Privacy
Privacy across the OVARA website and secure platform.
This notice explains the important distinction between OVARA’s public information website and the secure, invitation-based platform used by licensed organisations and their applicants.
Effective 30 August 2026
Public information website
The public OVARA website presents product, company, trust and legal information. It is separate from the secure platform and is not an open channel for submitting KYC or KYB case material. The public site may process only the limited technical information needed to deliver, secure and operate the website.
Information processed
The site may process technical request information needed to deliver and protect the service, such as IP address, browser details, timestamps and security logs. A language preference may be stored on your device. Optional analytics will not be enabled without the required notice and controls.
Secure applicant journeys
When a licensed organisation invites an applicant, the applicant receives an organisation-specific link and provides the requested information and documents within the controlled OVARA environment. That authenticated or token-protected journey is not a submission through the public information website. Applicants should use only the invitation and support instructions supplied by the organisation that requested the onboarding.
Controller and processor roles
The relevant licensed organisation normally determines why and how applicant, customer and business information is processed and acts as controller. OVARA generally processes platform data for that organisation as processor, under the service agreement, data-processing agreement and documented instructions. The organisation’s privacy notice explains its purposes, lawful bases, disclosures and contact route; the executed agreements confirm the allocation of responsibilities for the service.
Rights and retention
Rights requests concerning a licensed organisation’s applicants or clients should normally be directed to that organisation. Technical records are retained only for legitimate operational, security, legal and contractual purposes, under approved retention controls.
International processing
Where processing or support involves another country, OVARA and the relevant organisation must use an applicable lawful transfer mechanism and assess the safeguards required for the data and service.