← RevCertaPrivacy Notice
Business enquiries and agreed billing reviews
What this notice covers This notice explains how RevCerta uses personal information when communicating with business representatives. The initial screening accepts effectively anonymous business information only. Any wider paid review needs a separately agreed inventory and handling schedule before records are transferred. This notice does not itself authorise personal-data processing or international transfers.
Who is responsible
| Item | Detail |
|---|
| Controller | MOHAMMED MUSTAFA ALSHATIR, founder of RevCerta |
| Location | Al Sarim Street, Tripoli, Libya |
| Email | hello@revcerta.com |
| Notice version | 4.0 dated 27 October 2026 |
Information we use
Professional contact information such as name, role, employer, corporate email address and public source.
Communication records such as replies, requests, meeting notes, delivery status and opt-out instructions.
Minimum security and accountability records such as access, deletion and incident records when applicable.
Enquiries should contain a scope summary only. Agree the engagement and handling arrangements before sending operational records.
Do not submit customer or employee names, personal contact details, bank information, credentials, ticket text, source system identifiers, file links, full contracts, full invoices, special category data or criminal offence data.
Why we use personal information
| Purpose | Lawful basis |
|---|
| Research and send relevant one-to-one business communications | Legitimate interests in introducing a relevant business service, subject to targeting, transparency and opt-out controls |
| Respond to enquiries and discuss a requested pilot | Steps requested before a possible engagement and legitimate interests in responding to business communications |
| Maintain opt-out and suppression records | Legitimate interests in respecting objections and preventing further contact |
| Protect systems and document security or deletion actions | Legitimate interests in security, accountability and dispute prevention, and legal obligations where applicable |
Where information comes from
Professional contact information may come from company websites, public professional profiles, public business directories, referrals and direct correspondence. Pilot information is supplied by the participating organisation under the pilot terms.
Business outreach controls
Outreach is limited to relevant business roles at confirmed corporate organisations.
Messages are individually researched and explain why the organisation was selected.
RevCerta does not use purchased bulk lists, tracking pixels or automated sequences for this pilot campaign.
Every recipient can object or opt out, and RevCerta will stop direct marketing to that person.
Anonymous pilot information
No live client workbook is accepted until the contracting party, terms, data route and operating controls have been confirmed. The client retains its mapping key. Re-identifiable personal information must not be submitted.
International transfers
RevCerta currently operates from Libya. A UK organisation must not provide or make personal information accessible to RevCerta unless the parties have first confirmed their roles and documented any required transfer safeguard and data protection test. No client workbook is accepted before the contracting party, terms, data route and operating controls have been confirmed. The initial review will be limited to effectively anonymised records. If personal information is discovered, processing will stop and the sender will be notified.
Sharing and service providers
Access is limited to RevCerta and service providers necessary for email, secure document handling, security or professional advice. RevCerta does not sell personal information. A provider that processes personal information must act under appropriate instructions, confidentiality and data protection terms.
Retention and deletion
| Record | Retention approach |
|---|
| Anonymous pilot workbook and working copies | Deleted within 30 days after the final report, or earlier on written request, unless law requires retention |
| Business enquiries and relevant correspondence | Kept for up to 24 months after the last meaningful interaction, unless a longer period is needed for a legal claim or obligation |
| Opt-out record | Minimum contact identifier kept as long as reasonably necessary to honour the objection |
| Security and deletion records | Kept for up to 12 months unless needed for an incident, claim or legal obligation |
Security
The proposed live pilot controls include data minimisation, coded identifiers, restricted access, multi-factor authentication where available, controlled file exchange and deletion checks. They must be confirmed before activation. Pilot information is not used to train public or third-party artificial intelligence systems. If a confirmed incident affects information supplied by a client, RevCerta will investigate, contain it and notify the client without undue delay.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability, or object to processing. You may object to direct marketing at any time by emailing hello@revcerta.com. UK individuals may also complain to the Information Commissioner’s Office at ico.org.uk. These rights apply to personal information and do not apply to information that is effectively anonymous.
Changes to this notice
RevCerta will update this notice when its identity, services, providers, retention periods, transfer arrangements or processing activities materially change. The current version and date appear above.