We appreciate the trust you place in us when sharing your personal data. The security of that data is very important to us. This is how we collect, use and protect your personal data.

We collect personal data from you for one or more of the following purposes:

• To provide you with information that you have requested or that we think may be relevant to a subject in which you have demonstrated an interest.
• To initiate and complete commercial transactions with you, or the entity that you represent, for the purchase of products and/or services.
• To fulfil a contract that we have entered into with you or with the entity that you represent. In these circumstances it may be your entity, rather than yourself, that has provided us with your personal data.
• To ensure the security and safe operation of our websites and underlying business infrastructure.
• To manage any communication between you and us.

In addition, to ensure that each visitor to any of our websites can use and navigate the site effectively, we collect the following:

• Technical information, including the IP (Internet Protocol) address used to connect your device to the Internet.
• Operating system and platform.
• Information about your visit, including the URL (Uniform Resource Locators) clickstream to, through, and from our site.
• Our payment processors and banking arrangements are based in the EU and, for our US website, in the US.
• We ship and deliver physical products around the world; we therefore use logistics companies that are based outside the EU and operate in other countries. We have appropriate legal and security relationships with those partners.

Our ISMS (information security management system) is certified to ISO/IEC 27001. Our UK business is also Cyber Essentials Plus certified and all our payment card processing is in compliance with the PCI DSS (Payment Card Industry Data Security Standard).

We have what we believe are appropriate security controls in place to protect personal data. Risk assessment, including assessing risks to the rights and freedoms of data subjects, is at the heart of our ISMS. We do not, however, have any control over what happens between your device and the boundary of our information infrastructure. You should be aware of the many information security risks that exist and take appropriate steps to safeguard your own information. We accept no liability in respect of breaches that occur beyond our sphere of control.

As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email: contact@SanctionsAML.com. To process your request, we will ask you to provide two valid forms of identification for verification purposes. Your rights are as follows:

• The right to be informed
  As a data controller, we are obliged to provide clear and transparent information about our data processing activities. This is provided by this privacy policy and any related communications we may send you.
• The right of access
  You may request a copy of the personal data we hold about you free of charge. Once we have verified your identity and, if relevant, the authority of any third-party requestor, we will provide access to the personal data we hold about you as well as the following information:
• a) The purposes of the processing
  b) The categories of personal data concerned
  c) The recipients to whom the personal data has been disclosed
  d) The retention period or envisioned retention period for that personal data
  e) When personal data has been collected from a third party, the source of the personal data
• If there are exceptional circumstances that mean we can refuse to provide the information, we will explain them. If requests are frivolous or vexatious, we reserve the right to refuse them. If answering requests is likely to require additional time or occasions unreasonable expense (which you may have to meet), we will inform you.
• The right to rectification
  When you believe we hold inaccurate or incomplete personal information about you, you may exercise your right to correct or complete this data. This may be used with the right to restrict processing to make sure that incorrect/incomplete information is not processed until it is corrected.
• The right to erasure (the ‘right to be forgotten’)
  Where no overriding legal basis or legitimate reason continues to exist for processing personal data, you may request that we delete the personal data. This includes personal data that may have been unlawfully processed. We will take all reasonable steps to ensure erasure.
• The right to restrict processing
  You may ask us to stop processing your personal data. We will still hold the data, but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies you may exercise the right to restrict processing:

1. a) The accuracy of the personal data is contested.
   b) Processing of the personal data is unlawful.
   c) We no longer need the personal data for processing but the personal data is required for part of a legal process.
   d) The right to object has been exercised and processing is restricted pending a decision on the status of the processing.

• The right to data portability
  You may request your set of personal data be transferred to another controller or processor, provided in a commonly used and machine-readable format. This right is only available if the original processing was on the basis of consent, the processing is by automated means and if the processing is based on the fulfilment of a contractual obligation.
• The right to object
  You have the right to object to our processing of your data where
  • Processing is based on legitimate interest;
  • Processing is for the purpose of direct marketing;
  • Processing is for the purposes of scientific or historic research; or
  • Processing involves automated decision-making and profiling.

 

Any comments, questions or suggestions about this privacy policy or our handling of your personal data should be emailed to: contact@SanctionsAML.com

Should you wish to discuss a complaint, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.

Contact for Complaints Handling: contact@SanctionsAML.com

Should you feel unsatisfied with our handling of your data, or about any complaint that you have made to us about our handling of your data, you are entitled to escalate your complaint to a supervisory authority within the European Union. For the UK, this is the ICO (Information Commissioner’s Office), which is also our lead supervisory authority. Its contact information can be found at https://ico.org.uk/global/contact-us/.

 

Our use of cookies

We use cookies on our websites (our website, or our websites) for a number of purposes. They help us provide you with a good experience when you browse our website and allow us to improve our site. By continuing to browse our website, you are agreeing to our use of cookies.

What are cookies and why we use them

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of the e-billing services.
• Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users find what they are looking for easily.
• Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
• Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

First-party cookies

This website will set some cookies that are essential for the website to operate correctly. These cookies, none of which capture personally identifiable information, are as follows:

• Visitor ID – this cookie is a numeric value that identifies unique visitors and provides coherence and consistency to a site visit;
• Page Number – this cookie identifies the page you are on;
• Session ID – this cookie identifies your website session;
• Test – this cookie checks whether or not your browser supports cookies;
• Order – this cookie ensures that your shopping basket works correctly.

Third-party cookies

Our websites may or may not set several types of third-party cookie, and we do not control the operation of any of them. The third-party cookies that may or may not be set include:

• Google Analytics – we use Google Analytics to collect data about website usage. This data does not include personally identifiable information. You can view Google’s privacy policy here:google.com/policies/privacy/.
• Bing Universal Event Tracking – we use Bing Universal Event Tracking to collect website usage data for traffic that comes from paid advertising on Bing. You can view Bing’s privacy policy here: https://privacy.microsoft.com/en-gb/privacystatement.
• CallTrackingMetrics – We use CallTrackingMetrics to display a different phone number based on the visitors traffic source. You can view CallTrackingMetrics policy here: https://www.calltrackingmetrics.com/legal/cookies/.
• Digital Window (AWIN) – we use Digital Window’s tracking cookie to track the performance of our affiliate network. You can view Digital Window’s privacy policy here: https://www.awin.com/gb/legal/privacy-policy-gb.
• Zendesk – this licence cookie enables our installation of Zendesk, making it possible for visitors to use the chat functionality on this site. It does not collect any personally identifiable information. You can view Zendesk’s privacy policy here: https://www.zendesk.com/company/privacy/.
• Google Remarketing – we use Google’s Remarketing cookie to market products and services we think may be of interest to you. You may see our adverts on Google’s Display Advertising Network of partner websites and Google’s own search results pages. We aim to carefully select the products and services we remarket to you, and do so based on the pages you have visited on our website. To opt out of Google Remarketing, set your Google Ads Settings.
• Google Tag Manager – we use Google Tag Manager to manage some of the cookies that we use on our websites. You can view Google’s privacy policy here: https://policies.google.com/privacy?hl=en&gl=ZZ.
• Lead Forensics – we use Lead Forensics IP address tracking technology to identify businesses visiting our site and the pages that are being used. This helps us analyse data about web page traffic to develop and improve our website for business visitors. View Lead Forensics’s privacy and cookies policy here: https://www.leadforensics.com/privacy-and-cookies/.
• Kissmetrics – we use Kissmetrics code to obtain information about the activities that users engage in while visiting our web pages. When a user visits our website, Kissmetrics code contained on the website contacts Kissmetrics’s servers and enables Kissmetrics to collect this data. This data is used to improve the website for our users. To opt out, contact Kissmetrics Service Opt-Out.
• Visual Website Optimizer – we use Visual Website Optimizer cookies to run campaigns and to track user information. The cookies keep track of the variation a user has viewed and helps to serve the same variation to the user consistently, track goals completed by the user, and determine whether a user is part of a campaign. To opt out, visit http://www.itgovernance.co.uk?vwo_opt_out=1.
• SharpSpring – we use SharpSpring to collect data about website usage. You can view SharpSpring’s cookie policy here: https://sharpspring.com/legal/sharpspring-cookie-policy/.
• New Relic – we use New Relic to track performance of our website. You can view New Relic’s privacy policy here: https://newrelic.com/termsandconditions/privacy.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.