Privacy Policy

Last updated: June 2025

1. Introduction

Scrativist ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website (scrat.services) and use our services.

2. Data Controller

Scrativist is the data controller responsible for your personal data. For any privacy-related questions, please contact us at info@scrat.services.

3. Information We Collect

a) Information You Provide:

• Contact information (name, email, phone number, company)
• Report request details (questions, regulatory focus, business context)
• Messages sent through our contact form

b) Technical Information:

• Form submission data is collected and stored by Netlify (our hosting provider)
• We use cookies to ensure the proper functioning of the website and to analyze website usage.
• Essential cookies are required for the operation of the website, while non-essential cookies are used solely based on the user’s explicit consent.
• We do not collect browser fingerprinting data and we do not perform any tracking activities beyond the purposes described above.

4. How We Use Your Information

We use your personal data exclusively for:

• Fulfilling report requests and delivering our services
• Responding to inquiries and customer support
• Sending service-related communications (not marketing)
• Improving our services and website functionality
• Complying with legal obligations

5. Legal Basis for Processing

We process your personal data based on:

• Contract: To fulfill our services and respond to your requests
• Legitimate Interest: To improve our services and ensure security
• Legal Obligation: To comply with applicable laws

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only with:

• Service Providers: Netlify (our hosting provider) stores form submission data
• Legal Requirements: When required by law or to protect our rights

7. Data Security

We implement comprehensive security measures to protect your personal data:

• Encrypted Communications: All email communications are conducted through ProtonMail's end-to-end encrypted service
• Secure Website: SSL/TLS encryption for all data transmitted through our website
• Secure Hosting: Our website is hosted on Netlify's secure infrastructure
• Limited Access: Only authorized personnel have access to personal data
• Swiss Privacy Protection: Email data is stored in ProtonMail's Swiss data centers, protected by strict Swiss privacy laws

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Report-related data: Duration of service provision plus 5 years for legal compliance
• Contact form inquiries: 1 year unless a business relationship is established

9. Your Rights

Under data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit processing of your data
• Portability: Receive your data in a structured format
• Object: Oppose processing based on legitimate interests

To exercise these rights, contact us at info@scrat.services.

10. International Data Transfers

Your data may be processed and stored in different locations:

• Website Hosting: Netlify processes data in the United States under the EU-U.S. Data Privacy Framework, ensuring adequate protection for EU data subjects
• Email Communications: ProtonMail stores all email data in secure data centers in Switzerland (Lausanne and Attinghausen), with additional facilities in Germany and Norway
• Swiss Protection: Switzerland's strict privacy laws provide exceptional data protection for all communications handled through ProtonMail

We ensure appropriate safeguards are in place for all international data transfers through standard contractual clauses and selecting service providers committed to data protection.

11. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Cookies and Tracking

Our website uses cookies to ensure the proper and secure operation of the website, to enable basic functionalities, and to understand how visitors use the website. Cookies are small files stored on the user’s device when accessing the website.

The cookies used may be essential, meaning they are necessary for the operation of the website, or non-essential, which are used solely for website usage analysis purposes. Non-essential cookies are placed only based on the user’s explicit consent, provided through the cookie banner.

Users have the right to modify or withdraw their consent for non-essential cookies at any time through the cookie settings available on the website.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on our website with an updated "Last updated" date.

14. Contact Information

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: info@scrat.services
• Website: scrat.services

15. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law.