Privacy Policy

Last updated: May 2026. This policy is subject to legal review and may be updated before or after launch.

1. Who we are

RiskEvents is operated by Leadenhall Analytical Services Ltd, registered in England and Wales. For privacy enquiries, contact us via our contact form.

2. What data we collect

The public dashboard does not require user accounts or login. We collect the following data:

Alert subscribers: Email address, subscription preferences (peril types, regions, lines of business, frequency), verification status. Verification, management, and unsubscribe tokens are stored in hashed form.

Contact form submissions: Email address, subject, message content, and optionally a reference to a specific event.

Feature request submissions: Email address, category, title, free-text description, and optional structured fields (such as source URLs, region, or proposed taxonomy names) submitted via the suggestion form. This data is used to improve platform coverage, prioritise new features, and identify missing events or sources. Feature request data is never shared externally.

Analytics: Aggregate, non-personally-identifiable usage data including page views, filter usage, and visitor counts.

3. How we use your data

Subscriber email addresses are used solely to deliver risk event alerts matching your preferences. Contact form submissions are used to respond to your enquiry and, where applicable, to correct event data. Feature request submissions are used to improve platform coverage, prioritise development, and identify missing events or sources. We do not sell, rent, or share personal data with third parties for marketing purposes.

4. Data retention

Alert subscriptions: Retained while the subscription is active. Unsubscribed accounts are deactivated but retained for duplicate prevention. You may request full deletion.

Contact submissions: Retained for 12 months after resolution, after which they are anonymised (email replaced with a hash, message content cleared). This allows us to track correction patterns while limiting personal data retention.

Feature request submissions: Retained for 12 months after resolution, after which they are anonymised: email is replaced with a hash, and free-text fields (title, description, structured data, and internal notes) are cleared. Category, status, and timestamps are retained for aggregate reporting.

Analytics data: Aggregate data retained indefinitely. No personal data is stored.

5. Your rights

Under applicable data protection law, you have the right to access, correct, or delete your personal data. Alert subscribers can manage preferences or unsubscribe at any time via the links in alert emails. For other data requests, use our contact form.

6. Cookies

See our Cookie Policy for details on cookies and similar technologies used by the Service.

7. Third-party services

The Service uses Supabase (database hosting, EU region), Vercel (frontend hosting), Resend (email delivery), and map tile providers. These services process data under their own privacy policies and data processing agreements.

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the Service or by email to alert subscribers.