Privacy Policy and Data Protection – Riche Gestoire
This Privacy Policy defines the strict data security protocols that Riche Gestoire ("the Platform", "we", "us", or "our") employs to protect user information processed via https://richegestoire.org. Located in the Blue Tower in Brussels, we are unconditionally committed to protecting your digital privacy in accordance with the General Data Protection Regulation (AVG/GDPR) and Belgian national law.
Data Architecture and Information Collection
To provide a secure, high-quality AI-driven analysis environment, we systematically collect the following categories of personal data:
- Identity Data: Full name, date of birth, and official identification documents required for mandatory Know Your Customer (KYC) verification.
- Contact Data: Verified email address, active phone number, and residential address.
- Digital Telemetry: IP addresses, browser specifications, geographical routing data, and detailed logs of your interactions with our algorithmic interfaces.
- Compliance Data: Financial source information specifically required to comply with Belgian anti-money laundering (AML) legislation and the guidelines of financial supervisory authorities.
Legal Basis for Processing
Under European law, the processing of your personal data is strictly justified on the basis of:
- Contractual necessity: To manage your account and provide our technical analysis services.
- Legal obligations: To comply with national regulations imposed by the Belgian authorities and the Data Protection Authority (GBA).
- Legitimate interests: For fraud prevention, network stability, and the optimization of our AI models through anonymized datasets.
Cryptographic Standards and Retention
Riche Gestoire uses enterprise-level 256-bit AES encryption to secure all data transfers. Your personal information is hosted on strictly secured servers with restricted access within the EEA. We retain personal data no longer than necessary for the stated purposes or as legally required by Belgian retention obligations (usually 7 to 10 years).
Your Rights under GDPR
The GDPR grants you full control over your data. You have the right to:
Right of access
Request a copy of the data we hold about you.
Right to rectification
Demand correction of inaccurate or outdated information.
Right to erasure
Request deletion of your data ("Right to be forgotten'), subject to legal restrictions.
Right to data portability
Receive your data in a structured and machine-readable format.
To exercise these rights, please contact our Data Protection Officer at [email protected].
Effective Date: March 20, 2026.