Privacy Policy - Sostaritro

Last updated: November 2024

Introduction

Sostaritro is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share information when you use our website and services.

By using our website or submitting information to us, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

We collect information that you provide directly to us, including:

Name and contact details (email address)
Information about your banking situation relevant to our services
Correspondence and communication records
Service preferences and selections

We also automatically collect certain technical information when you visit our website:

IP address and browser type
Pages visited and time spent on site
Referring website or source
Device information and operating system

How We Use Your Information

We use the information we collect for the following purposes:

To provide and deliver our card recovery and banking assistance services
To communicate with you about your enquiries and cases
To improve our website and service offerings
To comply with legal obligations
To detect and prevent fraudulent or unauthorised activity

Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

Contract: Processing necessary to perform services you have requested
Legitimate interests: Processing necessary for our business operations where it does not override your rights
Legal obligation: Processing required to comply with applicable laws
Consent: Where you have given explicit consent for specific processing activities

Data Sharing

We do not sell your personal information. We may share your data with:

Service providers who assist in operating our business (hosting, analytics)
Banking institutions when acting on your behalf with your authorisation
Legal authorities when required by law or to protect our rights

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact and case records are typically retained for six years following completion of service.

Your Rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data in certain circumstances
Object to processing of your data
Request restriction of processing
Data portability
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Transfers

Your information is primarily stored and processed within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Sostaritro
47 Commerce Street
London EC2A 3QP
[email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO can be contacted at ico.org.uk.