Loading amazing content...
Effective Date: March 1, 2026
At RaveOx, we are committed to protecting the privacy and data rights of individuals in the European Union and European Economic Area. This page outlines our compliance with the General Data Protection Regulation (GDPR) and explains how we handle personal data of EU/EEA residents.
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018. It gives individuals greater control over their personal data and establishes strict requirements for organizations that process this data.
As a data controller and data processor, RaveOx ensures that all processing of personal data from EU/EEA residents complies with GDPR requirements.
We process personal data lawfully, fairly, and in a transparent manner.
Data is collected for specified, explicit, and legitimate purposes.
We collect only data that is relevant and necessary for our purposes.
We keep personal data accurate and up to date.
Data is retained only as long as necessary.
We ensure appropriate security of personal data.
Under GDPR, we must have a valid legal basis for processing personal data. We rely on the following bases:
When processing is necessary for the performance of a contract with you (e.g., providing our services).
Example: Creating your account, processing payments, delivering software solutions.
When processing is necessary to comply with a legal obligation.
Example: Retaining transaction records for tax purposes.
When processing is necessary for our legitimate interests, provided they do not override your rights.
Example: Improving our services, fraud prevention, network security.
When you have given explicit consent for a specific purpose.
Example: Marketing communications, cookies (where required).
As an individual in the EU/EEA, you have the following rights regarding your personal data:
You have the right to be informed about the collection and use of your personal data. This privacy policy provides that information.
You have the right to access your personal data and request a copy of the information we hold about you.
You have the right to have inaccurate personal data corrected or completed if it is incomplete.
You have the right to request deletion of your personal data under certain circumstances.
You have the right to request restriction of processing your personal data in certain situations.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects.
To exercise any of your GDPR rights, please contact us using the information below:
Email: privacy@raveox.com
Subject: Please include "GDPR Request" in the subject line.
Verification: We may need to verify your identity before processing your request.
Response Time: We will respond to all legitimate requests within 30 days.
We have appointed a Data Protection Officer (DPO) to oversee our compliance with data protection laws and to serve as a point of contact for data subjects and supervisory authorities.
DPO Name: [Your DPO Name]
Email: dpo@raveox.com
Address: RaveOx, [Your Address], [City, Country]
When we transfer personal data from the EU/EEA to countries outside the European Economic Area, we ensure appropriate safeguards are in place:
Our cloud infrastructure providers (AWS, Google Cloud, Azure) maintain compliance with GDPR and provide appropriate safeguards for data transfers.
As a data processor for our clients, we offer Data Processing Agreements (DPAs) that:
To request a copy of our DPA, please contact us at privacy@raveox.com.
In the event of a personal data breach, we have procedures in place to:
We retain personal data only as long as necessary for the purposes for which it was collected:
| Data Category | Retention Period | Justification |
|---|---|---|
| Account Information | Duration of account + 1 year | Contract performance & legitimate interests |
| Transaction Records | 6 years | Legal obligation (tax/accounting) |
| Marketing Data | Until consent withdrawn | Consent |
| Support Communications | 3 years | Legitimate interests (service improvement) |
| Website Analytics | 26 months | Consent/legitimate interests |
For EU/EEA users, we:
For more information, see our Cookie Policy.
Our services are not directed to children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete it.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU/EEA member state of your habitual residence, place of work, or place of the alleged infringement.
Website: ico.org.uk
Phone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you have any questions about our GDPR compliance or data protection practices, please contact us:
Data Protection Officer: dpo@raveox.com
Privacy Team: privacy@raveox.com
Address: RaveOx, [Your Address], [City, Country]
EU Representative: [Your EU Representative Name/Company], [EU Address] (if applicable)
We may update this GDPR Compliance page periodically to reflect changes in our practices or legal requirements. We will indicate the effective date at the top of this page. Material changes will be notified to affected individuals where required by law.
This GDPR Compliance page was last updated on March 1, 2026.