1. Information We Collect
We collect information to provide you with professional fraud recovery and digital forensics services. The types of information we collect include:
Personal Information
- Name and contact details (email, phone number, address)
- Identity verification documents when required
- Payment and billing information
- Communication preferences
Case-Related Information
- Details about fraud incidents and financial losses
- Transaction records and financial documents
- Digital evidence and blockchain data
- Communications with alleged fraudsters
- Supporting documentation for investigations
Technical Information
- IP address and device information
- Browser type and version
- Website usage data and analytics
- Cookies and similar tracking technologies
2. How We Use Your Information
We use your information for legitimate business purposes, including:
- Service Delivery: Conducting fraud investigations, asset tracing, and recovery services
- Communication: Providing updates on your case and responding to inquiries
- Legal Compliance: Meeting regulatory requirements and cooperating with law enforcement
- Quality Assurance: Improving our services and ensuring professional standards
- Security: Protecting against fraud, unauthorized access, and cyber threats
- Business Operations: Processing payments, maintaining records, and administrative purposes
Legal Basis for Processing
We process your personal data based on:
- Contract performance (providing services you've requested)
- Legitimate interests (fraud prevention, security, business operations)
- Legal obligations (compliance with laws and regulations)
- Consent (where specifically obtained)
3. Information Sharing and Disclosure
We maintain strict confidentiality but may share information in specific circumstances:
Authorized Disclosures
- Law Enforcement: When legally required or to assist in criminal investigations
- Legal Proceedings: As evidence in court cases or regulatory proceedings
- Service Providers: Trusted partners who assist in service delivery (under strict confidentiality agreements)
- Professional Advisors: Legal counsel, accountants, and other professional advisors
- Business Transfers: In case of merger, acquisition, or sale of business assets
We Never Share Information For:
- Marketing purposes without explicit consent
- Commercial gain unrelated to your case
- Unauthorized third-party access
- Public disclosure without legal requirement
4. Data Security Measures
We implement comprehensive security measures to protect your information:
Technical Safeguards
- 256-bit SSL encryption for data transmission
- Secure servers with advanced firewall protection
- Multi-factor authentication for system access
- Regular security audits and vulnerability assessments
- Encrypted storage for sensitive documents
Administrative Safeguards
- Strict access controls and user permissions
- Employee training on data protection requirements
- Confidentiality agreements with all staff and contractors
- Incident response procedures for security breaches
- Regular backup and disaster recovery procedures
Physical Safeguards
- Secure office premises with controlled access
- Locked filing systems for physical documents
- Secure disposal of confidential materials
- Environmental controls for server equipment
5. Data Retention
We retain your information for as long as necessary to fulfill our obligations:
Information Type |
Retention Period |
Legal Basis |
Case files and evidence |
7 years after case closure |
Legal compliance, potential litigation |
Financial records |
7 years from transaction date |
Tax and regulatory requirements |
Communication records |
3 years after last contact |
Quality assurance, dispute resolution |
Website analytics |
26 months maximum |
Business improvement, GDPR compliance |
After the retention period expires, information is securely destroyed or anonymized according to our data destruction policy.
6. Your Rights and Choices
You have important rights regarding your personal information:
Access and Portability
- Request copies of personal information we hold about you
- Obtain information in a portable format where technically feasible
- Access details about how your information is processed
Correction and Updates
- Update or correct inaccurate personal information
- Complete incomplete information records
- Request verification of information accuracy
Deletion and Restriction
- Request deletion of personal information (subject to legal obligations)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
Important Note
Some rights may be limited by legal requirements to maintain records for ongoing investigations, court proceedings, or regulatory compliance. We will explain any limitations when you make a request.
7. International Data Transfers
In providing our services, we may transfer information internationally:
- Adequacy Decisions: Transfers to countries with adequate data protection laws
- Standard Contractual Clauses: Using EU-approved contract terms for other transfers
- Necessary Transfers: For contract performance or legal compliance
- Security Measures: Additional safeguards for international transfers
We ensure all international transfers comply with applicable data protection laws and maintain appropriate security standards.
8. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience:
Essential Cookies
- Required for website functionality and security
- Session management and form submission
- Cannot be disabled without affecting site operation
Analytics Cookies
- Help us understand website usage and performance
- Aggregate data only, no personal identification
- Can be disabled through browser settings
Communication Cookies
- Enable chat functions and customer support
- Remember your communication preferences
- Can be managed through privacy settings
You can control cookie preferences through your browser settings or our cookie preference center.
9. Third-Party Services
We work with trusted service providers who may process your information:
- Tawk.to: Live chat and customer support services
- Payment Processors: Secure payment handling and processing
- Cloud Storage: Secure data storage and backup services
- Analytics Providers: Website performance and usage analytics
- Professional Services: Legal, accounting, and technical consultants
All service providers are contractually bound to protect your information and use it only for specified purposes.
10. Special Categories of Data
In fraud recovery cases, we may process sensitive information requiring special protection:
Sensitive Information May Include:
- Financial status and economic situation
- Health information (if relevant to fraud impact)
- Criminal conviction data (related to fraud cases)
- Biometric data (for identity verification)
Processing of sensitive information is based on:
- Explicit consent where legally required
- Vital interests protection
- Legal proceedings and claims
- Substantial public interest (fraud prevention)
11. Children's Privacy
Our services are not intended for individuals under 18 years of age:
- We do not knowingly collect information from children
- Parental consent required for any processing of children's data
- Special protection measures for vulnerable individuals
- Age verification procedures where appropriate
If you believe we have inadvertently collected information from a child, please contact us immediately for removal.
12. Data Breach Notification
In the unlikely event of a data security incident:
- Immediate Response: Containment and assessment of the incident
- Authority Notification: Report to relevant supervisory authorities within 72 hours
- Individual Notification: Inform affected individuals if high risk to rights and freedoms
- Remedial Action: Implement measures to prevent future incidents
- Documentation: Maintain detailed records of incidents and responses
We maintain comprehensive incident response procedures and regularly test our security measures.
13. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements:
- Material changes will be prominently displayed on our website
- Email notification for significant policy updates
- Previous versions available upon request
- Effective date clearly indicated at the top of the policy
Continued use of our services after policy updates constitutes acceptance of the revised terms.
14. Contact Information
For questions, concerns, or requests regarding this Privacy Policy or your personal information:
Data Protection Officer
Email: privacy@stratnest.com
Response time: Within 30 days of receipt
Urgent matters: Use priority contact methods below
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.