SanctionsIQ Privacy Policy

Last updated: 23 September 2026

1. Who we are

SanctionsIQ Limited is a company registered in England and Wales (16582790), with its registered office at Cuckfield, Haywards Heath, England, RH17 5JY ("SanctionsIQ", "we", "us", "our").

If you have questions about this policy or how we handle your personal data, contact us at:

2. Who does this Privacy Policy Apply to?

This policy explains how we collect and use personal data when you:

  • visit of our website

  • contact us, request a demo, or subscribe to updates

  • attend our training sessions or events

  • engage us for consultancy services

  • use the SanctionsIQ platform as an authorised user

3. The personal data we collect

Depending on how you deal with us, we may collect:

  • Identity and contact data: name, job title, employer, business email address, telephone number and business address.

  • Account data: login credentials, user role and permissions, and platform settings.

  • Usage data: how you use the Website and platform, including pages visited, features used, searches run, timestamps and audit logs.

  • Technical data: IP address, browser type and version, device information, operating system and time zone.

  • Communications data: the content of emails, enquiries, meeting notes and feedback you send us.

  • Engagement and billing data: details of the services you have bought, invoices, payment records and contract information. We do not store full payment card details.

  • Training data: attendance records, assessment results and certificates issued.

  • Marketing data: your preferences about receiving marketing from us.

4. How and why we use your personal data

UK data protection law requires a lawful basis for each use of personal data. We rely on the following:

  • Responding to enquiries and demo requests: Legitimate interests (running and growing our business)

  • Providing consultancy, training and platform services: Performance of a contract, or legitimate interests where the contract is with your employer

  • Creating and managing platform accounts: Performance of a contract / legitimate interests

  • Platform security, audit logging and fraud prevention: Legitimate interests, and legal obligation where applicable

  • Invoicing, accounting and tax: Legal obligation / performance of a contract

  • Sending business-to-business marketing about our services: Legitimate interests, or consent where the law requires it

  • Improving the Website and platform: Legitimate interests

  • Non-essential cookies and analytics: Consent

  • Investor relations and due diligence: Legitimate interests / legal obligation

  • Complying with law, regulators and legal claims: Legal obligation / legitimate interests

Where we rely on legitimate interests, we have considered whether our interests are outweighed by your rights and freedoms. You can ask us for more details about this assessment.

5. Marketing

We may send you information about our services, events, sanctions updates and insights. You can unsubscribe at any time using the link in any marketing email or by contacting us. We will never sell your personal data to third parties for their marketing.

6. Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

7. Who we share your data with

We share personal data only where necessary, with:

  • Service providers acting on our behalf, such as cloud hosting, email, CRM, analytics, payment and accounting providers. They may only use your data on our instructions.

  • Professional advisers, such as lawyers, accountants, auditors and insurers.

  • Your employer or organisation, where it has arranged the services you use (for example, training attendance and results).

  • Investors and potential acquirers, in confidence, as part of due diligence for a financing, merger or sale of the business.

  • Regulators, law enforcement and government bodies, including the Office of Financial Sanctions Implementation (OFSI), where required by law.

8. International transfers

Some of our service providers may process data outside the UK. Where this happens, we make sure appropriate safeguards are in place. These include UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information.

9. How long we keep your data

We keep personal data only for as long as we need it for the purposes above, including to meet legal, accounting and regulatory requirements.

10. Your rights

Under UK data protection law you have the right to:

  • access the personal data we hold about you

  • have inaccurate data corrected

  • have your data deleted

  • restrict or object to our processing, including objecting to direct marketing at any time

  • withdraw consent where we rely on it, without affecting processing already carried out

To exercise any of these rights, contact hello@sanctionsiq.com.

11. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office:

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown at the top.