Privacy Policy

Controller: [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [PRIVACY EMAIL].

Data we may process

Contact data, account identifiers, purchase/billing records, support messages, mentorship application information, technical logs, cookie/consent records, newsletter preferences and information voluntarily submitted through forms. RVCTR should not collect broker passwords or unnecessary sensitive data.

Purposes and legal bases

Data may be processed to perform contracts and provide services, comply with legal obligations, protect security and prevent fraud, administer the business, improve services, and send optional marketing where the required consent or other lawful basis exists.

Recipients

Hosting, payment, email, analytics, support, newsletter and security providers may receive data only as necessary. Replace this section with the actual provider list before launch.

International transfers

Identify any transfers outside the EEA and applicable safeguards before launch.

Retention

Personal data should be kept no longer than necessary for its stated purpose, subject to tax, accounting, dispute and security obligations. Define category-specific retention periods before launch.

Your rights

Depending on applicable law and the processing basis, users may have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent, plus the right to complain to a competent supervisory authority.

Security

RVCTR should use appropriate technical and organizational measures, least-privilege access, updates, backups, MFA for administrators and secure transport.

Privacy requests: [PRIVACY EMAIL].

Legal review required before launch.