SanctionsLookup1. Who we are
SanctionsLookup ("we", "us") provides sanctions screening services through our website sanctionslookup.com, our API and our customer portal (the "Services"). This policy explains what personal data we process when you use the Services, why, and what rights you have.
Questions or requests: [email protected]
2. Names you screen
Paid API and portal screening
Our systems are designed not to store the data you submit for screening on a paid plan, such as names, dates of birth and identifiers. We process it only to perform the screening and return the result. Transient copies may exist briefly during processing.
For each request we keep a record that does not contain the screened data. We use it to bill you, enforce usage limits and our Terms, keep the Services reliable, prevent misuse and improve the Services.
For these screenings, our customer decides who is screened and why, and we act as a processor on the customer's behalf. If you were screened by one of our customers, please contact that organization with any questions.
Free tools and free credits
When you use our free search tools, demos or free credits, we log the data you submit, your IP address and device information. We use this, based on our legitimate interest, to prevent abuse and improve the tools. We keep these logs for up to 12 months.
Only submit data you are entitled to use for screening. When testing the API with free credits, we recommend using sample names instead of real customer data.
3. People named in sanctions lists and enforcement records
Our screening data and website include information about individuals and entities named in official sanctions lists and in enforcement actions published by authorities, such as names, aliases, dates of birth, nationalities and identifiers. We obtain it from those official publications, not from the individuals themselves.
We process it based on our legitimate interest in supporting sanctions compliance and providing information about public sanctions and enforcement actions. Our customers receive it in screening results. We provide match scores; our customers make their own decisions.
We regularly update our data from the official sources. Enforcement records may remain available as historical public records.
If you believe information about you is wrong, you can ask the issuing authority to correct it at the source. You can also contact us to request correction or to object to our use of it. We assess each request. Information that matches the official source may remain in our data.
4. Your account
When you create an account and use the portal, we process your name, email address, login identifier, signup IP address and usage information.
We use this to run your account, provide the API, bill you, give support and keep the Services secure. This information is required to provide the Services.
Legal basis: our contract with you, our legal obligations (such as accounting) and our legitimate interest in security, enforcing our Terms and defending legal claims.
Payments are handled by our payment processor. We do not store your card details.
5. Contact, support and emails
Contact form and portal support
We receive your name, email address and message, and use them to reply to you.
Emails
We send service emails about your account, security, team invitations and billing. We may also email account holders about the Services, such as onboarding help, product updates or feedback requests. To stop these, reply to the email.
Legal basis: our legitimate interest in responding to you and running our business.
6. Analytics, error monitoring and cookies
Analytics
We use analytics tools on our website and portal to collect usage and device data and understand how they are used. This may include session recordings. In the portal, this data may be linked to your account. Data you submit for screening through the API or portal on a paid plan is excluded from recordings.
Error monitoring
When something breaks, technical error data may be sent to our error monitoring provider so we can fix it. We take steps to exclude screening data from error reports.
Cookies and browser storage
We use cookies and similar storage to keep you logged in, remember your preferences and run analytics. Where required by law, we use analytics only with your consent, which you can withdraw at any time in the cookie settings.
Legal basis: your consent for analytics where required by law; otherwise our legitimate interest in understanding how the Services are used, improving them and keeping them reliable.
7. Who we share data with
We do not sell personal data.
Service providers that help us run the Services, such as hosting, payment, email and analytics providers, process personal data on our behalf. Our professional advisers, such as accountants and lawyers, may receive it when needed. Our customers receive screening results as described in section 3.
We may also disclose personal data when required by law, to protect our rights, or as part of a merger, acquisition or sale of our business.
International transfers
Some of our service providers may process data outside the EEA, the UK or Switzerland. Where they do, we use appropriate safeguards, such as the EU Standard Contractual Clauses. Contact us for details.
8. How long we keep data
We keep personal data only as long as we need it for the purposes in this policy:
- Account data: while your account is active, and for a limited time after it is closed
- Billing records: as long as tax and accounting law requires
- Free tool and free credit logs: up to 12 months, as described in section 2
- Sanctions and enforcement data: as described in section 3
- Other logs, analytics and support messages: as long as needed for security, troubleshooting, improving the Services, enforcing our Terms and establishing or defending legal claims
After that, we delete or anonymize it.
9. Your rights
You can ask us to access, correct, delete or export your personal data, or to restrict or object to how we use it. Email [email protected]. We may need to verify your identity before acting on a request. Some rights have limits; for example, we may keep data we need to meet legal obligations or to establish or defend legal claims. You can also complain to the data protection authority in your country.
10. Changes
We may update this policy. The date at the top shows the latest version.