Rezolve Group Privacy Notice
The Rezolve Group is committed to protecting and respecting your privacy. As an organisation providing digital experience, product discovery, visual search, e-commerce, mobile commerce and customer engagement solutions, it is important that we treat your personal data properly and with care. This privacy notice outlines how Rezolve Group governs the processing of your personal data in accordance with applicable laws governing the use personal data by organisations (“Data Protection Law”). This can include, but is not limited to, the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK implementation of the GDPR and any national implementing law regulations and secondary legislation, such as Data Protection Act 2018 and the Data Use and Access Act 2025 in the UK. Terms such as “personal data”, “special category personal data”, “data controller”, “data processor” and “processing” shall have the definitions set out in the applicable Data Protection Law.
Please read this privacy notice carefully to understand how we will respect and manage your personal data. By visiting our website, using our services or by providing us with any information about yourself, you are accepting and agreeing to the practices described in this notice.
In this notice, “Rezolve”, “our” and “we” refer to the relevant and applicable Rezolve Group entities listed below:
| Rezolve entity name | Rezolve entity address |
|---|---|
| Rezolve Ai PLC | 21 Sackville Street , W1S 3DN , London , England |
| Rezolve Technology (India) Private Limited | Office No. 10, Sr No. 167, Plot No. 16, Near Ragdari, Aundh Pune 411007, MH, India |
| Rezolve Mobile Commerce, Inc. | BKC, CPA , 39 State Route 12, Suite 2 , Flemington, New Jersey 08822 , United States of America |
| Rezolve Technology SL | C/ Negocios Puerta de Banus, Bloque E, Oficina 45, Marbella-Malaga-28660, Spain |
| Crownpeak Technology, Inc. | 1700 N Lincoln Street, 16-111, Denver, CO 80203, USA |
| Attraqt Limited | 7th Floor, 222-236 Gray’s Inn Road, WC1x 8HB, UK |
| Crownpeak Technology GmbH | Stockholmer Allee 24, 44269, Dortmund, Germany |
| Evidon Inc. | 1700 N Lincoln Street, 16-111, Denver, CO 80203, USA |
| Fredhopper BV | Weesperstraat 61, Amsterdam, 1018VN, Netherlands |
| Fredhopper GmbH | Neuer Wall 50, Hamburg, 20354, Germany |
| Fredhopper PTY Limited | Level 1, 1401 Botany Road, Botany, NSW, 2019, Australia |
| Fredhopper SARL | 36 rue Scheffer, Paris, 75116, France |
| Early Birds SAS | 36 rue Scheffer, Paris, 75116, France |
| Magus Research Ltd | CentralPoint, 45 Beech Street, London EC2Y 8AD, UK |
| Spring Technologies EOOD | 5 Lachezar Stanchev Street, Sopharma Business Towers, Building А, Floor 6, Offices 3 and 4, 1756, Sofia, Bulgaria |
| ViSenze Pte Ltd. | 55 Ayer Rajah Crescent, #02-10, Singapore 139949. |
| GroupBy International Ltd | 500,250 The Esplanade, Toronto, ON m5A4J6 |
| Bluedot Industries Pty. Ltd. | 26 O’Neil Street, Panorama, South Australia, 5041, Australia |
| Bluedot Innovation Pty. Ltd. | 26 O’Neil Street, Panorama, South Australia, 5041, Australia |
| Bluedot Industries, Inc | 501 Congress Avenue, Suite 150, Austin, TX 78701 |
The data controller in relation to your data will depend on your location, the services provided to you and the Rezolve Group entities providing these services to you. If you are in any doubt as to which entity is data controller in relation to your information, please contact us at DPM@rezolve.com.
This notice sets out our commitment to be transparent about the data we collect about you, how it is used and with whom it is shared.
1. Information provided to Rezolve
1.1 Any information you provide Rezolve
This is any personal information that you provide to Rezolve, for example by:
- registering or filling in forms on our website, apps or social media accounts (our “platforms”);
- corresponding with us by phone, e-mail or otherwise;
- making any purchase via our platforms;
- subscribing to any service that we offer;
- subscribing to any mailing list;
- participating in any discussion boards or social media functions on our platforms;
- entering competitions, promotions and surveys;
- reporting a problem with our platforms, products or services; or
- applying to work with us.
The information you give us may include your name, address, e-mail address, social media account details, images and phone number. If you are buying a product or service from us, it may include financial and credit card information. If you are applying to work with us, it may include professional qualifications, professional affiliations, education, details about your work and career and a personal description. If you are participating in one of our productions, it may include any information that you provide, or other aspect about you, in relation to your participation.
If you provide any information about other individuals such as friends, family or colleagues, you warrant us that you are entitled to provide that information and authorise us to process this data on the same basis as outlined in this privacy notice.
1.2 Information Rezolve collects about you
When you visit our platforms, we may automatically collect the following:
- technical information, including the Internet Protocol (IP) address used to connect your device to the internet, your login information, browser type and version, time zone setting, browser plug-in types, plug-in versions, operating system and platform;
- information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our platforms (including date and time), items you viewed, page response times, download errors, length of visits to pages, page interaction information (such as scrolling, clicks, mouse-overs) and methods used to browse away from the page.
We may also use location information provided by your device, but this is subject to your consent, which can always be withdrawn via your account settings.
1.3 Information we receive from other sources
We may receive information about you from sources other than directly from yourself, which may include social media such as LinkedIn, Facebook, Instagram and Twitter. We may also receive information from partners who we work with, such as merchants and our corporate customers.
2. Data Processing
2.1. Legal basis of Processing
Data Protection Law in some jurisdictions requires us to fulfil at least one “legal ground” for processing data that contains personally identifiable information. These are, for example, currently set out in Articles 6, 9, 10 of the UK and EU General Data Protection Regulation (“GDPR”). The grounds applicable to the personal data to which this notice relates can include but is not limited to:
- Where the processing is necessary for us to perform a contract that you are party to, or to take steps at your request prior to entering a contract; and/or
- Where the processing is necessary for compliance with a legal obligation to which we are subject; and/or
- Where processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, provided that your fundamental rights and freedoms are not overridden; and/or
- Where you have given consent to the processing.
2.2 How Rezolve processes your personal information
| Purpose | Description | Legal Basis |
|---|---|---|
| Provide products and services | Process requests, deliver products and services, manage the customer relationship, provide training and perform obligations under customer or user contracts. | Performance of a contract; legitimate interests in providing and administering services. |
| Manage customer and user accounts | Create and maintain profiles and accounts, enable dashboard or platform access, authenticate users and verify identity. | Performance of a contract; legitimate interests in managing customer and user accounts and protecting account security. |
| Process purchases and payments | Manage orders, incoming and outgoing payments, payment records and the information needed to complete purchases or deliver orders. | Performance of a contract; compliance with legal obligations; legitimate interests in maintaining financial records. |
| Provide support and respond to enquiries | Handle technical support requests, customer service interactions, complaints, correspondence and other inbound enquiries. | Performance of a contract where the request relates to contracted services; otherwise legitimate interests in responding to and supporting customers and prospects. |
| Communicate service changes | Send operational notices about changes to products, services, events, accounts or other matters relevant to the relationship. | Performance of a contract; legitimate interests in administering services and business relationships. |
| Administer and secure websites and platforms | Operate websites, applications, dashboards and platforms, including troubleshooting, access management, security monitoring, testing and prevention of misuse or unauthorised access. | Performance of a contract; legitimate interests in operating, maintaining and securing websites, platforms and services; compliance with legal obligations where applicable. |
| Analyse usage and improve services | Analyse platform, website and service usage; conduct research, testing, surveys and statistical analysis; and improve, enhance or develop services, processes and user experiences. | Legitimate interests in understanding usage, improving services and ensuring they meet customer expectations; Singapore PDPA Business Improvement exception where applicable. |
| Personalise services and recommendations | Use account, relationship, transaction and usage information to tailor services, content, communications, product suggestions and recommendations to users or customers. | Legitimate interests in personalising relevant services and communications; consent where required by applicable law. |
| Send marketing communications | Send news, product and service information, offers, newsletters, invitations and other marketing communications, including communications selected by interests, business characteristics or location. | Legitimate interests in promoting relevant products and services; consent where required or provided. Individuals may opt out or withdraw consent. |
| Facilitate third-party marketing | Permit selected partners or third parties to provide information about products or services that may be of interest, where the required permissions have been obtained. | Consent where required by applicable law; legitimate interests only where permitted and not overridden by individual rights. |
| Measure advertising effectiveness | Measure or understand the effectiveness of advertising and use relevant information to deliver or support more relevant advertising. | Legitimate interests in evaluating and improving advertising; consent where required for cookies, pixels or similar technologies. |
| Manage events and participation | Register and administer attendance at events, webinars, programmes, promotions, competitions and surveys, including related communications and participation records. | Performance of a contract where applicable; legitimate interests in administering and promoting events and activities; consent where required. |
| Manage dietary and accessibility information | Use dietary or similar information supplied for an event to make appropriate arrangements for the participant. | Explicit consent for special category personal data; consent where applicable. |
| Manage business relationships and partnerships | Identify and engage prospects and manage strategic partnerships, alliances, sponsorships and other business collaborations. | Consent; steps prior to entering or performance of a contract; legitimate interests in developing and managing business relationships and opportunities. |
| Manage community and interactive features | Enable participation in discussion boards, social media functions and other interactive or community features chosen by the user. | Performance of a contract where applicable; legitimate interests in administering community features; consent where required. |
| Recruit and manage applicants | Receive, assess and manage job applications and related recruitment information, including qualifications, experience and professional history. | Steps taken at the applicant’s request before entering a contract; legitimate interests in recruitment and workforce management; legal obligations; consent where required for particular information. |
| Maintain business and personnel records | Maintain accurate operational records, including records relating to relevant employees, contractors, visitors or other individuals working at or interacting with facilities. | Legitimate interests in maintaining accurate records and administering operations; compliance with legal obligations where applicable. |
| Manage finance, accounting and reporting | Maintain accounts, process financial reporting, support audits and meet corporate record-keeping requirements. | Legitimate interests in financial management and reporting; compliance with legal obligations. |
| Prevent fraud and manage risk | Detect, investigate and prevent fraud, reduce credit and security risk, protect people and property, and manage legal or operational risk. | Legitimate interests in protecting the business, customers and others; compliance with legal obligations. |
| Comply with law and protect legal rights | Respond to lawful requests, court orders, regulators and public authorities; conduct audits; establish, exercise or defend legal claims; and protect rights, property and safety. | Compliance with legal obligations; legitimate interests in protecting rights, pursuing remedies, limiting loss and defending legal claims. |
| Support corporate transactions | Use or disclose relevant information for fundraising, due diligence, mergers, acquisitions, reorganisations, asset sales, insolvency or similar corporate transactions. | Legitimate interests in evaluating and completing corporate transactions; compliance with legal obligations where applicable. |
| Administer group operations and reporting | Share information within the corporate group for administration, internal reporting, customer insights, service optimisation and other permitted group purposes. | Legitimate interests in efficient group administration, reporting and service optimisation; performance of a contract or legal obligations where applicable. |
| Produce aggregated insights | Create and provide aggregated information or trend reports about how users interact with websites, platforms or services. | Legitimate interests in understanding service and website interactions and supporting partners’ analysis, using aggregated information. |
| Use location information | Use device-provided location information to support location-based functionality or relevant experiences where the user has enabled it. | Consent, which may be withdrawn through relevant settings. |
| Use cookies, pixels and similar technologies | Use cookies, web beacons, pixels and similar technologies to operate websites and platforms, maintain user preferences, analyse website usage and behaviour, monitor email engagement, improve website performance, enhance security, personalise content and services, support analytics, measure advertising effectiveness and deliver relevant marketing communications. | Consent for non-essential cookies, pixels and similar tracking technologies where required by applicable law; legitimate interests for website administration, service improvement, analytics, security, fraud prevention and business optimisation; performance of a contract where cookies or similar technologies are necessary to provide requested functionality or services. Please see our Cookie Policy for more information. |
3. Information Disclosure
3.1 Within our group
We may share your personal information with any group undertakings, otherwise known as the entities, listed as Rezolve Group above or otherwise as defined in s1161(5) of the UK Companies Act 2006, for administrative purposes. This includes any undertaking which is under 50% or more ultimate common ownership with us, provided that they are either:
- in the same jurisdiction as us;
- in a country that our jurisdiction has decided has adequate data protection laws in place; or
- have provided appropriate data protection safeguards of the sort approved by our jurisdiction’s data protection authorities and provide effective rights and remedies for you.
Any use of one group member’s personal data (beyond administration) by other members of the group will be subject to all the requirements of Data Protection Law.
3.2 Parties we may disclose your information to
Rezolve will not generally disclose your personal data to any other person unless we have a legal basis to do so under Data Protection Law.
For example, we may disclose your personal information to third parties in the following limited instances:
- If we outsource any aspect of our business or systems, then we may disclose your personal data to our service provider(s); or
- If we sell or buy any business or assets, then we may disclose your personal data to the prospective seller or buyer of such business or assets;
- If we or a substantial part of our assets are acquired by a third party, in which case personal data held by us about our customers may be one of the transferred assets; or
- In the event of a legal obligation to an authorised body or to protect the rights, property, or safety of Rezolve, our customers, or others. This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction
- You have expressly consented to it; or
- such disclosure is necessary for the performance of any contract we enter into with you. That may include the disclosure of order and contact details of our customers which will need to be disclosed to the relevant merchant to enable delivery.
If we disclose your personal data to a third party in these circumstances, please note that its treatment by that third party will be subject to their own privacy or data protection policies.
3.3 International Disclosures
Certain Rezolve Group entities based in the United States, such as Crownpeak Technology Inc. and Evidon Inc., participate in and certify compliance with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (together, the “Data Privacy Framework”). Where applicable, personal data transferred to or from the European Economic Area, the United Kingdom or Switzerland from or to the relevant certified entity in the United States would rely on the applicable Data Privacy Framework as a recognised transfer mechanism under relevant Data Protection Law.
Where personal data is transferred to a Rezolve Group entity or third party that does not participate in the Data Privacy Framework, Rezolve recognises the requirement and implements appropriate safeguards recognised under applicable Data Protection Law, such as Standard Contractual Clauses, the UK International Data Transfer Agreement, adequacy regulations or other lawful transfer mechanisms.
4. Data storage
4.1 Where we store your personal data
The data that we collect from you will be stored on our servers or those of our service providers. If that information is stored in the UK or the European Economic Area (“EEA”) or the country of operations, it will not be transferred to, and stored at, a destination outside the UK or EEA or the country of operations as the case may be unless:
- to one of our group undertakings to which section 4.1 applies;
- to a data processor acting on our behalf which is either (i) within the UK or EEA or the country of operations as the case may be, or (ii) in a country that the UK or European Union or the country of operations as the case may be has decided has adequate data protection laws in place, or (iii) has provided appropriate data protection safeguards of the sort approved by the UK or European Union or the country of operations as the case may be and provide effective rights and remedies for you; or
- you have given consent to us transferring data about you to third parties outside the UK or EEA or the country of operations as the case may be.
All payment transactions will be processed by secure third-party payment processors. Any handling of cardholder data by us will be done in compliance with the applicable PCI-DSS standards.
Where we have given you (or where you have chosen) a password which enables you to access certain parts of our platforms you are responsible for keeping this password confidential, and for all use made of your account with such password. We ask you not to share your password with anyone.
5. Data Security
We are committed to protecting the personal data entrusted to us and maintain appropriate technical and organisational measures designed to safeguard personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, misuse or access. These measures are designed having regard to the nature of the personal data we process, the risks presented by the processing, and applicable legal and regulatory requirements.
Our security programme includes measures such as access controls, authentication mechanisms, encryption where appropriate, network and system security controls, monitoring and logging, vulnerability management, security testing, incident response procedures, business continuity measures and personnel security controls. Access to personal data is restricted to individuals who require it to perform their duties and who are subject to appropriate confidentiality obligations.
While we implement security measures designed to protect personal data, no method of transmission over the internet or electronic storage is completely secure. Accordingly, although we strive to protect your personal data, we cannot guarantee its absolute security. We maintain procedures for identifying, investigating and responding to actual or suspected personal data breaches and will notify affected individuals and competent regulatory authorities where required by applicable law.
We regularly review and update our security measures to help ensure the ongoing confidentiality, integrity, availability and resilience of our systems, services and personal data processing activities.
6. Data Retention
Rezolve Group maintains a policy is to ensure that personal data is only stored for as long as is necessary for the purposes set out at section 2 above. This may vary according to the type of information and the specific applicable purpose(s). In determining how long we retain your information for, the criteria that we will take into consideration include our legal obligations, good industry practice, the guidance of relevant UK authorities or similar authorities in your country such as the Information Commissioner’s Office and HMRC, and also tax, accounting, health and safety and employment rules.
Retention periods may also vary depending on the nature of the relationship we have with you, the services provided, and our legal, regulatory and business requirements. For example, where we provide services to customers, we will generally retain personal data for the duration of the service relationship and for an appropriate period afterwards to comply with legal obligations, resolve disputes and enforce our agreements. Where we collect personal data from prospective customers, business contacts or individuals who make enquiries but do not enter into a contractual relationship with us, we will retain that information only for as long as reasonably necessary to manage the enquiry, maintain the business relationship, or pursue legitimate business opportunities, unless a longer retention period is required or permitted by law.
When personal data is no longer required for the purposes for which it was collected, we will securely delete, anonymise or otherwise dispose of it in accordance with our retention schedules and applicable legal requirements.
7. Your rights
You have various rights under Data Protection Law. These include:
- the right to ask us not to process your personal data for direct marketing purposes, even if you have given consent;
- the right to withdraw any consent you may have given for our processing of your data – if you exercise this right, we will be required to stop such processing if consent is the sole lawful ground on which we are processing that data;
- the right to ask us for access to the data we hold about you (see section 8 below for further details);
- the right to ask us to rectify any data that we hold about you that is inaccurate or incomplete;
- the right to ask us to delete your data in certain circumstances;
- the right to ask us to restrict our processing of your data in certain circumstances;
- the right to object to our processing of your data in certain circumstances;
- the right to require us to give you the data we hold about you in a structured, commonly used and machine-readable format so that you can provide the data to another data controller;
- the right, where we make a significant decision about you based solely on automated processing, including profiling, to be provided with information about the decision, to make representations, to contest the decision and to obtain human intervention, or to not be subject to decisions based solely on automated processor if provided as such under applicable Data Protection Law.
You can exercise any of the rights set out above, free of charge, by contacting us at DPM@rezolve.com. If we require any more information from you in order to process the request, we will ask this from you following your request.
Data Protection Rights are not absolute and may only be fulfilled in certain circumstances. If any rights requests cannot be fulfilled we will explain the reason for refusal in our response. If you submit unfounded or excessive requests to exercise any of these rights, we reserve the right to decline your request or make a reasonable charge for fulfilling your request.
If you have any questions or complaints about how we’re using your personal data, you have the right to complain to us. You can do this by contacting us at DPM@rezolve.com.
If you still have concerns, you may address your concerns to the relevant regulatory authority for the applicable Data Protection Law. For example, the Information Commissioner’s Office (www.ico.org.uk) for UK and similar authority in your country if you are concerned that we are not respecting your rights under Data Protection Law.
8. Automated decision-making, profiling and Artificial Intelligence
Automated decisions are where a computer makes decisions about you without a person being involved. Profiling is the recording and analysis of a person’s psychological and behavioural characteristics, to assess or predict their capabilities or to assist in identifying categories of people.
We also use artificial intelligence and machine learning technologies. Artificial Intelligence (“AI”) focuses on creating systems that can perform tasks typically requiring human intelligence, such as learning, reasoning, problem-solving, perception, and language understanding. Machine learning is a type of AI that teaches machines to learn and interpret from information and then provide a response. One type of artificial intelligence that we use is natural language processing. Natural language processing involves reading, understanding and analysing speech and text.
The models, algorithms, and tools we use do several things including:
- helping colleagues draft, refine and improve written content;
- summarising information to support day-to-day work (as part of productivity support use);
- transcribing meetings and workshops to produce notes and
- extracting and structuring key information from documents to reduce manual effort.
Rezolve does not profile or make any automated decisions about its clients or customers without meaningful human oversight and review.
9. Other websites
Our platforms may, from time to time, contain links to and from the platforms of third parties. If you follow a link to any of these platforms, please note that they should have their own privacy policies and that we do not accept any responsibility or liability for those policies. Please check those policies before you submit any personal data to those platforms.
10. Changes to this privacy notice
Any changes we make to our privacy notice in the future will be posted on this page and, where appropriate, we will notify you by e-mail. Please ensure you review this privacy notice frequently to see any updates or changes.
11. Contact
If you have any questions, comments and requests regarding this privacy notice, please email them to DPM@rezolve.com.
Updated: September 2026