Privacy Policy

Last updated: 27 September 2026

1. Controller

RAGANORD – Global Research & Intelligence is the data controller responsible for personal data processed in connection with raganord.com and our subscription services. Our contact details for data-related enquiries are available via the Support page.

---

2. Data We Collect

We collect only the personal data that is necessary to provide and administer our subscription service:

• Account and billing information: name, organisation name, billing address, and payment method details (processed by our payment provider; we do not store card numbers).
• Contact information: email address used to deliver reports, subscription confirmations, and service communications.
• Subscription preferences: agreed watch scope, language preferences, and delivery format.
• Usage data: basic technical data generated by your visit to raganord.com (IP address, browser type, page interactions), collected via Cloudflare infrastructure for security and performance purposes.
• Correspondence: records of support requests and written communications you send to us.

We do not collect sensitive personal data (such as health, financial, or political information) and we do not use cookies for advertising or tracking purposes.

---

3. Legal Basis for Processing

We process personal data on the following legal grounds under the General Data Protection Regulation (GDPR):

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to fulfil your subscription, deliver reports, and manage billing.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR): processing required to meet tax, accounting, or regulatory obligations.
• Legitimate interests (Art. 6(1)(f) GDPR): basic technical security and fraud prevention measures that do not override your rights.

---

4. How We Use Your Data

Personal data is used solely for the following purposes:

• Activating, delivering, and managing your subscription;
• Sending intelligence reports and service-related communications (subscription confirmations, renewal notices, scope change notifications);
• Processing payments and maintaining billing records;
• Responding to support and cancellation requests;
• Complying with applicable legal and regulatory obligations.

We do not use your data for marketing, profiling, or automated decision-making, and we do not sell, rent, or share your personal data with third parties for their own commercial purposes.

---

5. Data Sharing

We share personal data with third parties only where necessary and only with parties that maintain adequate data protection standards:

• Payment processor: to handle subscription billing securely. Your card and banking data are processed directly by the payment provider under their own privacy terms.
• Infrastructure providers: Cloudflare for DNS, security, and performance services at the network level.
• Legal or regulatory authorities: if required to do so by applicable law or a binding court order.

---

6. Data Retention

We retain personal data only for as long as is necessary for the purposes set out in this policy:

• Active subscription data is retained for the duration of the subscription.
• Billing and transaction records are retained for seven (7) years to comply with Portuguese accounting and tax law.
• Support correspondence is retained for two (2) years after the matter is closed.
• Technical/usage data is retained for up to ninety (90) days.

Once the applicable retention period expires, data is securely deleted or irreversibly anonymised.

---

7. Your Rights

As a data subject under the GDPR you have the following rights, which you may exercise at any time by contacting us through the Support page:

We will respond to all verified requests within thirty (30) days.

---

8. Security

We apply technical and organisational measures appropriate to the sensitivity of the data we process, including encrypted transmission (HTTPS), access controls, and the principle of data minimisation. No internet-based service can guarantee absolute security; in the event of a personal data breach that is likely to result in high risk to your rights, we will notify you and the competent supervisory authority as required by law.

---

9. International Transfers

We aim to process and store data within the European Economic Area. Where any data is transferred to a third country, we ensure that appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are in place in accordance with GDPR requirements.

---

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will reflect any revision. Where changes are material, we will notify active subscribers by email at least fourteen (14) days in advance.

---