Last Updated: January 2025

At Rafana ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website www.rafana.co.uk or use our services.

1. Information We Collect

We collect information that you provide directly to us, including:

2. How We Use Your Information

We use the information we collect for the following purposes:

3. Legal Basis for Processing (UK GDPR)

We process your personal data based on the following legal grounds:

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. For detailed information about our use of cookies, please refer to our Cookie Policy.

5. Data Sharing and Disclosure

We may share your information with:

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When we no longer need your information, we will securely delete or anonymize it.

8. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights:

To exercise any of these rights, please contact us at privacy@rafana.io.

9. International Data Transfers

Your information may be transferred to and processed in countries outside the United Kingdom. We ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection: