RC
REGUCLEAR
Legal

Privacy Policy

Last updated: 16 March 2026

1. Who We Are

ReguClear Technologies Ltd ("ReguClear", "we", "us") is a risk intelligence platform operator registered in England & Wales. We process personal data in accordance with the UK GDPR, EU GDPR, and applicable African data protection laws.

2. Data We Collect

We collect information you provide when creating an account (name, email, organisation), usage data (pages visited, features used, log timestamps), and technical data (IP address, browser type, device identifiers). We do not sell personal data.

3. How We Use Your Data

We use your data to provide and improve the ReguClear platform, send service notifications and security alerts, comply with legal obligations, and provide customer support. We do not use your data for profiling or automated decision-making that produces legal effects.

4. Data Sharing

We share data only with: (a) trusted sub-processors necessary to operate the platform (e.g. cloud infrastructure, email delivery); (b) law enforcement or regulators when legally required. All sub-processors are bound by data processing agreements.

5. Data Retention

Account data is retained for the duration of your subscription plus 12 months. Audit logs are retained for the period specified in your plan. You may request deletion of your personal data at any time by contacting privacy@reguclear.com.

6. Data Residency

By default, data is stored in EU-West regions. African data residency (AWS Cape Town) is available on Premium and Government Suite plans. Contact us during onboarding to activate.

7. Your Rights

You have the right to access, rectify, or erase your personal data, object to or restrict processing, and data portability. To exercise any right, email privacy@reguclear.com. We respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication and session management, and optional analytics cookies (which you may decline). We do not use advertising or third-party tracking cookies.

9. Security

We implement industry-standard security controls including encryption in transit (TLS 1.3) and at rest (AES-256), role-based access control, and regular third-party penetration testing.

10. Changes to This Policy

We will notify registered users by email of any material changes to this policy at least 30 days before they take effect. Continued use of the platform constitutes acceptance.

Questions? Contact our Data Protection Officer at privacy@reguclear.com.