Privacy Policy | Regulatory Risks

Regulatory Risks Full Privacy Statement

Regulatory Risks is committed to protecting the privacy of individuals who visit our Website (“Visitors”) or individuals who register to use the Service (“Users”, “You”, “Clients”, or “Consultant Users”). This Privacy Statement describes Regulatory Risks’privacy practices in relation to the use of our Website and Service.

Unless specifically defined, terms used throughout this statement have the same definitions as those given in the Regulatory Risks Terms of Use, available at http://www.RegulatoryRisks.com/terms-and-conditions

1. Information we collect

Information collected about Visitors: Like other website operators, Regulatory Risks collects information of the sort that web browsers and servers typically make available through the use of commonly-used information-gathering tools such as cookies (please see Section 4, “Our use of cookies,” for details). This non-personally identifying information (“User Non-Personal Information”) includes the visitor’s browser type, language preference, referring site, additional websites requested and the date and time of each Visitor request. We also collect potentially personally-identifying information like Internet Protocol (IP) addresses (please see Section 1, “Information we collect-Information collected about Users” for details about this collection procedure). Regulatory Risks’ purpose in collecting User Non-Personal Information is to better understand how our Visitors’ use our websiteto improve their user experience and to serve more relevant ads orpromotional offers on our site or third parties’ sites based upon that information.

Becoming a User: You may visit our Website without creating an account, but you will not have full access to our Service. Visitors who wish to use the Service must create an account, thus becoming a User. To create an account, Users must provide Regulatory Risks with personal contact information, such as name and email addressand other information (please see Section 5, “Gathering and protecting the information we collect,” for details about this form of authentication).

Information collected about Users: Either form of account creation may create any information about a User which could, alone or together with other personally-identifying information, personally identify him or her (“User Personal Information”). Regulatory Risks collects User Personal Information only with your consent which you express by using our Service after reviewing this Privacy Statement and Regulatory Risks’ Terms of Use. User Personal Information may include information you provide us directly, such as your email address, or information we collect through your use of our Services, such as your preferences or your search terms. User Personal Information may include, without limitation, your name, your email address, your billing address, your credit card or banking information, any licensing and accreditations, your profession, your business or industry, your photograph, your experience, your academic credentials, and other personal information you provide to us through your use of the Service.

We only gather the information you give us access to, and we only use it as described below. We only collect the minimum amount of personal information necessary or appropriate to fulfill the purpose of your interaction with us or to serve you more relevant ads or promotional offers.

User Personal Information does not include aggregated, non-personally identifying information. You may refuse to supply personally-identifying information; however, that refusal may prevent you from using Regulatory Risks’ Service.

No information about children:Regulatory Risks does not knowingly collect information from, or direct any of our content specifically to, children or teenagers under the age of 18. If we learn or have reason to suspect that a User of our Service is under the age of 18, we will promptly delete any personal information in that User's account.

Location-based data:Regulatory Risks also makes use of location-based data for our Website. If you allow these Services, we will ask you to enter your general location. We use this information to provide Services to youor to serve you more relevant ads or promotional offers, not to personally identify you. If you choose not to allow Regulatory Risks to access your location, some or all functionality may not be available to you.

Confidentiality and Job Postings:In order to access the Service, Job Posters may post certain information via an online Job Form or by speaking with a Regulatory Risks employee. This information may include, among other things, a description of the Job Poster’s business and legal question(s). This posted Job will be viewed by those Consultant Users who have access to view posted Jobs and may be viewed by Regulatory Risks employees to ensure quality control and provide technical support.]No Job is confidential. Please do not share sensitive or confidential information via the Service.

2. How we use the information we collect

To provide the Services you request:Regulatory Risks uses User Personal Information to perform and provide the Services you request. For instance, we use User Personal Information to allow Job Posters to select the best Consultant User for their needs; facilitate communication between Consultant Users and Job Posters; and simplify invoicing and billing for Jobs. We use location-based data to allow Consultant Users to bid on Jobs in their local area and jurisdiction if required. We also use User Personal Information to populate online profiles.

To communicate with Users:Regulatory Risks may also use User Personal Information to communicate with Users. For instance, Regulatory Risks may use information you provide to send you information regarding our Services, such as promotions or events; to provide you with technical support; to solicit feedback about our Service; or to notify you if our policies change.

To improve our Service:Regulatory Risks may use aggregated, non-personally identifying information gathered from our web server to operate, improve, and optimize our Website and Service.

Serving more relevant ads: We may use Personal or Non-Personal Information to serve you more relevant ads or promotional offers.

3. How we share the information we collect

In general: We do not disclose User Personal Information outside Regulatory Risks, except as described below or in Section 6, “Compelled Disclosure.”

With your consentwhich you express by using our Service after reviewing this Privacy Statement and Regulatory Risks’ Terms of Use:Regulatory Risks may share User Personal Information with your consent to perform services you have requested, including displaying the information you have chosen to share in order to post or bid on a Job.

If you upload a document: If you choose to upload a document by using our documents feature, only Regulatory RisksConsultant Users may review such documents. You may choose to make the document open to all Consultant Users who use the Service or provide access by request only. You may also provide different levels of control, including "View Only," "View and Download," and "Full Control" to such Consultant Users.

To our employees, other affiliates and third party service providers:Regulatory Risks discloses User Personal Information only to those of our employees, third party contractors (e.g., our email service providers and payment processors), and affiliated organizations that need to know this information in order to process it on our behalf or to provide or improve our Service. In addition, our employees and other affiliates have agreed not to disclose this information to others, in accordance with terms and conditions at least as restrictive as this Privacy Statement. Some of our employees, contractors, and affiliated organizations may be located outside of your home country; by using Regulatory Risks’ Service, you consent to the transfer of such information to them. Please see Section 5, “Gathering and protecting the information we collect,” for more details.

In a merger: Regulatory Risks may share User Personal Information if we are involved in a merger, sale, or acquisition. If any such change of ownership happens, we will seek to continue to ensure the confidentiality of User Personal Information, and we will notify you on our Websitebefore any transfer of User Personal Information. The purchaser will have to honor any promises we have made in this Privacy Statement or in our Terms of Use.

Advertising; Third-party tracking, re-targeting or analysis:Regulatory Risksmayfrom time -to- time share, sell, rent, or trade User Personal and/or Non-Personal Information with third parties or permit third-party tracking, re-targeting or data analysis across our Website or Service for their or our promotional purposes (e.g., to serve you more relevant advertisements or promotional offers). These third parties may collect more information than Regulatory Risks collects.

General information about Users:Regulatory Risks may disclose aggregated User Non-Personally IdentifiableInformation about how our Users, collectively, use our Service, so that we may share general information about our Service, such as statistics about the average cost of projects and/or services.

4. Our use of cookies

Cookies, generally:Regulatory Risks uses cookies to make interactions with our Website easy and meaningful andto serve you more relevant advertisements or promotional offers. A cookie is a small piece of text that our web server stores on your computer or mobile device, which we can then retrieve as needed. Cookies do not necessarily identify you if you are merely visiting the Regulatory Risks Website; however, a cookie may store a unique identifier for each logged in User.

Temporary cookies: Regulatory Risks uses temporary, or “session-based,” cookies, which are removed when you close your web browser or reboot your computer or device. We use session-based cookies to provide Services to you while you navigate our Website; remember that you are logged in during your visit; keep track of your progress as you post or bid on a Job; and increase Website security.

Persistent cookies:Regulatory Risks uses permanent, or “persistent,” cookies, which remain stored on your computer or device until deleted, or until they reach a specified date of expiration. We use persistent cookies to enable us to remember you each time you visit our Website; keep track of your preferences in relation to your use of our Website; allow you to log in without re-entering your password every time you visit; and serve you more relevant advertisements or promotional offers.

The cookies Regulatory Risks sets are essential for the operation of the Website, are used for performance or functionality; or serve you more relevant advertisements or promotional offers. By using our Website, you agree that we can place these types of cookies on your computer.

Google Analytics:Regulatory Risks uses Google Analytics to help improve our Users’ experience. Google Analytics uses both session-based and permanent cookies to collect information about how our Website performs and how our Users use the Website and Service. The Google Analytics tool helps us evaluate and monitor Users’ use of our Website, compile statistical reports on activity on the Service, and improve our content. Google Analytics may collect more information than Regulatory Risks collects. Google Analytics stores the information these cookies generate.

Regulatory Risks will not, nor will we seek to allow any third party to, use the Google Analytics tool to (i) track our Users,(ii) collect any User Personal Information other than IP address, or (iii) correlate a User’s IP address with his or her identity. Google Analytics provides further information about its own privacy practices and allows the ability to opt out of Google Analytics tracking here.

You may disable your browser or device’s ability to accept cookies, but if you do, you may not be able to use Regulatory Risks’ Services.

5. Gathering and protecting the information we collect

Industry standards in data security:Regulatory Risks takes all measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of User Personal Information. We follow generally accepted industry standards to protect the User Personal Information submitted to us, both during transmission and once we receive it. No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannotguarantee its absolute security.

No responsibility for third party service providers’ security: In addition, while we take measures reasonably necessary to ensure that our third-party service providers, such as our plug-ins, payment processing and data tracking, re-targeting or data analysisservices, keep your information secure, these organizations' practices are ultimately beyond our control. By using our Service, you acknowledge that you understand and agree to assume these risks.

OAuth, in general:Regulatory Risks makes use of the industry standard OAuth authentication protocol. OAuth is a simple, secure process that allows you to grant Regulatory Risks access to your accounts on third party networks without sharing the passwords to those accounts. Using OAuth, the data you choose to share is securely transferred without revealing your login information. OAuth also allows you to verify that an application acting on your behalf is doing so only with the permissions you have granted it. Most social networks, such as LinkedIn, Twitter, Facebook, and Google, allow applications to access user accounts via the OAuth process. OAuth functions using authentication tokens, which will expire after a period of time and may be revoked.

Documents, in general: Regulatory Risks uses third party service providers to transmit, store, encrypt, process and display uploaded documents on our behalf. Regulatory Risks has taken measures reasonably necessary to ensure that these services keep uploaded documents private and secure, but these organizations practices are ultimately beyond our control. By using the documents feature, you acknowledge that you understand and agree to assume the risks.

International data transfer: Information that we collect may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this privacy policy.By using the Service, you agree that we can store, process and transfer your information in this manner.

6. Compelled Disclosure

Regulatory Risks discloses potentially personally-identifying and personally-identifying information in response to a subpoena, court order or other governmental request, or when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of Regulatory Risks, third parties, or the public at large.

In complying with court orders and similar legal processes, Regulatory Risks strives for transparency. When permitted, we will make a reasonable effort to notify Users of such disclosure.

However, if you have engaged aConsultant through the Service (for example, by accepting a proposal and promising to pay or paying any required fees or costs), Regulatory Risks considers communications and documents shared with Consultant Users to be confidential client communications.

7. Your access to and control of the information we collect

Google Analytics: Regulatory Risks uses Google Analytics to help improve our Users’ experience. Google Analytics uses both session-based and permanent cookies to collect information about how our Website performs and how our Users use the Website and Service. The Google Analytics tool helps us evaluate and monitor Users’ use of our Website, compile statistical reports on activity on the Service, and improve our content. Google Analytics may collect more information than Regulatory Risks collects. Google Analytics stores the information these cookies generate.

Regulatory Risks will not, nor will we seek to allow any third party to, use the Google Analytics tool to (i) track our Users, (ii) collect any User Personal Information other than IP address, or (iii) correlate a User’s IP address with his or her identity. Google Analytics provides further information about its own privacy practices and allows the ability to opt out of Google Analytics tracking here.

You may disable your browser or device’s ability to accept cookies, but if you do, you may not be able to use Regulatory Risks’ Services.

5. Gathering and protecting the information we collect

Industry standards in data security: Regulatory Risks takes all measures reasonably necessary to protect User Personal Information from unauthorized access, alteration, or destruction; maintain data accuracy; and help ensure the appropriate use of User Personal Information. We follow generally accepted industry standards to protect the User Personal Information submitted to us, both during transmission and once we receive it. No method of transmission, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.

No responsibility for third party service providers’ security: In addition, while we take measures reasonably necessary to ensure that our third party service providers, such as our payment processing and data tracking, re-targeting or data analysis services, keep your information secure, these organizations' practices are ultimately beyond our control. By using our Service, you acknowledge that you understand and agree to assume these risks.

OAuth, in general: Regulatory Risks makes use of the industry standard OAuth authentication protocol. OAuth is a simple, secure process that allows you to grant Regulatory Risks access to your accounts on third party networks without sharing the passwords to those accounts. Using OAuth, the data you choose to share is securely transferred without revealing your login information. OAuth also allows you to verify that an application acting on your behalf is doing so only with the permissions you have granted it. Most social networks, such as LinkedIn, Twitter, Facebook, and Google, allow applications to access user accounts via the OAuth process. OAuth functions using authentication tokens, which will expire after a period of time and may be revoked.

International data transfer: Information that we collect may be stored and processed in and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this privacy policy. By using the Service, you agree that we can store, process and transfer your information in this manner.

6. Compelled Disclosure

In complying with court orders and similar legal processes, Regulatory Risks strives for transparency. When permitted, we will make a reasonable effort to notify Users of such disclosure.

However, if you have engaged a Consultant through the Service (for example, by accepting a proposal and promising to pay or paying any required fees or costs), Regulatory Risks considers communications and documents shared with Consultant Users to be confidential client communications.

7. Your access to and control of the information we collect

Access to User Information: As anRegulatory Risks User, you may access, update, alter, or delete your basic User profile information by editing your user profile or contacting info@RegulatoryRisks.com.

Data retention:Subject to the conditions set forth in the next paragraph entitled ‘Deletion of User Information’, Regulatory Risks will retain User Personal Information for as long as your account is active or as needed to provide you Services.

Deletion of User Information: If you wish to cancel your account, delete your User Personal Information, or request that we no longer use your User Personal Information to provide you Services, please contact info@RegulatoryRisks.com. We will retain and use your User Personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, but barring legal requirements, we will seek to delete your full profile.

Control of communications from us:Regulatory Risks may occasionally send Users an email to tell you about new features, solicit feedback, notify you of important changes, or just keep you up to date with what’s going on with Regulatory Risks and our products. You may manage your receipt of these communications by clicking on the “unsubscribe” link located on the bottom of Regulatory Risks’ emails or manage your notifications options in the “Settings” panel of your User Profile. Please note that if you do opt out of promotional mailings, we may still send you important administrative emails, such as notices that affect your rights.

8. Changes to this Privacy Statement

Regulatory Risks may change its Privacy Statement from time to time, and in Regulatory Risks’ sole discretion. We will provide notification to Users of material changes to this Privacy Statement (i) by sending a notice to the primary email address specified in your account, which will take effect immediately upon our sending of this email, and/or (ii) through our Website by posting a notice on our home page.. Non-material changes to this Privacy Statement will take effect immediately. We encourage visitors to frequently check this page for any changes to our Privacy Statement. Your continued use of the Service after the effective date of a revised version of this Privacy Statement constitutes your acceptance of its terms.

9. Contacting Regulatory Risks

Questions regarding Regulatory Risks’ Privacy Statement or information practices should be directed to info@RegulatoryRisks.com.