Privacy Policy

This policy applies to information collected through the IARB website, the client portal, and correspondence with our personnel. The International Asset Recovery Bureau (IARB) is an independent, private investigation and recovery-support organization. IARB is not a government agency, law-enforcement body, regulator, or court, and is not affiliated with, endorsed by, or acting on behalf of any government or law-enforcement organization.

We collect the information you provide, including: full name, email address, phone number, country and optional organization; case information you submit (incident details, transaction identifiers, wallet addresses, descriptions); documents and attachments you upload; and correspondence exchanged with us.

We do not request, and you must not submit, passwords, private keys, seed phrases, or full payment card numbers.

Information is used to assess and investigate submitted cases, to communicate with clients about their cases, to maintain case records and documentation, to operate and secure the platform, and to meet legal or regulatory obligations that apply to us.

Where the GDPR or comparable legislation applies, we process information on the basis of performance of a contract, our legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

Client information is stored in an access-controlled environment. Access is restricted to personnel who require it to handle a case, and administrative actions affecting cases are logged. Document storage uses authenticated access controls so that files are only available to the client who uploaded them and authorized personnel handling the case.

No method of transmission or storage is completely secure. We implement controls appropriate to the sensitivity of the information, but clients should transmit only what is necessary for the assessment.

We do not sell client information. We may share information only where necessary to perform an engagement you have requested, where a service provider is required to operate the platform, or where we are required by law to do so.

Case work is international in nature and information may be processed in jurisdictions other than your own. Where data is transferred across borders, we apply safeguards appropriate to the transfer.

We retain case information for as long as necessary to serve the case and to meet applicable legal, professional and record-keeping obligations. Clients can request deletion, but records we are required to retain will be retained for the required period.

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may object to certain processing. We will respond to verifiable requests within the timeframe required by applicable legislation.

The platform uses cookies and similar technologies required for authentication, session continuity and security. Optional analytics, if enabled, are used to understand aggregate usage. We do not use advertising trackers for cross-site behavioural advertising.

If a breach affecting your information occurs, we will take appropriate steps to contain and investigate it, and will notify affected clients and the relevant supervisory authority where required by law.

For privacy questions or requests, use the contact page and select “Privacy request”, or write to us using the address published on the contact page.