Privacy Policy
Version 1 · Effective 15 October 2026
The promise first. I believe privacy is a fundamental human right, and this site is built accordingly: no cookies of any kind, no analytics, no trackers, no third-party scripts — on the contact page, nothing at all. You may write to me under any name, or none, and remain that way through your free assessment — a name is required from the first fee, for a sanctions check, and identity documents only from the project fee. This policy explains, in plain language, the little that is collected, why, and what your rights are. There is no small print here.
Who is responsible. The data controller is Yuval Joshua Abraham, trading as Red Notice Help, a sole trader established in Greece. For anything in this policy: contact@rednoticehelp.com.
What I collect, why, and on what legal basis.
What you choose to send me. Messages through the contact form, by email, or on Signal — used to assess your situation and reply. The form transmits your message directly to my encrypted mailbox; nothing is stored on a web server. Legal basis: your consent, and steps taken at your request prior to a contract (GDPR Art. 6(1)(a), (b)).
Engagement data. Before accepting any fee I screen the name you give against applicable sanctions lists; before a project fee I verify identity (passport) and collect a recent proof of address and, where appropriate, a brief confirmation of source of funds. Legal basis: legal obligation and legitimate interests in lawful operation (Art. 6(1)(c), (f)).
Your case file. Documents, drafts, and correspondence processed to perform our contract (Art. 6(1)(b)).
Technical data. I collect none. My hosting provider (Cloudflare) processes connection data such as IP addresses transiently to deliver and secure the site, as any host must.
Card payments. If you pay the case review fee by card, the payment is processed by Stripe on Stripe's own pages. Stripe receives your name, email address, the amount and your card details; the card details never reach this site. I receive confirmation of payment with the name and email address you gave at checkout, and keep them with the engagement record. Legal basis: performance of a contract (GDPR Art. 6(1)(b)). Stripe's own privacy policy governs its processing.
Sensitive data — handled with the care it demands. Case material in this field inherently includes data about criminal allegations and proceedings (GDPR Arts. 9–10). I process it only on your instructions, only to prepare your own requests to INTERPOL's oversight bodies, and only with your explicit consent, recorded in the engagement letter.
How long I keep things — the honest carve-out. Your case file is yours: on your instruction, or when our work closes, it is deleted — I will offer, not wait to be asked. Pre-engagement messages are deleted on request. The sole exception, stated openly: the limited identity and screening records above, which the law requires me to retain for the period the law requires and which I cannot delete on request, even yours.
Who sees your data: nobody. I will never confirm to any third party that you have contacted or engaged me — not to an employer, not to a journalist, not to anyone — unless the law compels me or you instruct me in writing. I use three service providers, named openly: Proton (encrypted email, Switzerland — an EU-recognised adequate jurisdiction), Cloudflare (site hosting), and Signal (end-to-end encrypted messaging). No advertising, no data sales, no "partners" — ever.
Your rights. Access, rectification, erasure (subject only to the legal-retention exception above), restriction, objection, portability, and withdrawal of consent — write to contact@rednoticehelp.com and I will respond within one month. If I ever get it wrong, tell me first and I will fix it; you also have the right to complain to the Hellenic Data Protection Authority (dpa.gr).
Security. Messages rest encrypted (Proton, zero-access encryption); Signal conversations are end-to-end encrypted; I keep the minimum copies the work requires; submissions never touch a web server.
Changes. This policy is versioned and dated. If anything material changes, the site will say so plainly.