Effective Date: 8/8/2019
Last Updated: 8/4/2025
Privork Limited primarily acts as a data processor on behalf of our clients who use our platform to collect and manage data about their own users. Our clients are responsible for ensuring that any data they collect complies with applicable laws. Privork only accesses and processes this data as necessary to provide the service, in accordance with their instructions.
We act as a data controller only for limited operational purposes (such as managing client accounts, support communications, and platform administration).
1. Information We Process (on behalf of clients and for our own operations)
Log data: When you visit our website, our servers may log your IP address, browser type, pages visited, timestamps, and time spent on pages.
Device data: We may collect device type, OS, browser version, and geolocation data, depending on your settings.
Personal information: We process personal data in two contexts:
- As a controller: We may collect limited information from our clients (e.g., name, email, company name) when creating an account or contacting us.
- As a processor: Clients may use our platform to collect any type of personal data (including sensitive data) from their own users. This includes use of custom fields, forms, or uploads. In such cases, Privork processes the data strictly on the client's behalf.
We are not responsible for the type or content of personal data clients collect using our tools. Clients are solely responsible for ensuring lawful basis, consent, and compliance with data protection laws.
Business data: Refers to analytics, files, logs, or usage data created through platform activity. This may be linked to client accounts or end users depending on usage.
A Data Processing Agreement (DPA) is available within the platform or upon request and outlines our obligations as a data processor under applicable laws.
2. Legal Bases for Processing
We process personal data under valid legal bases, depending on the context:
- To perform a contract or provide a service (e.g. platform access)
- To pursue legitimate interests, unless overridden by your rights
- With your consent for specific purposes
- To comply with legal obligations
When acting as a data processor, we rely on the client to determine the legal basis for the data they collect. You can withdraw consent at any time where applicable.
3. Collection and Use of Information
We may process data for the following purposes:
- Providing and maintaining the platform
- Enabling account access and usage
- Responding to inquiries and support requests
- Improving functionality and security
- Complying with applicable laws
4. Disclosure to Third Parties
We may share personal data with:
- Our employees, contractors, and service providers who support our operations
- Law enforcement or regulators if legally required
- Subprocessors who provide hosting, analytics, or technical support (under contract)
5. International Transfers
Data may be processed or stored in the United States, Cayman Islands, or other countries. If transferred outside the EEA, we ensure lawful safeguards (e.g., Standard Contractual Clauses) are in place.
By using our platform, you consent to such international transfers and understand that local laws may differ in terms of data protection and redress rights.
6. Your Rights and Control
You may have the right to:
- Request access to your data
- Correct inaccurate or outdated data
- Request deletion of your personal information
- Restrict or object to processing
- Receive your data in a portable format
To exercise these rights, please contact your Data Controller
7. Cookies
We use cookies to analyze usage and personalize the site. For more information, please review our Cookie Policy.
8. Business Transfers
In the event of a merger, acquisition, or asset sale, data may be transferred to the new entity, who will be bound by this policy or a substantially similar one.
9. External Sites
Our site may contain links to external websites. We are not responsible for their privacy practices or content. Please review their policies before submitting personal information.
10. Changes to This Policy
We may update this policy periodically. Material changes will be posted here. If we change how or why we process your personal data, we may ask for renewed consent where legally required.