Privacy Policy

LEAF-C — Law Enforcement Against Financial Crimes — provides investigative, consultancy, training, and integrity-testing services for public and private sector clients. This policy applies to leafc.net, leafc.co, and the authenticated workspace.

Questions about this policy: info@leafc.net.

We collect information you give us and information created when you use the site:

• Service inquiries. Name, email, phone (optional), organisation (optional), client type, service of interest, and your message.
• Accounts. Name, email, password (stored as a one-way hash), account type, organisation name where relevant, and an optional profile photo.
• Workspace records. Case details, assignments, notes, and training session records created by authorised staff in the course of an engagement.
• Session data. A sign-in token stored in your browser so you remain signed in. We do not use advertising cookies or third-party trackers on the public site.

• Review and respond to inquiries, usually within two business days.
• Create and administer accounts, including staff and client workspaces.
• Deliver the services you request and keep an audit trail of case work.
• Send transactional email from info@leafc.net, including inquiry receipts and follow-up from our team.
• Protect the security and integrity of our systems and engagements.

We do not sell personal information. We do not use inquiry or case content for marketing lists.

Access is limited to LEAF-C personnel who need it for the engagement or to operate the platform. We also use processors that host or transmit data on our instructions:

• Website hosting and content delivery.
• Database hosting for accounts, inquiries, and workspace records.
• Email delivery for inquiry notices and account-related messages.

We may disclose information if required by law, court order, or a competent authority, or to protect the rights, safety, or property of LEAF-C, our clients, or others.

Our websites and supporting systems may process information in more than one country. Where data is transferred, we take steps appropriate to the sensitivity of the record and the nature of the engagement.

Inquiry records are kept for as long as needed to handle the request and any related engagement, and thereafter as required for legal, audit, or professional-obligation purposes. Account and workspace records are retained while the account is active and for a reasonable period after closure unless a longer period is required.

You may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Contact info@leafc.net and include enough detail for us to locate the record (for example an inquiry reference number).

You can close a workspace session at any time with Sign out, which clears the token stored in your browser.

Our services are intended for adult clients, organisations, and authorised professionals. We do not knowingly collect personal information from children.

How we safeguard information is described in our Data Protection Policy.

We may update this policy as our services or legal obligations change. The effective date at the top of the page will be revised when we do.