Privacy policy

Suite Utils Limited runs sanctionsclear.com and is the controller of the data described here. The product is not live yet, so today this page covers the website and its forms only.

What we collect

• Waitlist. Your name, company, work email and accounting platform. We use it to tell you when Sanctions Clear opens for your platform.
• Free name check. We collect the name you ask us to check, its country if given, and your email. We use it to run the check, show you the result and email you the certificate. We keep it with the result and its PDF for 90 days, then delete it.
• Contact form. Your name, email, topic and message. We use it to reply.
• Newsletter. Your email address. We use it to send one email when a new guide goes up.
• Site analytics. Google Analytics 4 counts page visits, referrers and which forms were submitted. It records that a form was sent, never what you typed into it.

What we don't collect

• We have no access to your QuickBooks or Xero account. Nothing on this site connects to it.
• We don't use advertising trackers, retargeting pixels or data brokers.
• We don't sell or rent contact details to anyone.

Who processes it

• Loops.so stores the waitlist, contact and newsletter submissions and sends our emails.
• Google Analytics 4 counts visits. Advertising storage and ad personalisation are switched off.
• Cloudflare hosts the site, runs the free name check and sends its certificate email. It stores each free check's name, country, email, result and certificate PDF for Sanctions Clear, and logs basic request data (IP address, browser) for security.

How long we keep it

• Free checks (name, country, email, result and certificate PDF) are kept for 90 days, so the result link and certificate check keep working, then deleted.
• Waitlist and newsletter details are kept until you unsubscribe or ask us to delete them.
• Contact messages are kept while the conversation is open and for 12 months after.
• Analytics data is kept for 14 months, the longest a standard GA4 property allows.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email[email protected] and we will handle the request within 30 days. Every marketing email has a one-click unsubscribe link. You can also complain to the UK Information Commissioner's Office.

When the product launches

Sanctions Clear will read vendor and customer records from your accounting software, and read bills and invoices only to see which contact they belong to. It adds a screening note and, on the Growth plan and up, a certificate to the contact. It will keep as little as it can:

• Contacts with no match: the contact's ID in your accounting file, a one-way fingerprint of the details screened, and when it was checked. No names.
• Possible matches: the name, type, country and identifiers, the list entry it resembled and the score, because you need them to review it.
• Review decisions: who decided, when and why.
• Never stored: invoices, bills, amounts, bank details or your full contact list.

Possible matches are summarised by an AI model running on Cloudflare Workers AI. Cloudflare does not train on that content, and a person always makes the decision. Your data is deleted 90 days after you cancel or disconnect. Screening records and certificate details are kept for 10 years, the period OFAC has to bring a case. We will publish the full subprocessor list and a data processing agreement before anyone can connect an account.