Forensic Capital is a research entity registered in the State of Wyoming, United States of America. This policy describes how personal data of clients is collected, processed, and retained. It is written to satisfy the General Data Protection Regulation (Regulation (EU) 2016/679) for clients in the European Economic Area, and the equivalent expectations of clients elsewhere.
01 — Data collected
Forensic Capital collects a single category of personal data:
No additional personal data — name, address, phone, IP, browser fingerprint — is collected by Forensic Capital. Cookies are not set. No analytics provider is used on this domain.
02 — Purpose
The email address is collected for the sole purpose of delivering the commissioned report and any associated correspondence strictly related to that engagement (scoping brief, scope confirmation, delivery, the one included revision round, refund processing if applicable).
The email address is not used for marketing. The address is not added to any newsletter list. No commercial communication is sent on the basis of payment.
03 — Lawful basis
The processing is grounded on GDPR Article 6(1)(f) — legitimate interests pursued by Forensic Capital, namely the performance of the engagement requested by the Client. The interest is narrow and time‑limited; it is balanced against the data subject's reasonable expectation that an email address provided at checkout will be used to deliver the purchased report.
Where the Client prefers GDPR Art. 6(1)(b) — performance of a contract — that basis applies in the alternative.
04 — Retention
The email address is retained for ninety (90) days after delivery of the report. After ninety days, the address is deleted from operational systems. Retention beyond ninety days occurs only where required by accounting law — minimum retention of the underlying Stripe transaction record, which contains the email, is governed by Stripe's own retention policy and applicable bookkeeping obligations.
05 — Sub-processors
One sub-processor is involved in the collection of the email address:
- Stripe, Inc. — payment processor. Stripe collects the email address at checkout and transmits it to Forensic Capital for the purpose of delivery. Stripe's privacy policy applies independently at stripe.com/privacy.
No other sub-processor receives the email address. Telegram is used for internal operational notification of new commissions; only the order identifier is transmitted, not the Client's email.
06 — Your rights
Data subjects in the European Economic Area, the United Kingdom, and equivalent jurisdictions have the right to:
- request access to the email address held on file;
- request rectification of an inaccurate address;
- request erasure before the ninety‑day window elapses;
- object to the processing on grounds related to particular circumstances;
- lodge a complaint with a competent supervisory authority.
Requests are honoured without charge and without delay. Send any request to marcus@forensic‑capital.com.
07 — International transfer
Forensic Capital is established in the State of Wyoming, United States of America. Personal data of Clients located in the EEA is therefore transferred outside the EEA. Stripe relies on Standard Contractual Clauses approved by the European Commission to legitimise its own transfers; Forensic Capital relies on the same legal architecture and on the absence of any onward transfer beyond Stripe.
08 — Changes to this policy
Material changes to this policy are published on this page with a revised effective date. Previous versions are retained on request.
09 — Contact
marcus@forensic-capital.com
Forensic Capital · Wyoming, USA