Report Scammers Pricing Contact

Privacy Policy

At Scamalytics we take the issue of your Privacy very seriously. You share your data with us so that we can help stop fraud and scammers, and that is a privilege which we respect.

The following Privacy Policy details what personal data we collect as a company, and how, as a company we deal with it.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.

For the purposes of data protection legislation, the data controller is Scamalytics LTD of 36 Bardolph Road, Richmond, Surrey, TW9 2LH and registered at the Information Commissioners Office in the UK with ZA263883.

Our Data Protection Officer is Dan Winchester and he can be contacted on dan@scamalytics.com

Who we are and what we do

Scamalytics provides an antifraud solution to automatically help dating companies, sites and apps to rid themselves of scammers. We may also provide the following other services from time to time including, training of staff to use software, giving advice on anti-fraud solutions and on how to identify scammers.

We collect the personal data of the following types of people to allow us to undertake our business;

the end users of dating sites/apps/companies;
prospective and live client contacts;
supplier contacts to support our services;
employees, consultants, temporary workers;

We collect information about you to carry out our core business and ancillary activities.

Information you give to us or we collect about you.

This is information about you that you give us by filling in forms through our Scamalytics website (our site) or anti-fraud solution portal (our portal) or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our site, to enter our database, subscribe to our services, attend our events, or complete a feedback survey, and when you report a problem with our site. It also includes any personal data you may provide to a third party on behalf of whom we process your data via our anti-fraud API (our API).

User Data

This is data relating to you as a user, for example the data you entered to create a dating profile. It might include:

Email address
Password
DOB
Nationality
Address
Gender
Sexual orientation
Name
Photos
Profile text
Profession
Employer
Which dating sites you have joined

Computer Data

This is data relating to the device you use or the network you connect from. It might include:

IP Address
HTTP user-agent
Device ID

Behavioural Data

This is data relating to your behaviour on a dating site. It might include:

Profiles you have viewed
Messages you have sent, and who you sent them to
When you first registered for a dating site
When you logged onto a dating site

Payment Data

This is data relating to payments you made to a dating site. It might include:

Card details
Payment status

This is stored in our main user database.

Information we collect about you when you visit our website.

With regard to each of your visits to our site or portal we will collect information such as technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information if applicable, browser type and version, browser plug-in types and versions, operating system and platform.

Purposes of the processing and the legal basis for the processing

We use information held about you in the following ways:

To carry out our obligations arising from any contracts we intend to enter into or have entered into between you and us and to provide you with the information, products and services that you request from us in terms of anti-fraud and protection from fraudsters and scammers.

The core service we offer to our clients is the automated review of users of dating sites, consisting of the following:

Machine learning which allows us to accurately detect scammers, can differentiate between scammers and genuine users, and can identify scammer trends which are emerging globally;
Realtime detection through our API which allows us to respond with a score in realtime allowing our clients’ fraud systems to automatically remove fraudulent users immediately, even when moderators are away;

Shared blacklists to tap into the dating industry’s largest shared scammer blacklist of profile and network data.

Our legal basis for the processing of personal data is our legitimate business interests, described in more detail below, although we will also rely on contract, legal obligation and consent for specific uses of data.

Our Legitimate Business Interests

Our legitimate interests in collecting and retaining your personal data is described below:

As an anti-fraud prevention and detection solution our legitimate interest includes for the purposes strictly necessary for the prevention of Fraud.

In particular we rely on our legitimate business interest of the prevention of fraud to retain data on alleged scammers who arise through our shared database.

This includes retaining such information on an ongoing basis so that we can prevent other companies from being attacked in the future.

Fulfil a legal obligation

We rely on the fulfilment of a legal obligation if we are to disclose any data relating to fraudsters or scammers as part for a criminal or civil investigation by the relevant authorities as required by the law.

Consent

We rely on your consent to retain your data and to share indicators which may have identified a potential scammer through our shared blacklist.

Other Uses we will make of your data:

Use of our website;
to notify you about changes to our service;
to ensure that content from our site is presented in the most effective manner for you and for your computer.

We will use this information:

To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
to allow you to participate in interactive features of our service, when you choose to do so;
as part of our efforts to keep our site safe and secure;
to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. We also use cookies for Google Analytics and Google Ads. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

Disclosure of your information inside and outside of the EEA

Information may be accessed by users of the Scamalytics portal who have travelled or reside outside of the EEA.

As a global service we may also transfer data outside of the EEA to service providers located in such areas, in such circumstances we will seek to ensure that appropriate safeguards are put in place, and perform the necessary due diligence.

Selected third parties may include:

Other users of the Scamalytics portal for the purpose of identifying scammers or fraudsters;
clients, business partners, suppliers and sub-contractors for the performance and compliance obligations of any contract we enter into with them or you;
subcontractors including email marketing specialists, event organisers, payment and other financial service providers;
analytics and search engine providers that assist us in the improvement and optimisation of our site;

We will disclose your personal information to third parties:

In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets.
If Scamalytics or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, and other agreements; or to protect the rights, property, or safety of Scamalytics, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.

The lawful basis for the third party processing will include:

Their own legitimate business interests in processing your personal data, in most cases to prevent fraud;
satisfaction of their contractual obligations to us as both a data controller and data processor;
for the purpose of a contract in place or in contemplation;
to fulfil our legal obligations.

Where we store and process your personal data

The data that we collect from you will be stored in servers within the EEA however it may be transferred to, and accessed, in destinations outside the European Economic Area (”EEA”).

It may be transferred to third parties outside of the EEA for the purpose of fulfilling our anti-fraud detection and prevention services. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. This includes staff engaged in, among other things, our anti-fraud services and the provision of support services. By submitting your personal data and that of your users you agree to this transfer, storing or processing. Scamalytics LTD will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Retention of your data

We understand our legal duty to retain accurate data and only retain personal data for as long as we need it for our legitimate business interests Accordingly, we regularly review our use of data with the aim of removing data that we no longer have a legitimate business interest in maintaining.

We segregate our data so that we keep different types of data for different time periods. The criteria we use to determine whether we should retain your personal data includes:

the nature of the personal data;
its perceived accuracy; and
our legal obligations.

In terms of the retention of personal data relating to alleged scammers or fraudsters, Scamalytics maintains a ‘blacklist’ of users who have been banned from accounts of their clients. In order to fulfil our legitimate interests and to seek the prevention of fraud in the dating industry then we may retain this data to help us to identify these users and prevent them targeting other dating sites.

Your rights

You have the right to ask us not to process your personal data for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes and we will collect express consent from you if legally required prior to using your personal data for marketing purposes.

The GDPR provides both you and your end users the following rights. To:

Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party in certain formats, if practicable.
Make a complaint to a supervisory body which in the United Kingdom is the Information Commissioner’s Office. The ICO can be contacted through this link: https://ico.org.uk/concerns/

Protecting your information

Scamalytics LTD are dedicated to keeping your data safe as such we have the following policies in place to help us do this.

We have a Data Breach Policy to help guide us in the event of a data loss or data breach, a copy of this is available on request.

To help guide us and ensure we manage data safety, we also have a data security policy.

Password Restrictions

At Scamalytics LTD we require all passwords to be changed at regular intervals and to be of minimum complexities. We would ask that if you are a user of our portal that you keep your password safe and report any loss/breach of your passwords to us as soon as practically possible.

Access to information

The Data Protection Act 1998 and the GDPR give you the right to access information held about you or your end user.

If you would like to exercise any of the above rights then you should contact Scamalytics LTD and we will seek to work with you to provide any information required.

A subject access request should be submitted to Dan Winchester, and we will seek to get you the necessary information within 72 hours.

Changes to our privacy notice

Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy notice.

Contact

Questions, comments and requests regarding this privacy notice are welcome and should be addressed to Dan Winchester who can be contacted at dan@scamalytics.com

Privacy Policy

Recent Posts

Tags

News and Articles

Privacy and Cookie Policies

Connect

Fraudulent IP Adresses