Rewards4U Privacy Policy

Above and Beyond Consultancy Services Limited
Privacy Policy

Effective date: 01/03/2026

Introduction

 1. Above and Beyond Consultancy Services Limited (“we,” “us,” “our”) is committed to protecting the privacy of clients, prospects, suppliers, employees, website visitors, and other individuals whose personal data we process. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, your rights, and how to contact us.

Scope

2. This Policy applies to personal data collected through our website, client onboarding, services delivery, marketing activities, recruitment, events, and other interactions with us. It covers data relating to individuals (natural persons) only.

Personal data we collect

3. We may collect the following categories of personal data, where relevant:
  • Identity and contact: name, title, company, postal address, email, phone number.
  • Professional and business: job title, employer, business contact information, company size, industry, contract and engagement details.
  • Financial and transactional: billing address, payment details, invoice history, bank account information (where necessary and with appropriate protections).
  • Communications and correspondence: emails, messages, meeting notes, recordings (if recorded with notice).
  • Marketing and engagement: preferences, communication history, website analytics, IP address, cookies (see Cookies section).
  • Recruitment and HR: CVs/resumes, references, interview notes, eligibility to work documentation.
  • Sensitive categories (only where necessary and with explicit consent): health or disability information for reasonable adjustments, background check data.

How we collect data

  • Directly from you (forms, email, phone, contracts).
  • From third parties (client representatives, referees, partners, publicly available sources).
  • Automatically via our website (cookies, analytics).

Purposes of processing and legal basis

We process personal data for the following purposes and on these lawful bases (examples — applicable basis may vary by jurisdiction):
  • To provide and manage services, contracts, and deliverables (performance of a contract).
  • To communicate with clients, prospects, suppliers, and candidates (legitimate interests, contract, or consent).
  • To process payments, invoices, and tax/legal obligations (legal obligations, contractual necessity).
  • To manage recruitment and HR processes (legitimate interests, consent, or legal obligation).
  • To operate, maintain, and improve our website and services, and for analytics (legitimate interests or consent).
  • To send marketing communications and newsletters (consent where required; otherwise legitimate interests with opt-out).
  • To comply with legal and regulatory obligations and to respond to lawful requests (legal obligations).
  • To protect rights, property, or safety (legitimate interests).

Sharing and disclosure

We may share personal data with:
  • Service providers and processors (payment processors, IT/hosting providers, CRM, analytics, professional advisers) under written contracts requiring confidentiality and security.
  • Clients and counterparties where required for service delivery or under contract.
  • Legal, regulatory, audit, and law-enforcement authorities as required by law.
  • Potential buyers, investors, or advisors in connection with a corporate transaction (with appropriate safeguards). We do not sell personal data for direct remuneration. Where required by local law (e.g., CCPA), we will disclose sales or sharing practices in applicable notices.

International transfers

 1. Personal data may be transferred to or accessed from jurisdictions outside your country, including countries that may not provide the same level of data protection. When we transfer data internationally we implement appropriate safeguards (standard contractual clauses, approved frameworks, or other lawful mechanisms) to protect your data.

Data retention

2. We retain personal data only as long as necessary for the purposes for which it was collected, to comply with legal or regulatory obligations, resolve disputes, and enforce agreements. Retention periods depend on the nature of the data and the purpose (e.g., accounting records retained per tax laws; recruitment data retained for a limited period unless candidate consents to longer retention).

Security

3. We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures are reviewed periodically and updated as appropriate.

Your rights (may vary by jurisdiction)

4. Subject to local law, you may have rights including:
  • Access: request a copy of personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of data (subject to legal or contractual restrictions).
  • Restriction: request restriction of processing in certain circumstances.
  • Portability: receive your data in a structured, commonly used format.
  • Objection: object to processing based on legitimate interests or direct marketing.
  • Withdraw consent: where processing is based on consent, you may withdraw it. To exercise rights, contact us using the details below. We may need to verify your identity and may refuse or limit requests where permitted by law.

Cookies and similar technologies

 1. We use cookies and similar technologies to operate our website, analyze usage, and serve targeted content. You can manage cookie preferences via your browser settings or our cookie consent tool. For specific cookie details, see our Cookie Notice (if applicable).

Children

2. Our services are not directed at children under the applicable minimum age. We do not knowingly collect personal data from children without parental consent.

Third-party links

3. Our website may include links to third-party sites. We are not responsible for their privacy practices. Review their privacy policies before providing personal data.

Changes to this Policy

4. We may update this Policy to reflect changes in law, business practices, or service features. We will post the updated Policy with a revised effective date. Where required by law, we will notify you of significant changes.

Contact and complaints