Effective Date: 11 June 2025
Foreranger LTD (“Asset ID Bridge,” “we,” “us,” or “our”) operates assetidbridge.com and any associated APIs, widgets, or mobile applications (collectively, the “Service”). We help investment professionals link and reconcile global security identifiers (e.g., ISIN, CUSIP, SEDOL, FIGI) across disparate data sources.
This Privacy Policy explains how we collect, use, store, disclose, and protect “Personal Data” when you:
visit or interact with the Service,
create an account or use our API, or
communicate with us by email, phone, or otherwise.
It does not cover third‑party sites or services that may integrate with ours.
| Category | Typical Examples | Source |
|---|---|---|
| Account Data | name, business email, organisation, role, password hash | you |
| Billing Data | invoicing address, VAT / tax ID, payment method token (held by our PCI‑certified processor) | you / payment processor |
| Usage Data | log‑in timestamps, pages viewed, API endpoints called, query metadata (not payload content) | automated |
| Technical Data | IP address, browser type/version, device IDs, cookie IDs | automated |
| Support Data | tickets, call recordings, attachments you send | you |
| Third‑Party Data | identity info from SSO provider if you link one; enrichment data from public corporate registries | third parties |
We do not knowingly collect data from children under 18.
We process Personal Data to:
Provide & maintain the Service (create accounts, authenticate, route API traffic).
Improve & secure the Service (debug, analyse errors, prevent fraud/abuse).
Bill & collect fees (issue invoices, process payments, recover debts).
Communicate (service announcements, security alerts, replies to support requests).
Market similar services to existing or prospective business customers (opt‑out anytime).
Comply with legal obligations (tax, accounting, anti‑fraud, sanctions screening).
Legal bases (GDPR/UK GDPR): contract Art 6(1)(b); legitimate interests Art 6(1)(f); legal obligation Art 6(1)(c); consent Art 6(1)(a) where applicable.
We never sell Personal Data. We share it only:
Service providers (cloud hosting, email, analytics, payment, customer‑support tools) bound by confidentiality and data‑processing terms.
Other users when you explicitly share workspaces or API keys.
Corporate affiliates as necessary for internal administration.
Lawful requests (court order, subpoena, regulatory demand) after verifying scope.
Business transfers (merger, acquisition, insolvency) with due notice.
Aggregated/anonymised statistics that cannot identify you.
We use:
Essential cookies – login sessions, CSRF protection.
Analytics cookies – e.g., first‑party Matomo or privacy‑modes of Google Analytics.
No advertising cookies.
You can control cookies in our banner and in your browser. We currently do not respond to Do‑Not‑Track signals.
Data in transit is encrypted with TLS 1.3; passwords are salted and hashed with Argon2; production data is logically separated by customer ID; access is role‑based and MFA‑protected; quarterly penetration tests and annual SOC 2 (Type II) audits are performed. No method is 100 % secure, but we take commercially reasonable measures to reduce risk.
We keep Personal Data for as long as you have an active account plus 7 years (UK statutory limitation period) unless a longer period is required by law. Logs older than 18 months are pseudonymised. You may request deletion earlier (see Rights below).
Servers are located in the EU and the US. Transfers outside the EEA/UK rely on (i) adequacy decisions or (ii) the European Commission’s Standard Contractual Clauses plus supplementary safeguards.
Depending on your jurisdiction, you may have rights to access, correct, erase, port, or restrict Personal Data, object to processing, or lodge a complaint with a supervisory authority. Contact us to exercise any right; we will respond within one month.
We will post any material changes on this page and, if significant, email account holders at least 30 days before the new policy takes effect.
Questions about privacy?
Email: info at foreranger dot com