Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.

Last Updated: August 29, 2025

1. Information We Collect

We collect information to provide you with professional fraud recovery and digital forensics services. The types of information we collect include:

Personal Information

  • Name and contact details (email, phone number, address)
  • Identity verification documents when required
  • Payment and billing information
  • Communication preferences

Case-Related Information

  • Details about fraud incidents and financial losses
  • Transaction records and financial documents
  • Digital evidence and blockchain data
  • Communications with alleged fraudsters
  • Supporting documentation for investigations

Technical Information

  • IP address and device information
  • Browser type and version
  • Website usage data and analytics
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use your information for legitimate business purposes, including:

  • Service Delivery: Conducting fraud investigations, asset tracing, and recovery services
  • Communication: Providing updates on your case and responding to inquiries
  • Legal Compliance: Meeting regulatory requirements and cooperating with law enforcement
  • Quality Assurance: Improving our services and ensuring professional standards
  • Security: Protecting against fraud, unauthorized access, and cyber threats
  • Business Operations: Processing payments, maintaining records, and administrative purposes

Legal Basis for Processing

We process your personal data based on:

  • Contract performance (providing services you've requested)
  • Legitimate interests (fraud prevention, security, business operations)
  • Legal obligations (compliance with laws and regulations)
  • Consent (where specifically obtained)

3. Information Sharing and Disclosure

We maintain strict confidentiality but may share information in specific circumstances:

Authorized Disclosures

  • Law Enforcement: When legally required or to assist in criminal investigations
  • Legal Proceedings: As evidence in court cases or regulatory proceedings
  • Service Providers: Trusted partners who assist in service delivery (under strict confidentiality agreements)
  • Professional Advisors: Legal counsel, accountants, and other professional advisors
  • Business Transfers: In case of merger, acquisition, or sale of business assets

We Never Share Information For:

  • Marketing purposes without explicit consent
  • Commercial gain unrelated to your case
  • Unauthorized third-party access
  • Public disclosure without legal requirement

4. Data Security Measures

We implement comprehensive security measures to protect your information:

Technical Safeguards

  • 256-bit SSL encryption for data transmission
  • Secure servers with advanced firewall protection
  • Multi-factor authentication for system access
  • Regular security audits and vulnerability assessments
  • Encrypted storage for sensitive documents

Administrative Safeguards

  • Strict access controls and user permissions
  • Employee training on data protection requirements
  • Confidentiality agreements with all staff and contractors
  • Incident response procedures for security breaches
  • Regular backup and disaster recovery procedures

Physical Safeguards

  • Secure office premises with controlled access
  • Locked filing systems for physical documents
  • Secure disposal of confidential materials
  • Environmental controls for server equipment

5. Data Retention

We retain your information for as long as necessary to fulfill our obligations:

Information Type Retention Period Legal Basis
Case files and evidence 7 years after case closure Legal compliance, potential litigation
Financial records 7 years from transaction date Tax and regulatory requirements
Communication records 3 years after last contact Quality assurance, dispute resolution
Website analytics 26 months maximum Business improvement, GDPR compliance

After the retention period expires, information is securely destroyed or anonymized according to our data destruction policy.

6. Your Rights and Choices

You have important rights regarding your personal information:

Access and Portability

  • Request copies of personal information we hold about you
  • Obtain information in a portable format where technically feasible
  • Access details about how your information is processed

Correction and Updates

  • Update or correct inaccurate personal information
  • Complete incomplete information records
  • Request verification of information accuracy

Deletion and Restriction

  • Request deletion of personal information (subject to legal obligations)
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interests

Important Note

Some rights may be limited by legal requirements to maintain records for ongoing investigations, court proceedings, or regulatory compliance. We will explain any limitations when you make a request.

7. International Data Transfers

In providing our services, we may transfer information internationally:

  • Adequacy Decisions: Transfers to countries with adequate data protection laws
  • Standard Contractual Clauses: Using EU-approved contract terms for other transfers
  • Necessary Transfers: For contract performance or legal compliance
  • Security Measures: Additional safeguards for international transfers

We ensure all international transfers comply with applicable data protection laws and maintain appropriate security standards.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience:

Essential Cookies

  • Required for website functionality and security
  • Session management and form submission
  • Cannot be disabled without affecting site operation

Analytics Cookies

  • Help us understand website usage and performance
  • Aggregate data only, no personal identification
  • Can be disabled through browser settings

Communication Cookies

  • Enable chat functions and customer support
  • Remember your communication preferences
  • Can be managed through privacy settings

You can control cookie preferences through your browser settings or our cookie preference center.

9. Third-Party Services

We work with trusted service providers who may process your information:

  • Tawk.to: Live chat and customer support services
  • Payment Processors: Secure payment handling and processing
  • Cloud Storage: Secure data storage and backup services
  • Analytics Providers: Website performance and usage analytics
  • Professional Services: Legal, accounting, and technical consultants

All service providers are contractually bound to protect your information and use it only for specified purposes.

10. Special Categories of Data

In fraud recovery cases, we may process sensitive information requiring special protection:

Sensitive Information May Include:

  • Financial status and economic situation
  • Health information (if relevant to fraud impact)
  • Criminal conviction data (related to fraud cases)
  • Biometric data (for identity verification)

Processing of sensitive information is based on:

  • Explicit consent where legally required
  • Vital interests protection
  • Legal proceedings and claims
  • Substantial public interest (fraud prevention)

11. Children's Privacy

Our services are not intended for individuals under 18 years of age:

  • We do not knowingly collect information from children
  • Parental consent required for any processing of children's data
  • Special protection measures for vulnerable individuals
  • Age verification procedures where appropriate

If you believe we have inadvertently collected information from a child, please contact us immediately for removal.

12. Data Breach Notification

In the unlikely event of a data security incident:

  • Immediate Response: Containment and assessment of the incident
  • Authority Notification: Report to relevant supervisory authorities within 72 hours
  • Individual Notification: Inform affected individuals if high risk to rights and freedoms
  • Remedial Action: Implement measures to prevent future incidents
  • Documentation: Maintain detailed records of incidents and responses

We maintain comprehensive incident response procedures and regularly test our security measures.

13. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

  • Material changes will be prominently displayed on our website
  • Email notification for significant policy updates
  • Previous versions available upon request
  • Effective date clearly indicated at the top of the policy

Continued use of our services after policy updates constitutes acceptance of the revised terms.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Data Protection Officer

Email: privacy@stratnest.com
Response time: Within 30 days of receipt
Urgent matters: Use priority contact methods below

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

Privacy Questions or Concerns?

If you have any questions about our Privacy Policy or how we handle your personal information, please contact us.