Privacy Policy

Last updated: October 15, 2025

This Privacy Policy explains how we collect, use, and protect personal data in line with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Finnish Data Protection Act (1050/2018), and other applicable laws.

1. Who We Are

Regulyn Ltd. (“Regulyn”, “we”, “our”, “us”) is a boutique legal advisory firm based in Finland, offering advisory and training services in regulatory matters. We act as the controller of your personal data as described in this Privacy Policy.

2. Data We Collect

We may collect:

  • Identification and contact data: such as name, title, organization, email, phone number, address

  • Client relationship data: such as engagement history, billing information, correspondence, service details

  • Website and communication data: such as browser type, cookie preferences, newsletter sign-up data

  • Event and training data: such as registration details, attendance lists, and feedback

We do not intentionally collect sensitive personal data unless strictly necessary and based on an appropriate legal basis.

3. Purposes and Legal Bases

We process personal data for the following purposes and rely on the following legal basis:

  • To deliver and manage our professional services
    – based on the performance of a contract or steps before entering one (Article 6(1)(b) GDPR).

  • To maintain business relationships
    – based on our legitimate interest in effective communication and client service (Article 6(1)(f) GDPR).

  • To comply with legal and regulatory obligations
    – based on legal obligation (Article 6(1)(c) GDPR), including accounting, recordkeeping, and statutory retention.

  • To improve our website and communications, and to protect our rights
    – based on consent for analytics cookies or our legitimate interest in maintaining a secure and user-friendly site (Article 6(1)(a) and (f) GDPR) and preventing misuse

We do not use personal data for automated decision-making or profiling.

4. Data Sharing and Transfers

We may share data only where necessary and with appropriate safeguards with:

  • Service providers (e.g. hosting, accounting, email, analytics), bound by confidentiality and data-processing agreements

  • Authorities or regulators, if required by law

In some occasions, your personal data may be transferred outside the EU/EEA. In the event personal data is transferred outside the EU/EEA, we ensure protection through EU Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

5. Data Retention

We retain personal data only as long as necessary:

  • Client and billing data: typically 2–10 years (to meet legal and professional obligations)

  • Communication and inquiry data: up to 2 years after last contact

  • Event or marketing data: until consent is withdrawn or data becomes obsolete

After these periods, data is securely deleted or anonymised.

6. Data Security

We apply appropriate technical and organisational measures to protect data, including:

  • Encrypted communications (TLS/SSL)

  • Controlled access and multi-factor authentication

  • Regular security audits and backups

  • Confidentiality undertakings for personnel and subcontractors

If a data breach occurs that may impact your rights or freedoms, we will notify you and the supervisory authority without undue delay.

7. Your Rights

Under GDPR, you have the following rights:

  • Access: to know what data we hold about you

  • Rectification: to correct inaccurate data

  • Erasure: to request deletion when legally permissible

  • Restriction: to limit processing in specific cases

  • Data portability: to receive your data in machine-readable format

  • Objection: to processing based on legitimate interests

  • Withdrawal of consent: where processing is based on consent

  • Complaint: to the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) in Finland

You can exercise these rights by contacting us. Please note that some rights may not be applicable in all cases. We may verify your identity before processing your request.

8. Contact Us

If you have questions, feedback, or data-related requests, please get in touch with us via a contact form.

Regulyn Ltd.
Website: https://www.regulyn.com