Privacy Policy
Applicability to InvestRand
At InvestRand, we recognize the importance of your privacy and are dedicated to protecting the confidentiality of personal information entrusted to us.
This Privacy Policy details how InvestRand manages and protects your personal information in relation to our website hosting and the provision of various business advisory services, including corporate finance and restructuring, economic and financial consulting, forensic and litigation support, health solutions, strategic communications, and technology ("Services").
Information Collection Notice
InvestRand collects personal information as outlined below for specific purposes and durations. We do not sell or share your personal information for cross-context behavioral advertising, nor do we collect or process sensitive personal information to infer characteristics about you. If you provide us with personal information about others, you are responsible for informing them.
Policy Scope
This policy applies to personal information collected and/or used by InvestRand as a controller under the EU General Data Protection Regulation (GDPR) and similar laws. California residents should refer to the section detailing their specific rights. Information about when we collect personal data is provided under "Personal Information Collection Timing" below.
When providing Services to clients, we may process personal information as a processor (e.g., hosting client data on our e-discovery platforms). This means we process the information solely on our clients' instructions, who maintain control over the information.
If our use of your personal information isn't covered by this policy, you may need to contact the client (and controller) responsible for processing your data.
For the purposes of this Privacy Policy, "Personal information" refers to data that identifies or can reasonably be associated with a specific individual or household.
Cookie Usage
InvestRand is committed to transparency regarding the technologies we use. This Cookie Policy explains how and why we use cookies and similar technologies to enhance your experience on our websites.
Data Protection Measures
InvestRand has implemented appropriate technical safeguards, security policies, and procedures to protect personal information from unauthorized access, misuse, alteration, or destruction. These measures include confidentiality agreements with staff and service providers, restricted access to your personal information, relevant training for our personnel, and comprehensive data incident response protocols. Our IT Security Program is regularly audited.
Client Service Provision
InvestRand retains your personal information for the duration necessary to fulfill the purposes for which it was collected, any compatible purposes subsequently established, or new purposes to which you consent, or to comply with legal, regulatory, and company policy requirements. This period typically aligns with your or the relevant client's relationship with InvestRand, plus a period reflecting potential legal claim timelines. Some information may be retained longer due to legal or policy requirements. Retention periods may be adjusted based on legal holds or data protection impact assessments.
Legal Basis for Data Collection
Certain regulations, like the GDPR, require us to establish a 'lawful basis' for processing your personal data. Typically, this processing is justified by:
- Fulfilling contractual obligations or initiating a contract at your request.
- Complying with legal requirements, such as collecting client information for tax purposes or making disclosures to authorities.
- Performing tasks in the public interest, like conducting background checks for security purposes.
- Pursuing our legitimate interests while respecting your rights and interests, particularly in service provision and client relationship management.
Data Retention Policy
InvestRand keeps your personal information for the time required to fulfill its original purpose, any compatible purposes we later establish, or new purposes you consent to, or to meet legal, regulatory, and company policy requirements. This typically covers your relationship with InvestRand plus a period for potential legal claims. Some data may be kept longer due to specific requirements. Retention periods may be adjusted based on legal holds or data protection assessments.
Protection of Minors
InvestRand's websites are not designed for or targeted at children under 16. We do not knowingly collect or maintain information about anyone under 16, except when necessary for professional service engagements.
Policy Updates
By using InvestRand websites, you agree to the collection, use, and storage of personal information as described in this Privacy Policy. We reserve the right to modify this policy periodically. We will notify you of any changes by posting updates on this website.
Contact Information
If you have any questions or feedback about our Privacy Policy, please contact us at [email protected].