European Fraud Protection Group
Back to Home

Privacy Policy

Last updated: 24 February 2026

The European Fraud Protection Group (“EFPG”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of individuals who use our website and advisory services. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection legislation.

1. Data Controller

The data controller responsible for the processing of personal data described in this policy is:
European Fraud Protection Group
Address: [Registered Address Placeholder]
Email: [email protected]

2. Categories of Personal Data Collected

We collect and process the following categories of personal data:

  • Identity data: Full name, country of residence
  • Contact data: Email address, telephone number
  • Case-related data: Amount lost, payment method used, name of platform or entity involved, date of transaction, description of circumstances
  • Technical data: IP address, browser type, operating system, and access timestamps collected automatically through server logs

3. Purposes and Legal Basis for Processing

We process personal data for the following purposes:

  • Case assessment and advisory services: To evaluate submitted cases, prepare documentation, and provide advisory support. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).
  • Communication: To respond to enquiries and provide case updates. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Website operation and security: To ensure the technical functionality and security of our website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Legal compliance: To comply with applicable legal obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Data Retention

Personal data submitted through the case intake form is retained for a period of three (3) years from the date of case closure or last contact, unless a longer retention period is required by applicable law. Technical data collected through server logs is retained for a maximum of twelve (12) months.

Upon expiry of the retention period, personal data is securely deleted or anonymised in accordance with our data management procedures.

5. Data Sharing and Transfers

EFPG does not sell, rent, or trade personal data to third parties. Personal data may be shared with the following categories of recipients where necessary for the purposes described above:

  • Regulatory authorities and financial institutions, where required for the preparation and filing of complaints or fund recovery requests, and only with the explicit consent of the affected individual
  • IT service providers and hosting providers who process data on our behalf under appropriate data processing agreements
  • Legal and compliance advisors, where required for the provision of our services

Where personal data is transferred outside the European Economic Area (EEA), such transfers are made in accordance with Chapter V of the GDPR, including the use of Standard Contractual Clauses or adequacy decisions.

6. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Art. 15): You have the right to obtain confirmation as to whether your personal data is being processed and to request a copy of that data.
  • Right to rectification (Art. 16): You have the right to request correction of inaccurate personal data.
  • Right to erasure (Art. 17): You have the right to request deletion of your personal data, subject to applicable legal retention obligations.
  • Right to restriction (Art. 18): You have the right to request restriction of processing in certain circumstances.
  • Right to data portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21): You have the right to object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one (1) month in accordance with the GDPR.

7. Cookies

This website uses strictly necessary cookies required for the technical operation of the website. These cookies do not require consent under the ePrivacy Directive (2002/58/EC). No tracking, analytics, or marketing cookies are used.

8. Data Security

EFPG implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security assessments.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

10. Changes to This Policy

EFPG reserves the right to update this Privacy Policy at any time. Changes will be published on this page with an updated revision date. Continued use of the website and services following any changes constitutes acceptance of the revised policy.