Privacy Policy

1. Introduction & Controller

Welcome to Riskfend Hub. We respect your privacy and are committed to protecting your personal data.

This privacy policy explains how Riskfend Ltd collects, uses, stores, and protects personal data when you visit our website, use our services, or communicate with us regarding our business services.

For the purposes of the UK General Data Protection Regulation (UK GDPR), the data controller is:

References to "we", "us", or "our" in this policy mean Riskfend Ltd.

Riskfend Ltd is registered with the UK Information Commissioner's Office (ICO) under registration number: ZC083240

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO). We would, however, appreciate the opportunity to address your concerns before you approach the ICO, so please contact us first.

2. Riskfend Hub as a Data Processor

Riskfend Hub provides a missed-call recovery and SMS relay platform that helps businesses reconnect with customers who have attempted to contact them.

When you use our platform to communicate with your customers, you remain the data controller of your customers' personal data, including telephone numbers, call information, and message records.

Riskfend Ltd acts as a data processor and processes this information only on your instructions, in accordance with our Terms of Service and applicable data protection laws.

We process customer telephone numbers, call logs, and SMS communications solely to provide the services you have requested. We do not use your customers' personal data for our own marketing purposes or unrelated activities.

As a customer using our platform, you are responsible for ensuring you have an appropriate lawful basis and privacy information in place when processing your own customers' personal data.

3. Data We Collect About You

We may collect, use, store, and transfer different types of personal data about you, including:

Identity Data

• First name
• Last name
• Business trading name

Contact Data

• Email address
• Mobile telephone number
• Business contact details

Financial Data

• Payment and transaction information processed through Stripe
• Subscription and billing information

We do not store full payment card details. Payment card information is securely processed by our payment provider, Stripe.

Transaction Data

• Details about payments made to and from you
• Subscription information
• Service usage information

Technical Data

• IP address
• Login information
• Browser type
• Device information
• Usage data relating to your interaction with our services

Prospect Data

If we contact you to introduce Riskfend's services, we may process basic business contact information such as:

• Name
• Business telephone number
• Business email address
• Business information

We may obtain this information from publicly available business sources or third-party business data providers. We take reasonable steps to ensure that such processing is carried out lawfully and in accordance with applicable data protection and electronic marketing laws.

4. How We Collect Your Personal Data

We collect personal data through:

• Information you provide when creating an account
• Information provided when subscribing to our services
• Communications you send to us
• Your use of our website and platform
• Payment providers and service providers
• Publicly available business sources
• Third-party business information providers

5. Sub-processors

We use trusted third-party providers to help deliver our services. These providers may process personal data on our behalf. Our current sub-processors include:

Twilio Inc.

Used for: Provisioning telephone numbers, handling voice-related webhooks, and transmitting SMS communications.

Stripe Inc.

Used for: Processing subscription payments, managing invoices, and providing billing services.

Resend Inc.

Used for: Transactional emails, authentication links, and service summaries and notifications.

We require our sub-processors to maintain appropriate security measures and only process personal data for the purposes necessary to provide their services.

6. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom.

Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including where applicable:

• UK International Data Transfer Agreements (IDTA)
• UK Addendum to EU Standard Contractual Clauses
• Adequacy regulations recognised under UK GDPR

We take reasonable steps to ensure your personal data receives an appropriate level of protection wherever it is processed.

7. How We Use Your Personal Data

We only use your personal data where permitted by law. We may use your personal data for:

Providing Our Services

• Creating and managing your account
• Providing access to Riskfend Hub
• Managing subscriptions
• Providing customer support

Contract Performance

Where processing is necessary to perform the agreement we have entered into with you.

Legitimate Interests

Where processing is necessary for our legitimate business interests and your rights do not override those interests.

Legal Obligations

Where we need to comply with legal or regulatory requirements.

8. Direct Marketing and Telephone Marketing

We may contact businesses to introduce Riskfend's services where we believe our services may be relevant. We rely on legitimate interests as our lawful basis for business-to-business marketing.

We comply with applicable requirements under the Privacy and Electronic Communications Regulations (PECR), including rules relating to telephone marketing.

Before making outbound marketing calls, we take steps to screen telephone numbers against:

• Telephone Preference Service (TPS)
• Corporate Telephone Preference Service (CTPS)
• Internal suppression lists

If you request that we stop contacting you for marketing purposes, we will respect your request and add your details to our internal "Do Not Contact" suppression list.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Accidental loss
• Alteration
• Disclosure
• Misuse

Access to personal data is limited to authorised personnel and trusted service providers who require access to provide our services.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

• Account information: Retained while your account remains active and for a reasonable period afterwards where necessary for legal, accounting, or dispute purposes.
• Billing information: Retained for the period required to meet financial and legal obligations.
• Marketing suppression records: Retained to ensure we respect future opt-out requests and do not contact individuals who have requested not to receive marketing.

We regularly review the information we hold and securely delete data when it is no longer required.

11. Cookies

We use cookies and similar technologies to:

• Operate our website
• Improve website functionality
• Understand how visitors use our services
• Improve user experience

Where required by law, we will request consent before placing non-essential cookies. A separate Cookie Policy may provide additional information about the cookies we use.

12. Your Legal Rights

Under UK data protection laws, you may have the following rights:

• The right to access your personal data
• The right to correct inaccurate personal data
• The right to request deletion of your personal data
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent where consent is the lawful basis

Right to Object to Direct Marketing

You have an absolute right to object to receiving direct marketing from us at any time. If you request that we stop contacting you for promotional purposes, we will update our records and add your details to our internal suppression list.

13. Contact Us

If you have questions about this privacy policy or wish to exercise your data protection rights, please contact: