Privacy policy

RHA Consulting (“we”, “us”, “our”)

1. Scope

This Policy explains how we collect, use, disclose, and protect personal information in connection with our website, pre-engagement communications, onboarding, and delivery of Blockchain Forensic Reports and related consulting.

2. Categories of Data

Identity & Contact: name, email, phone, role/company (if provided), time zone/country.

Case Materials: public blockchain data (e.g., wallet addresses, TX hashes), incident timelines, screenshots/documents you submit.
Billing/Transaction: amounts, invoice IDs, payment confirmations from authorized processors (we do not store full card numbers or sensitive authentication data).
Technical: IP, device/browser data, pages viewed, timestamps, basic cookies/analytics.
Compliance (if legally required): limited KYC/ID on a strict need-to-know basis.

We never request or store wallet seed phrases or private keys.

3. Purposes & Legal Bases

We process personal information to: (a) provide services and fulfill contracts; (b) communicate about scoping, delivery, billing, and support; (c) verify facts where lawful/necessary; (d) ensure security and prevent fraud/abuse; (e) keep business/tax/audit records; (f) improve our services.
Legal bases (as applicable): contract, legitimate interests (security, support, improvement), legal obligation, consent (e.g., certain cookies/marketing).

4. Disclosures

We do not sell or rent personal information. We may disclose to:

Service providers/processors (hosting, IT/email, analytics, payment processing) under confidentiality and data-processing terms;
Exchanges/platforms/law-enforcement where relevant, lawful, and pursuant to proper process;
Professional advisers (legal/tax/compliance) under duties of confidentiality;
Successors in a merger, acquisition, or reorganization;

Authorities to comply with law or protect rights/safety.

5. International Transfers

We retain personal information only as necessary: case files/reports and billing/tax records typically up to 7 years; routine communications/analytics up to 24 months, unless longer is required for legal, audit, or security reasons. Data is deleted or anonymized when no longer needed.

7. Security

We employ administrative, technical, and organizational measures (encryption in transit, access controls, least-privilege, logging). No method of transmission or storage is entirely secure; absolute security cannot be guaranteed.

8. Your Rights

Depending on jurisdiction, you may have rights to access, correct, delete, restrict/oppose, obtain portability of certain data, and withdraw consent where processing is based on consent.
Requests: support@rhaconsulting.co. We will verify identity and respond within applicable timelines.

9. Children

Our services are not directed to children under 16. We do not knowingly collect personal information from children.

10. Changes

We may update this Policy from time to time. Updates are effective upon posting with the revised version.

11. Governing Law

This Policy is governed by the laws of Delaware, USA, consistent with our Terms & Conditions.

12. Contact

RHA Consulting — support@rhaconsulting.co