Privacy Policy

Last updated: January 2025

1. Introduction

RISKCORE is a trading name of Shopkoin Ltd ("we", "us", or "our"), a company registered in England and Wales (Company Registration Number: 11440278). We are committed to protecting your privacy and ensuring the security of your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at riskcore.io and use our risk aggregation platform services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access our services.

2. Information We Collect

2.1 Personal Data

We may collect personally identifiable information that you voluntarily provide to us, including:

  • Name and job title
  • Email address
  • Company name and business contact information
  • Account credentials (username and password)
  • Billing information and payment details (processed securely by our payment providers)

2.2 Usage Data

We automatically collect certain information when you visit our website, including:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Click patterns and navigation paths

2.3 Platform Data

When you use our risk aggregation platform, you may upload or connect data sources containing financial and risk data. We process this data solely to provide you with our services and do not use it for any other purpose. Your uploaded data remains your property.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, operate, and maintain our risk aggregation platform
  • Account Management: To create and manage your user account
  • Communication: To send you service updates, security alerts, and support messages
  • Marketing: To send newsletters and promotional content (with your consent)
  • Analytics: To understand how our services are used and improve user experience
  • Security: To detect, prevent, and address technical issues and fraudulent activity
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes

5. Data Sharing & Third Parties

We work with trusted third-party service providers to operate our business. We only share the minimum data necessary for them to perform their services:

Service Providers

  • Supabase — Database and authentication services (data storage)
  • Vercel — Website hosting and deployment
  • Google Analytics — Website analytics and usage tracking
  • Tawk.to — Live chat support widget
  • MailerLite — Email newsletter and marketing communications
  • Resend — Transactional email delivery

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may disclose your information if required by law or to protect our rights and safety.

6. International Data Transfers

Some of our third-party service providers are located outside the United Kingdom. When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
  • Transfers to countries deemed adequate by the UK government
  • Binding Corporate Rules where applicable

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Account Data: Retained while your account is active and for 2 years after account closure
  • Platform Data: Deleted within 30 days of account termination or upon your request
  • Analytics Data: Retained for 26 months
  • Chat Logs: Retained for 12 months
  • Marketing Data: Retained until you unsubscribe or withdraw consent

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Request restriction of processing in certain circumstances
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@riskcore.io. We will respond to your request within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

9. Cookies

We use cookies and similar tracking technologies to enhance your experience on our website:

  • Essential Cookies: Required for the website to function properly
  • Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
  • Functional Cookies: Remember your preferences such as theme settings
  • Chat Cookies: Enable our live chat support functionality (Tawk.to)

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

RISKCORE

A trading name of Shopkoin Ltd

Registered in England and Wales (Company No. 11440278)

Email: hello@riskcore.io