Draft policy for legal and privacy review. Verified controller details, jurisdictions, subprocessors, retention periods, and contact information must be approved before production indexing.
Scope of this policy
This policy explains how RevoCompliance may collect, use, retain, disclose, and protect information when you visit the website, create an account, submit an enquiry, or engage a service.
Information we collect
Information collected depends on the service and the way you interact with us.
- Identity and contact information such as name, email address, telephone number, and country or region.
- Business information required for enquiries, formation, compliance, or technology work.
- Account, order, message, payment, and document activity within the client portal.
- Technical and usage information necessary for security, diagnostics, and consented analytics.
How information is used
- Provide, administer, and support requested services.
- Create and secure accounts, orders, messages, and document access.
- Communicate service updates and respond to enquiries.
- Process payments and maintain appropriate business records.
- Meet applicable legal, regulatory, security, and fraud-prevention obligations.
- Load optional analytics or marketing tools only after the appropriate consent.
Legal bases and consent
Where applicable, information may be processed to perform a contract, take requested pre-contract steps, meet a legal obligation, pursue a legitimate business interest, or act on consent. Consent can be withdrawn where processing depends on consent.
International data transfers
Because services may support clients and authorities in multiple countries, information may be processed outside the client’s country. Appropriate contractual, organisational, and technical safeguards should be documented before production.
Data retention
Information is retained only for as long as reasonably necessary for the relevant service, security, dispute, recordkeeping, and legal obligations. Final retention schedules must be approved against the jurisdictions in which RevoCompliance operates.
Security
RevoCompliance uses administrative, technical, and organisational measures intended to protect information. No internet transmission or storage system can be guaranteed to be completely secure.
Your privacy rights
Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to raise a concern with an applicable regulator. Requests can be submitted through the Contact page until a dedicated privacy address is formally approved.
Privacy contact
Use the RevoCompliance Contact page for privacy questions or rights requests. A verified privacy email and registered business address must be inserted before legal approval and production indexing.