Privacy Policy

1. Who We Are

ResearchCave Technology Ltd. operates this KYC verification platform for identity collection, document review, and compliance-related verification processes.

• Website: https://www.researchcave.com
• Contact Email: [email protected]
• Address: 483 Green Lanes N13 4BS London

2. Information We Collect

Depending on the verification level and service requirements, we may collect the following:

• Basic identity information such as full name, date of birth, nationality, and address
• Government-issued identification details such as ID card, passport, or driving license information
• Uploaded verification documents, including identity documents and proof of address documents
• Photographs, selfies, or liveness verification images where required
• Account, session, IP address, browser, device, and audit log information
• Operational and compliance notes entered by authorized staff during review

3. Why We Process Personal Data

We process personal data only for legitimate business and compliance purposes, including:

• Identity verification and customer due diligence
• Fraud prevention, abuse detection, and security monitoring
• Compliance with legal, regulatory, contractual, or risk management obligations
• Internal record keeping, audit trails, and dispute handling
• Improvement of service reliability, security, and operational quality

4. Legal Basis

Where applicable, personal data is processed on the basis of legal obligation, legitimate interest, contract performance, consent, or other lawful grounds permitted by applicable law.

5. Sensitive and Verification Data

KYC processing may involve sensitive or high-risk personal information, including identity documents, face images, and address evidence. Such data is handled with elevated security and access controls.

Access to submitted information is restricted to authorized personnel, systems, and processors that require such access for verification, compliance, fraud prevention, support, or legal purposes.

6. How We Store and Protect Data

We take reasonable technical and organizational measures to protect your data, including:

• Authenticated access controls and role-based permissions
• Transport security such as HTTPS/TLS
• Audit logging and administrative traceability
• Restricted staff access and internal review controls
• Secure storage practices for uploaded documents and personal records
• Monitoring for suspicious activity, misuse, or unauthorized access attempts

7. Data Retention

Personal data is retained only for as long as necessary for verification, compliance, security, audit, record-keeping, and legal obligations.

Retention periods may differ depending on account status, verification outcome, legal requirements, fraud risk, regulatory rules, and internal compliance policies.

8. Sharing of Data

We may share personal data only when necessary with:

• Internal authorized personnel and compliance reviewers
• Hosting, storage, infrastructure, or technical service providers acting on our behalf
• Identity verification, fraud prevention, or compliance service providers
• Courts, regulators, law enforcement, or public authorities when legally required
• Professional advisers, auditors, or legal representatives where necessary

9. International Transfers

If personal data is transferred or accessed across jurisdictions, reasonable safeguards are applied where required by applicable law and operational necessity.

10. Cookies and Technical Data

This site may use cookies or similar technologies for authentication, session management, security, language preference, and service reliability.

We may also collect technical logs such as IP address, browser type, timestamps, request metadata, and security events for operational and fraud prevention purposes.

11. Your Rights

Depending on your jurisdiction, you may have rights such as:

• The right to request access to your personal data
• The right to request correction of inaccurate data
• The right to request deletion where legally permitted
• The right to restrict or object to certain processing
• The right to request a copy of your data where applicable
• The right to contact a supervisory authority or regulator

12. Third-Party Services

This platform may rely on third-party infrastructure, identity tools, storage systems, email services, and compliance providers. Those services may process limited data as necessary to perform their roles.

13. Children

This service is not intended for use by persons who are not legally eligible to complete the required identification or verification process under applicable rules or business requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, security, or service changes. Updated versions will be published on this page.