Privacy Policy

AML Network operates this site as a public-interest research and reporting project. This policy explains what personal data the site collects, why it is processed, how long it is kept, and what rights readers, correspondents and confidential sources have over it.

Template notice. This document is a general-purpose template. It has not been drafted for any particular jurisdiction, corporate structure or hosting arrangement, and it should be reviewed and amended by qualified counsel, and checked against the technical setup actually in use, before it is published or relied upon.

What We Collect

The site is built to work with as little personal data as possible. In ordinary use, three categories are processed:

• Contact and tip form submissions. Whatever you choose to put in the message, together with any name, email address or file you attach. Only the message body is required; you may write to us without identifying yourself.
• Server logs. IP address, user agent, requested URL, referrer and timestamp, generated automatically whenever a page is served. These support security, abuse prevention and fault diagnosis.
• Basic analytics. Aggregate page views, referring sources and approximate country-level location, used to understand which research is being read.

We do not sell personal data, run advertising networks on the site, or build behavioural profiles of readers. Records in our watchdog databases concerning politically exposed persons, corporate entities, offshore structures and enforcement actions are drawn from public and official sources and are governed by our editorial and corrections policies rather than by this notice.

Lawful Basis for Processing

Where the UK GDPR, the EU GDPR or an equivalent regime applies, we rely principally on legitimate interests: operating and securing the site, answering correspondence, and carrying out journalism and research in the public interest. Several jurisdictions provide specific exemptions for journalistic, academic and literary processing; those exemptions are narrow and fact-specific, and counsel should confirm which are available. Where you send us a message, processing is also necessary to take steps at your request. Where consent is the basis, such as an optional mailing list, it may be withdrawn at any time.

Confidential Tips and Source Protection

Material sent to us about suspected laundering, sanctions evasion or beneficial-ownership concealment is treated as confidential by default.

• We do not require your identity, and we ask that you do not send identifying details unless you intend to be identifiable to us.
• Tip content is held separately from routine correspondence, and access is limited to those working on the matter.
• We do not disclose a source's identity to the subject of an investigation, and we resist disclosure requests so far as the law permits. No website can promise absolute protection against a lawful order.
• Consider using an anonymised connection and a mail account unconnected to your employer before contacting us.

Retention

Server logs are kept for a short, fixed period and then deleted or truncated. Analytics data is retained in aggregate form only. Correspondence is kept for as long as needed to answer it and to maintain a record of what was published and why; material connected to an unresolved investigation or a live legal risk may be held longer, subject to periodic review. Actual retention periods should be stated here and reconciled with what the hosting and analytics providers do by default.

Processors, Cookies and International Transfers

The site depends on third parties to function: a hosting and content-delivery provider, an analytics provider, an email provider and, where used, a form or newsletter service. Each acts as a processor under written terms and may store data outside your country. Transfers from the UK or EEA are made on the basis of an adequacy decision or standard contractual clauses, with supplementary measures where required. The specific providers in use should be listed here.

Cookies are used only where necessary for the site to function or to remember a preference you have set. Where analytics or embedded media would place non-essential cookies, they are set only with consent, and declining does not restrict access to any content. Most browsers allow cookies to be blocked or deleted.

Your Rights and How to Contact Us

Subject to local law, you may request access to personal data we hold about you, ask for its correction or erasure, object to processing based on legitimate interests, request restriction, or ask for a portable copy. Access and erasure rights are qualified where exercising them would prejudice journalism, expose a confidential source or defeat the purpose of an investigation; if we decline in whole or in part, we will explain why. Requests concerning entries in our published databases are handled through our corrections process, which may result in an amendment or annotation rather than removal.

Write to support@amlreview.co. We aim to acknowledge within a few working days and to respond substantively within one month. You may also complain to your national data-protection authority.