Privacy Policy

1. Who We Are

Sanctiq Ltd is the operator of the SanctionCheck platform.

For the purposes of data protection law, we act as:

• Data Controller for account and billing data
• Data Processor for sanctions search data processed on behalf of users

2. Data We Collect

Account Information

• Name
• Email address
• Company name
• Authentication data (via secure provider)

Search Data

• Names of individuals or entities searched
• Search parameters and results
• Timestamps and audit logs

Technical Data

• IP address
• Browser and device information
• Usage data

Billing Data

• Subscription details
• Payment status

3. How We Use Data

• Provide and operate the platform
• Perform sanctions screening searches
• Maintain audit logs for compliance purposes
• Manage accounts and authentication
• Process subscriptions and payments
• Improve and develop the service
• Comply with legal obligations

4. Legal Basis

• Contract – to provide the service
• Legitimate interests – to operate and improve the platform
• Legal obligation – where required for compliance

5. Data Sharing

We may share data with:

Service Providers

• Cloud hosting providers
• Authentication providers
• Payment processors

Sanctions Sources

• UK sanctions lists (OFSI)
• EU sanctions lists
• US sanctions lists (OFAC)

Legal Requirements

We may disclose data where required to comply with legal obligations or regulatory requests.

6. Data Retention

We retain data only as long as necessary:

• Account data: for the duration of your account
• Search logs: 12 months
• Audit records: as required for compliance

7. Data Security

We implement appropriate technical and organisational measures to protect data, including encryption, secure authentication, and access controls.

8. International Transfers

Where data is transferred outside the UK, appropriate safeguards are applied, including standard contractual clauses where required.

9. Your Rights

You have rights under UK data protection law, including:

• Access to your data
• Correction of inaccurate data
• Deletion of data
• Restriction or objection to processing
• Data portability

10. Third-Party Data

You may submit personal data relating to third parties when using the platform.

You are responsible for ensuring that you have a lawful basis for doing so. In such cases, we act as a data processor on your behalf.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page.

12. Contact

Sanctiq Ltd

support@sanctiq.io