Privacy Policy

Last updated: 15 February 2026

1. Introduction

SanctionSignal ("we", "us", "our") is operated by Helium22. This Privacy Policy explains how we collect, use, and protect your personal data when you use our sanctions screening service.

2. Data We Collect

We collect the following personal data:

  • Account information: Name, email address, account type, and encrypted password when you register.
  • Search data: Queries you submit to our sanctions screening service, search timestamps, and IP addresses for security and rate limiting.
  • Payment data: Subscription details are processed by Stripe. We store your Stripe customer ID but not your card details.
  • Technical data: IP address, browser type, and access timestamps for security monitoring.
3. How We Use Your Data
  • To provide sanctions screening services.
  • To manage your account and subscription.
  • To process payments via Stripe.
  • To improve our service and monitor usage patterns.
  • To comply with legal and regulatory requirements.
4. Sanctions Data

The sanctions data we screen against is publicly available information sourced from UK HM Treasury/FCDO, EU Financial Sanctions, and US Treasury OFAC. This data is not personal data belonging to our users.

5. Data Retention

Account data is retained for as long as your account is active. Search logs are retained for 12 months for security and analytics purposes. You may request deletion of your account and associated data at any time.

6. Third-Party Services
  • Stripe: Processes payments. See Stripe's Privacy Policy.
  • Leaflet/CARTO: Map tiles for the sanctions world map. No personal data is shared.
7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Object to processing
  • Data portability

To exercise any of these rights, please contact us at admin@helium22.com.

8. Cookies

We use session cookies to maintain your login state. These are essential cookies required for the service to function and do not track you across other websites.

9. Security

We use industry-standard security measures including encrypted passwords, CSRF protection, secure sessions, and HTTPS to protect your data.

10. Contact

For privacy inquiries, contact us at: admin@helium22.com