authority or regulator if you believe that your personal information has been processed in a manner that does not comply with applicable law.

Without limitation:

European Economic Area (EEA): You may lodge a complaint with the data protection supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
United Kingdom: You may lodge a complaint with the UK Information Commissioner’s Office (ICO) or its successor authority.
Dubai International Financial Centre (DIFC): You may lodge a complaint with the DIFC Commissioner of Data Protection or its successor authority.
United States: Individuals may have the right, in certain circumstances, to submit complaints to applicable regulatory authorities, including state attorneys general.

Nothing in this Notice limits any rights you may have under applicable law to seek a remedy through the courts or through regulatory authorities.

10. California Privacy Rights

This section applies to California residents. For purposes of this section, “Personal Information” has the meaning set forth in the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”).

(a) Categories of Personal Information Collected

During the preceding twelve (12) months, Moelis may have collected the categories of Personal Information described in this Notice, including identifiers, professional and business information, internet or network activity information, compliance and due diligence information, communications, and, where applicable, sensitive personal information.

(b) Sources of Personal Information

Moelis collects Personal Information from the sources described in this Notice, including directly from individuals, automatically through our website and systems, from clients and counterparties, from service providers, from publicly available sources, and from regulatory or due diligence providers.

Moelis collects and uses Personal Information for the business and commercial purposes described in this Notice, including to provide services, manage business relationships, conduct compliance and risk management activities, operate and secure our systems, and comply with legal and regulatory obligations.

(d) Disclosure of Personal Information

During the preceding twelve (12) months, Moelis may have disclosed Personal Information to the categories of recipients described in this Notice for business purposes.

Moelis does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising.

(e) Sensitive Personal Information

To the extent Moelis collects sensitive personal information as defined under California law, such information is used only for purposes permitted by the CCPA and not for purposes that would require Moelis to provide a “Limit the Use of Sensitive Personal Information” right.

(f) California Privacy Rights

Subject to verification and applicable exceptions, California residents may have the right to:

request access to the categories and specific pieces of Personal Information collected about them;
request information regarding the categories of sources, business purposes, and categories of third parties to whom Personal Information was disclosed;
request correction of inaccurate Personal Information;
request deletion of Personal Information in certain circumstances; and
not be discriminated against for exercising rights under the CCPA.

These rights are subject to statutory limitations and exceptions, including where retention of Personal Information is necessary to comply with legal obligations, detect security incidents, exercise or defend legal claims, or otherwise as permitted under applicable law.

(g) Exercising California Rights

Requests to exercise California privacy rights may be submitted using the contact information provided below. Moelis may take reasonable steps to verify your identity and, where applicable, the authority of an authorized agent before responding to a request.

11. Children’s Information

Moelis’s website and services are not directed to children, and Moelis does not knowingly collect personal information from children, including those under the age of 13 where such threshold is relevant under applicable law.

12. Updates to This Notice

Moelis may update this Notice from time to time to reflect changes in legal requirements or business practices. Updates will be posted with a revised effective date.

13. Contact Us

If you have questions about this Notice or wish to exercise applicable privacy rights, please contact:

Moelis & Company
[email protected]
399 Park Avenue, 5th Floor
New York, NY 10022