Privacy Policy

RegBear ("we", "us", "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share information when you visit our website, use our services, or interact with us.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the UK GDPR, and other applicable data protection laws.

RegBear is the data controller responsible for your personal data. If you have any questions about this policy or our data practices, please contact us at:

Email: business@regbear.com

We may collect and process the following categories of personal data:

• Identity Data: First name, last name, job title, company name.
• Contact Data: Email address, telephone number, postal address.
• Technical Data: IP address, browser type and version, time zone, operating system, and platform.
• Usage Data: Information about how you use our website, including pages visited, time spent, and navigation paths.
• Communication Data: Information contained in any correspondence you send to us, including contact form submissions and email exchanges.
• Professional Data: Information relevant to the consulting services we provide, including business documentation shared during engagements.

We collect personal data through:

• Direct interactions: When you fill in our contact form, email us, or engage our services.
• Automated technologies: As you navigate our website, we may automatically collect Technical Data and Usage Data through cookies and similar technologies.
• Third parties: We may receive data from analytics providers, advertising networks, or publicly available sources.

We use your personal data for the following purposes:

• To respond to your inquiries and provide our consulting services.
• To manage our relationship with you, including sending relevant communications.
• To improve our website, services, and user experience.
• To comply with legal and regulatory obligations.
• To protect our legitimate business interests and legal rights.

We process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your data for a specific purpose.
• Contract: Where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation.

We do not sell your personal data. We may share your data with:

• Service providers: Third-party providers who assist with our website hosting, analytics, and business operations, under appropriate data processing agreements.
• Professional advisors: Lawyers, auditors, and consultants where necessary.
• Regulatory authorities: Where required by law or regulation.

As a cross-border consulting firm, your data may be transferred to and processed in countries outside your country of residence, including outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, tax, accounting, or reporting requirements. Contact form submissions are retained for up to 24 months unless a client relationship is established.

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data in certain circumstances.
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Request transfer of your data to another party in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at business@regbear.com.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have questions, concerns, or wish to exercise your data protection rights, please contact us:

Email: business@regbear.com

You also have the right to lodge a complaint with your local data protection supervisory authority.