Your Privacy Matters: This Privacy Policy explains how Upswitch collects, uses, and protects your personal information when you use our M&A platform. We are committed to transparency and giving you complete control over your business data.
1. Information We Collect
Account Information
- Name, email address, and account credentials
- Professional profile information and business details
- Billing and payment information (processed securely through third-party providers)
- Communication preferences and notification settings
- Identity verification documents for enhanced security
Business and Transaction Data
- Business listing information and financial data
- Transaction history and inquiry communications
- Due diligence documents and confidential business information
- Investment preferences and acquisition criteria
- Transaction completion data and success fee information
Technical Information
- Device information, IP address, and browser type
- Platform usage patterns and interaction data
- Cookies and similar tracking technologies
- Security logs and access records
2. How We Use Your Information
We use your information to:
- Facilitate M&A Transactions: Connect buyers and sellers, manage listings, and support deal completion
- Security and Verification: Verify user identities and ensure platform security
- Due Diligence Support: Provide secure document sharing and transaction management tools
- Communication: Enable secure messaging between verified buyers and sellers
- Platform Improvement: Enhance our services and develop new features
- Legal Compliance: Meet regulatory requirements and maintain transaction records
- Customer Support: Provide assistance and resolve platform issues
3. Data Security and Confidentiality
We understand that M&A transactions involve highly sensitive business information. Our security measures include:
- End-to-end encryption for all sensitive data and documents
- Secure data rooms with granular access controls
- Multi-factor authentication for all user accounts
- Regular security audits and compliance assessments
- Confidentiality agreements and NDA enforcement
- SOC 2 Type II compliance and industry-standard security protocols
All business information shared on our platform is treated with the highest level of confidentiality and is only accessible to verified, authorized parties.
4. Data Sharing and Disclosure
We May Share Information With:
- Service Providers: Third-party vendors who help us operate our platform (payment processors, security services, etc.)
- Transaction Counterparties: Verified buyers and sellers in active transactions (with appropriate NDAs)
- Legal Requirements: When required by law, court order, or to protect our rights
- Business Transfers: In connection with mergers, acquisitions, or asset sales
We Do NOT:
- Sell your personal or business information to third parties
- Share confidential business data without explicit consent
- Use your data for purposes unrelated to M&A transactions
- Provide access to your private communications without authorization
5. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and account settings
- Analyze platform usage and performance
- Provide personalized dashboard and search results
- Enable secure authentication and fraud prevention
- Support transaction management and communication features
You can control cookie settings through your browser, though some features may not work properly if cookies are disabled.
6. Your Privacy Rights
You Have the Right To:
- Access: Request a copy of all personal data we hold about you
- Rectification: Correct inaccurate or incomplete information
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Object: Opt-out of certain data processing activities
- Restrict: Limit how we process your personal data
How to Exercise Your Rights:
Contact us at privacy@upswitch.com or use the data management tools in your account settings. We will respond to requests within 30 days.
7. International Data Transfers
If you are located outside Belgium, your information may be transferred to and processed in Belgium where our servers are located. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses and adequacy decisions where applicable.
8. Data Retention
We retain your information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations and resolve disputes
- Complete M&A transactions and maintain transaction records
- Process success fees and maintain financial records
- Improve our platform and develop new features
After account deletion, we may retain anonymized data for analytics and service improvement purposes. Transaction records may be retained longer for legal compliance.
9. Business Data Protection
For businesses listing on our platform:
- You maintain ownership of all your business data and intellectual property
- Financial information is only shared with verified, interested buyers under NDA
- Business performance data is never shared with competitors
- You control who can access your detailed business information
- All data sharing requires explicit consent and legal agreements
10. Third-Party Services
Our platform may integrate with third-party services (payment processors, identity verification, document storage, etc.). These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.
11. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through prominent notices on our platform. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
12. Regional Compliance
GDPR Compliance (EU Users)
For users in the European Union, we comply with the General Data Protection Regulation (GDPR). Your personal data is processed based on legal grounds including consent, contract performance, and legitimate interests.
Belgian Data Protection Laws
As a Belgian company, we comply with local data protection regulations and work with Belgian data protection authorities for any compliance matters.
13. Contact Information
For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@upswitch.com
Address: Upswitch, Belgium
14. Supervisory Authority
EU users have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your privacy concerns adequately.