Privacy Policy

1. Who we are

Regium Ltd ("Regium", "we", "us", "our") is a company yet to be registered in the EU. Company registration number: [TBD upon incorporation].

We operate the website at regium.io and the compliance platform at app.regium.io. We are the data controller for personal data collected through these surfaces.

Contact us about privacy: communication@regium.io

2. What data we collect

Discovery call bookings. When you book a call through Cal.com, we collect your name, email address, company name, and any responses to the qualifying questions (licence status, employee count, urgent frameworks). This data is processed by Cal.com on our behalf.

Website analytics. We use Plausible Analytics, a privacy-first analytics tool that operates without cookies and does not collect or store personal data. Plausible processes only aggregate, anonymised page-view counts. No IP addresses are stored.

Direct email contact. If you email communication@regium.io, we collect your name, email address, and the content of your message.

Platform customers. If you are a customer of the Regium compliance platform (app.regium.io), the processing of personal data within the platform is governed by your Data Processing Agreement (DPA) with us. See section 7.

3. Legal basis for processing

Booking data: Legitimate interest (responding to a business enquiry you initiated; preparing for a call you requested).

Email contact: Legitimate interest (responding to your direct communication).

Platform data: Performance of a contract (subscription agreement) and legal obligation (regulatory compliance services).

We do not use your data for automated decision-making or profiling.

4. Third parties and sub-processors

We share personal data only with the following processors, each under a data processing agreement:

We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any advertising tracker on any surface.

5. Data retention

Booking and enquiry data: Retained for 3 years from last contact, or until you request deletion.

Platform customer data: Retained for the duration of the subscription plus 7 years (for regulatory audit trail requirements), unless a shorter period is agreed in the DPA.

Plausible analytics: Aggregate-only, never tied to individuals. Rolling 13-month window.

6. Your rights

Under UK GDPR and EU GDPR, you have the right to:

• — Access the personal data we hold about you
• — Correct inaccurate personal data
• — Request erasure of your personal data ("right to be forgotten")
• — Receive your data in a portable format
• — Object to processing based on legitimate interest
• — Lodge a complaint with your supervisory authority (ICO in the UK; relevant EU DPA for EU residents)

To exercise any of these rights, email communication@regium.io. We will respond within 30 days.

7. Platform customers — DPA

If you are a Regium platform customer, personal data you input into the platform (customer records, employee data, transaction data) is processed by Regium as a data processor on your behalf. You are the data controller for that data.

A Data Processing Agreement (DPA) compliant with GDPR Article 28 is included in all Regium subscription contracts. A standalone DPA is available on request. See: Data Processing Agreement.

8. Cookies

This website does not use cookies. Plausible Analytics operates without cookies. We do not use any marketing or tracking cookies. If you book a call via Cal.com, Cal.com's own cookie policy applies to their booking interface.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to platform customers by email. The "Last updated" date at the top of this page reflects the most recent revision.