Privacy Policy

Case intake data (name, contact details, country, incident description, loss amount), identity verification documents required under AML/KYC rules, transaction and wallet references you provide as evidence, communications with our team, and portal usage logs (IP address, device, timestamps).

To assess and pursue your case, comply with legal and regulatory obligations (anti-money-laundering, sanctions screening), coordinate with regulated counterparties (banks, exchanges, courts) with your consent, and improve the security and reliability of our services.

We do not sell your data. We do not use it for advertising.

Contract performance (Art. 6(1)(b)) for engagement work; legal obligation (Art. 6(1)(c)) for KYC and record-keeping; legitimate interest (Art. 6(1)(f)) for security, fraud prevention and service improvement; consent (Art. 6(1)(a)) where required (e.g. optional marketing).

Case files are retained for 7 years after closure to satisfy regulatory record-keeping obligations. Portal logs are retained for 24 months. Marketing consent records are kept until withdrawn plus 3 years.

We share information only with (a) your assigned case team, (b) regulated legal and investigative partners subject to written confidentiality, (c) counterparties (banks, exchanges, platforms) where necessary and with your consent, and (d) authorities where compelled by law.

International transfers rely on Standard Contractual Clauses or an adequacy decision. A copy of the safeguards is available on request.

TLS 1.3 in transit, AES-256 at rest, SOC 2 Type II aligned controls, principle-of-least-privilege access, mandatory 2FA for staff, quarterly penetration testing and continuous vulnerability scanning.

Access, rectification, erasure (subject to retention obligations), restriction, portability, objection, and withdrawal of consent. To exercise any right, email dpo@ashcroftintelligence.com. You may also lodge a complaint with the UK ICO or your local supervisory authority.

We use a small number of strictly-necessary and analytics cookies described in our Cookie Policy.

Material changes will be notified in-portal and by email 30 days in advance. The current version is always the one published at this URL.