Privacy Policy

1. What information is collected

When you run a sanctions and PEP screening check, you enter personal details about a third party (your prospective client) — typically their full name, date of birth, and country. You also provide your own email address to receive the compliance record. These details are used solely to perform the check and deliver the result.

2. Transmission to OpenSanctions

The third party's details (name, date of birth, country) are transmitted securely to OpenSanctions (opensanctions.org) solely for the purpose of performing the screening check. AMLKits Check does not store, retain, or log these details or the screening results on its own servers after the check completes.

3. Email delivery via Resend

The compliance record (as a PDF) is emailed to the address you provide at the time of the check. This email is sent via Resend (resend.com), a third-party email delivery provider. AMLKits Check does not retain a copy of the compliance record, the email address, or the search details after the email has been sent. Resend's privacy policy governs how it handles email delivery data.

4. Payment information

Payment for each check is processed by Stripe. AMLKits Check does not collect, store, or have access to your card details. Stripe's privacy policy governs the handling of your payment information and can be found at stripe.com/privacy.

5. Your responsibilities

By using this service to screen a third party's personal details, you represent that you have a lawful basis to do so under applicable privacy and data protection laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You are responsible for ensuring that your collection and use of the third party's personal information to conduct this check is permitted under your legal and regulatory obligations, including your AML/CTF program.

6. Audit logs

For fraud prevention and customer support purposes, AMLKits Check retains minimal server-side logs on a completed check: the reference number, timestamp, match result (match or no match), and the Stripe payment session identifier. No personal details of the individual being screened (name, date of birth, country) or the user's email address are included in these logs.

7. Contact

If you have questions about this Privacy Policy or how your information is handled, please contact us via amlkits.com.au.