Privacy notice

Who is responsible

The controller for the processing described here is Onyx Byte - F.Z.E, based in Ajman, United Arab Emirates. Questions and data-subject requests can be sent to privacy@getregroute.com.

Assessment answers

The readiness assessment asks structured questions about your company: headquarters country, sector, customer types, data flows, product characteristics and existing documentation. Those answers, and the deterministic result computed from them, are stored so your result page keeps working.

We do not ask for names, customer records, or documents. Please do not enter personal data, customer data, or confidential material in free-text fields.

If you arrive from a marketing link, a specific referral, or a particular landing page, campaign and landing-page information (for example UTM parameters, referral source and landing page) may also be stored with your assessment for acquisition-source context. This is separate from, and unaffected by, the optional analytics described below.

Anonymous access (no account)

There is no sign-up and no password. Each completed assessment gets a random public identifier and a separate high-entropy secret. The secret is exchanged once for a browser cookie that grants access to that single result; only a hash of the secret is stored on the server.

Anyone holding your access link can open your result. Treat it like a password and do not share it publicly.

Email

If you buy the readiness pack, the email address you give at checkout is processed to send a one-time purchase confirmation summarising your result, to let you regain access to your pack from another device if you ask us to, and to answer support requests about that transaction. If you contact us, the address and message you send are processed to reply.

We do not send marketing email to addresses collected at checkout unless you separately ask us to.

Payments

Payments are processed by Stripe. Card details are entered directly into Stripe's payment form and are never received, seen or stored by this service. When you purchase the paid RegRoute EU Readiness Pack, we may process the purchase email, full name, company name, optional company website and optional job title or role. We link these details to the relevant assessment and purchase or entitlement so we can deliver the Pack, recover access and provide support. We also store the transaction reference, amount, currency and purchase state for that purpose.

At checkout we also record that you requested immediate delivery of digital content and accepted the Terms and Refund Policy, together with which version of those documents applied and a server timestamp. Separately, we record the first time your paid plan was opened and the first artifact you downloaded from it. This is transaction, security and contract evidence used for payment administration, refund and dispute handling, and support records — it is not optional analytics or marketing, and it does not involve a persistent browser identifier, your IP address, full browser information or a device fingerprint.

Analytics and advertising

Optional product analytics are currently disabled because the service does not yet offer an explicit analytics-consent choice. The service does not create a persistent browser identifier for this purpose.

Where advertising or third-party measurement tags are enabled, they run only with consent where consent is required, and they are never loaded on the access-token exchange route or on private result pages.

Cookies

Strictly necessary cookies: the access cookie that unlocks your own result. It is HttpOnly, SameSite=Lax, and carries no personal data.

Any analytics or advertising cookies are optional and are only set where you have consented.

Retention

Assessments and their results are retained for up to 24 months from creation so purchased reports remain retrievable. Purchase records are retained for as long as tax and accounting rules require. Contact messages are retained for up to 24 months.

Sharing

We share data only with the processors needed to run the service: our hosting and database provider, our payment provider, and our email delivery provider. We do not sell personal data.

Your rights

Depending on where you are, you may have rights of access, rectification, erasure, restriction, portability and objection. Because the service is anonymous, we may need the access link or the purchase reference to identify the record you are asking about. Write to privacy@getregroute.com.