Privacy by Design

At Risely, we are committed to safeguarding the privacy and security of personal information. We believe in integrating privacy considerations into our products, services, and business processes from the earliest stages of development. This page outlines our approach to embedding privacy protections into our operations.

Privacy by Design means proactively protecting the privacy of individuals by minimizing the amount of personal data collected, ensuring that the data collected is used only for the intended purpose, and implementing strong security measures to prevent unauthorized access or disclosure.

Our principles

We are committed to the following Privacy by Design principles:

• Proactive, not reactive: privacy considerations are integrated into all aspects of our products and services, from the initial design phase through to end of life.
• Privacy as the default setting: our products and services are designed to minimize the collection and use of personal information and to make privacy the default setting.
• Privacy embedded into design: privacy considerations are incorporated into the design and architecture of our products and services, including security measures to protect personal information from unauthorized access, use, and disclosure.
• End-to-end security: our products and services are designed to ensure end-to-end security of personal information, from collection to storage, use, and disposal.
• Transparency and user control: we provide clear and concise information about our privacy practices, including how personal information is collected, used, and disclosed, and we give individuals control over their personal information.
• Respect for user privacy: we respect the privacy of individuals and do not use personal information for any purpose other than the intended purpose.

How we put these principles into practice

To implement these principles, Risely will:

• Conduct privacy impact assessments (PIAs) to identify and mitigate privacy risks associated with our products and services.
• Implement data minimization practices to limit the collection, use, and retention of personal information to only what is necessary to provide the intended product or service, and in accordance with our Data Protection Policy.
• Provide clear and concise privacy notices that explain our collection, use, and disclosure practices to individuals.
• Obtain the appropriate consent from individuals before collecting or using their personal information, where required by law.
• Implement appropriate technical and organizational security measures to protect personal information from unauthorized access, use, and disclosure.
• Regularly review and update this policy and related procedures to keep pace with applicable laws and regulations.

Training and accountability

We provide training and resources to team members and third-party service providers who handle personal information, so they understand their roles and responsibilities under this policy.

Questions

If you have any questions about this policy, contact us at [email protected].