Privacy notice.

This notice describes how Riffington Capital Ltd. processes personal data received through portfolio submissions, engagement correspondence, and the firm's website. Detailed handling of submitted claim documentation is set out in the Confidentiality & Submission Terms.

Personal data is processed on the basis of legitimate interest in evaluating and, where applicable, acquiring eligible receivables, and to perform contractual and legal obligations associated with those acquisitions.

Personal data may be shared with retained counsel, diligence providers, banking partners, and transaction counterparties strictly to the extent necessary for review, documentation, enforcement, or closing.

Personal data is retained only as long as required for the purposes above or as required by applicable law, after which it is destroyed or anonymized.

Where GDPR, UK GDPR, PIPEDA, or equivalent applies, data subjects may request access, correction, or deletion of their personal data by writing to engagement@riffington.com.