Privacy Policy

2. Who We Are (Data Controller)

For the purposes of data protection laws, the data controller is: Investor Lookup, email: hello@investorlookup.io

3. Information We Collect

We only collect information that is necessary to provide and improve our Services.

A. Information You Provide to Us

• Account Information: When you create an account, you provide us with your email address and a password. This is the only personal data we require for you to use the Services.
• Communications: If you contact us via email at hello@investorlookup.io, we will collect the content of your message, your email address, and any other information you choose to provide in order to respond to your query.

B. Information We Collect Automatically

When you use our Services, we automatically collect certain information about your device and usage to help us understand how people use our Website and to improve the user experience. This includes:

• Log Data: Information that your browser sends whenever you visit our Website. This may include your IP address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, and the time spent on those pages.
• Usage Data: Information about how you use our Services, such as which features you access, search queries you enter on the dynamic table, and which investor profiles you view. This data is collected in an aggregated and anonymized form where possible.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

4. How We Use Your Information

We use the information we collect for the following purposes and rely on the following legal bases under GDPR:

• To Provide and Maintain the Services: We use your account information to operate our Website, create and manage your account, and provide you with access to the Services.
  Legal Basis: Performance of a contract (Article 6(1)(b) UK GDPR).
• To Improve and Personalize the Services: We analyze usage data to understand user behavior, troubleshoot problems, and develop new features to enhance our Services.
  Legal Basis: Our legitimate interests (Article 6(1)(f) UK GDPR) in improving and marketing our Services, provided your interests and fundamental rights do not override those interests.
• To Communicate with You: We use your email address to respond to your queries and to send you important updates about our Services (e.g., changes to our Terms or Privacy Policy).
  Legal Basis: Performance of a contract and our legitimate interests in providing customer support and service updates.
• To Detect and Prevent Fraud: We may use log data and other information to monitor for and prevent fraudulent activity or other violations of our Terms of Service.
  Legal Basis: Our legitimate interests in protecting our business and our users.

5. Data Storage and International Transfers

Your personal data is hosted on servers located in Germany. As Germany is part of the European Union, data transfers from the UK to Germany are covered by an adequacy decision under the UK-EU trade agreement, meaning data is protected to a standard equivalent to the UK.

For users outside of the UK and EU, your data is transferred to and processed in Germany. We have implemented appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy and applicable laws, regardless of where it is processed.

6. Sharing Your Information

We do not sell your personal data to third parties. We may share your information with a limited number of trusted third-party service providers who assist us in operating our Website and providing our Services. These service providers include:

• Hosting Providers: For storing and running our website (e.g., our German-based host).
• Analytics Providers: To help us analyze how our Services are used (e.g., Google Analytics). We use these services with anonymized data where possible.

All third-party service providers are contractually obligated to protect your data and are prohibited from using it for any purpose other than providing services to us.

7. Data Retention

We will retain your personal information only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: We will retain your account information for as long as your account is active.
• Deletion: If you delete your account, your personal data will be permanently deleted from our systems within a reasonable timeframe, unless we are required to retain it for legal obligations or dispute resolution.

8. Your Data Protection Rights

Under data protection laws, you have certain rights concerning your personal data. You can exercise these rights by contacting us at hello@investorlookup.io. These rights include:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, such as the Information Commissioner's Office (ICO) in the UK, if you believe we have not processed your personal data in compliance with data protection laws.

9. Privacy for Minors

Our Services are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without parental consent, we will take steps to remove that information from our servers.

10. Third-Party Websites

Our Website may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any website you visit.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Changes are effective when they are posted on this page. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: