Privacy Policy

1 Scope of this policy

This Privacy Policy applies to kycrightsource.com and to the personal information of visitors, prospects and business contacts who interact with KYC Right Source directly — for example, by submitting a "Request a Quote" or "Contact" form, emailing us, or calling one of our offices.

This policy does not govern the identity, sanctions, PEP, or adverse-media screening data that we process on behalf of our clients as a service provider. That data is handled under separate data processing agreements with each client, who acts as the data controller for their own end users.

2 Who we are

KYC Right Source is a compliance technology brand operated by LiveEx Shield Corp., with head offices in Toronto, Canada and Dubai, UAE, and additional bureaux across the GCC. For the purposes of this policy, KYC Right Source / LiveEx Shield Corp. is the data controller responsible for the personal information described below.

3 Information we collect

Information you provide to us

Contact details — full name, company name, work email address, phone number.
Inquiry details — estimated screening volume, region of interest, and any message or requirements you share with us.
Correspondence — records of emails, calls or messages exchanged with our sales and support teams.

Information collected automatically

Device & usage data — IP address, browser type, device type, pages viewed, referring URL, and timestamps.
Cookies & similar technologies — used for essential site functionality, analytics, and remembering your cookie preferences (see Section 6).

4 How we use your information

Responding to quote requests, demo requests and general inquiries.
Preparing proposals, pricing and onboarding documentation.
Operating, securing and improving this website.
Sending service-related or, where you have agreed, marketing communications — you can opt out at any time.
Complying with legal, regulatory, tax and audit obligations.
Detecting, investigating and preventing fraud, abuse or security incidents.

5 Legal basis for processing

Where applicable data protection law requires it (for example, the EU/UK GDPR), we rely on one or more of the following legal bases:

Basis	When it applies
Consent	Marketing emails, non-essential cookies
Contract	Preparing a quote, delivering services you request
Legitimate interest	Responding to inquiries, keeping the site secure, improving our services
Legal obligation	Tax, accounting and regulatory record-keeping

6 Cookies & tracking technologies

We use cookies and similar technologies grouped into the following categories. You can manage your preferences at any time using the cookie-consent banner on this site.

Strictly necessary — required for core site functionality (e.g., remembering your cookie choice); cannot be switched off.
Analytics — help us understand how visitors use the site so we can improve it.
Preference — remember settings such as your selected language.

We do not use cookies to sell personal information to third parties.

8 International data transfers

Because we operate across North America, the GCC, Africa, Europe and Asia, your information may be transferred to, stored, and processed in countries other than your own — including Canada (governed by PIPEDA) and the United Arab Emirates (governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data). Where required, we use appropriate safeguards such as standard contractual clauses and confidentiality agreements to protect information transferred internationally.

9 Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, including satisfying legal, accounting or reporting obligations. Sales inquiry and correspondence records are typically retained for the duration of the business relationship plus a reasonable period afterward, after which they are securely deleted or anonymized.

10 Data security

We maintain technical and organizational safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, access controls, and vendor due diligence. Our security practices are informed by our ISO 27001 (Information Security Management), ISO 22301 (Business Continuity) and ISO 9001 (Quality Management) certifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11 Your privacy rights

Depending on where you are located, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate or incomplete information.
Request deletion of your personal information.
Restrict or object to certain processing.
Receive a copy of your information in a portable format.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 15. We will respond within the timeframe required by applicable law.

12 Children's privacy

Our website and services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.

13 Third-party links

Our website may link to third-party sites, including our parent company LiveEx Shield Corp. We are not responsible for the privacy practices of external sites and encourage you to review their own privacy policies.

14 Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be reflected on this page.