This Privacy Policy explains how RCOR Ltd (“we,” “our,” or “us”) processes and protects the personal data we collect from you as a client, user, or partner in accordance with applicable data protection laws, including the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). By using our services or interacting with us, you agree to the collection and use of your personal data in accordance with this policy.

• “Controller” refers to RCOR Ltd, the entity that determines the purposes and means of processing personal data.
• “Data Subject” refers to an individual whose personal data is processed. This can be you, the individual who has provided us with personal information, or any other individual as specified in the context.
• “Personal Data” refers to any information relating to a Data Subject, including but not limited to name, contact details, financial information, and other identifiers that allow an individual to be identified.
• “Processor” refers to any entity that processes personal data on behalf of the Data Controller, in this case, RCOR Ltd when acting as a service provider.
• “Third Party” refers to any external organization or individual that we may share your personal data with for purposes outlined in this Privacy Policy.

RCOR Ltd may act in the capacity of both a Data Controller and Data Processor, depending on the nature of the relationship:

• As a Data Controller, RCOR Ltd is responsible for managing and determining how your personal data is processed when we collect it directly from you.
• As a Data Processor, we may process personal data on behalf of clients or third parties who are the Data Controllers, such as when providing services such as data extraction, litigation reports, and other business solutions.

This policy applies to all personal data collected or processed by RCOR Ltd through our website, applications, and services, including:

• Use of our website at ⦁ www.rcor.co.uk;
• Use of our web applications or other online tools for service delivery;
• Submission of personal data via client engagement forms, reports, or other interactions related to our services;
• Data shared with us through third-party partners or solicited third parties acting as Data Controllers.

We may collect the following types of personal data:

• Information you provide directly: This may include names, contact information (email, phone numbers), financial details, and other personal identifiers that are relevant to our services.
• Automatically collected information: Our website may collect certain technical information about your use, such as IP addresses, browser types, and other metadata via cookies and tracking technologies.
• Third-party data: In some cases, we may collect data about you from external sources such as credit reference agencies, fraud prevention services, public records, and other business partners.

We may use the personal data we collect for the following purposes:

• Providing and managing our services, including generating reports and performing data analysis;
• Communicating with clients and users regarding service updates, inquiries, or related products;
• Complying with legal obligations, such as fulfilling contractual agreements or responding to regulatory requirements;
• Conducting statistical analysis and improving the quality of our services;
• Marketing and promoting products or services we believe may be of interest to you, with your consent.

Our website uses cookies to enhance your experience. Cookies allow us to remember preferences and tailor content. You can disable cookies in your browser settings, although some features of the website may not function properly if you do so.

We may share your personal data with the following:

• Service providers: Third-party companies or individuals who assist with our services, such as IT support or data processing, in which case we ensure they are compliant with data protection regulations.
• Legal obligations: We may share personal data if required by law or to comply with legal proceedings, court orders, or requests from government authorities.
• Business partners: In certain cases, with your consent, we may share personal data with partners or other third parties to offer additional services or products.

We implement appropriate technical and organizational measures to ensure the security of personal data. This includes encryption, secure servers, and regular security audits to protect against unauthorized access, loss, or alteration.

RCOR Ltd will retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Personal data will be securely disposed of when no longer needed.

As a Data Subject, you have the following rights under data protection law:

• Right to access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
• Right to erasure: You can request the deletion of your personal data in certain circumstances.
• Right to restrict processing: You can ask us to limit how we process your personal data.
• Right to object: You have the right to object to processing, particularly for direct marketing.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.

If you wish to exercise any of these rights, please contact us using the information provided below.

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and if necessary, we will notify you directly. We encourage you to review this policy regularly.

If you have any questions or concerns about how your personal data is processed, or if you wish to exercise your rights, please contact us at:

• Email: info@rcor.co.uk
• Phone: 020 7078 9645
• Address: RCOR Ltd, 17-18 Spring Street, Paddington, London
  W2 3RA

For concerns that remain unresolved, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.