Saltar para o conteúdo

Legal

Política de privacidade

Como a Route Royal trata os dados pessoais: o que recolhemos, porquê, com quem os partilhamos e os direitos que tem, onde quer que viva.

Última atualização: 3 de novembro de 2026

Rascunho para revisão jurídica. Os elementos assinalados ainda estão por confirmar.

Num relance

  • Nunca vendemos dados pessoais nem os partilhamos para fins publicitários.

  • Este website não utiliza cookies analíticos nem de publicidade.

  • Os dados dos seus clientes são seus: só os tratamos mediante as suas instruções.

  • Os dados de clientes são armazenados na União Europeia.

  • O Q não altera nada até que a pessoa que o pediu o confirme.

  • Onde quer que viva, pode pedir para consultar, corrigir, apagar ou transferir os seus dados.

Nesta página
  1. Quem somos
  2. O que esta política abrange
  3. O que recolhemos
  4. Como os utilizamos
  5. IA
  6. Decisões automatizadas
  7. Marketing
  8. Com quem os partilhamos
  9. Onde são armazenados
  10. Durante quanto tempo os conservamos
  11. Segurança
  12. Violações de dados
  13. Os seus direitos
  14. Como os exercer
  15. Europa, Reino Unido e Suíça
  16. Austrália
  17. África do Sul
  18. Maurícia
  19. Estados Unidos
  20. Outros países
  21. Menores
  22. Cookies
  23. Alterações a esta política
  24. Contacte-nos

Esta política foi redigida em inglês, e a versão inglesa prevalece. Os títulos e os resumos breves foram traduzidos para sua comodidade.

  1. Quem somos

    Em resumo: A Route Royal é um produto da Elementary Digital, que é a responsável pelo tratamento: decidimos como são utilizados os dados abrangidos por esta política.

    Route Royal is a business software platform made by Elementary Digital. In this policy, "Route Royal", "we" and "us" mean Por confirmarthe registered name of the company that controls your data, registered in Por confirmarcountry under number Por confirmarregistration number, with its registered office at Por confirmarregistered address.

    We are the controller of the personal data described in this policy (the "responsible party" under South African law and the "business" under US state laws), which means we decide why and how it is used. You can reach us about anything in it at privacy@routeroyal.com.

    Por confirmarName the Data Protection Officer, or the Information Officer registered with South Africa’s Information Regulator, if one is appointed, with their contact details. Por confirmarIf the company is not established in the European Union or the United Kingdom, name its representative in each, as Article 27 of the GDPR and the UK GDPR require.

  2. O que esta política abrange

    Em resumo: Os nossos próprios visitantes, titulares de conta e contactos, onde quer que vivam. Os dados dos seus clientes na Route Royal são seus, e tratamo-los por sua conta.

    This policy covers the personal data we hold as a controller: about the people who visit routeroyal.com, contact us, book a demo, hold a Route Royal account or deal with us as a customer, supplier or partner. It applies wherever you live, and the regional sections below add what the law where you live asks for.

    It does not cover the data our customers keep in Route Royal about their own clients, contacts and website visitors. For that data the customer is the controller, and we are its processor (the "operator" under South African law and a "service provider" under US state laws): we use it only on the customer’s instructions, under our data processing addendum. If a business that uses Route Royal holds your data, its own privacy notice applies, and requests about that data should go to the business first; we will help it answer, and we will pass on any request that reaches us.

    Websites that businesses build with Route Royal, and services you connect to Route Royal, have their own privacy notices. Our cookie policy covers cookies, and our security page covers how we keep data safe.

  3. O que recolhemos

    Em resumo: O que nos dá, os registos de início de sessão por segurança e a forma como usa a Route Royal. Sem cookies de análise ou publicidade neste site, e sem dados sensíveis.

    We collect only what each situation needs. Most of it comes from you; the rest comes from your device, from your organisation or from the services below.

    When you visit routeroyal.com. This website sets no analytics or advertising cookies, and you can read it without telling us who you are. It stores only what it needs to work: a cookie that remembers your language, a note in your browser for the current visit when you close the call-to-action bar, and the website’s own settings cached in your browser. Our hosting providers process your IP address and the details of each request (the page, time, browser and the page you came from) to deliver the site, keep it secure and defend it against abuse.

    When you contact us or book a demo. Your name, work email address, company, phone number if you give it, what your enquiry is about or your industry, your language and time zone, and what you write to us. We file it as an enquiry in our own sales pipeline, which runs on Route Royal, and use it only to reply.

    When you create and use an account.

    • Sign-up details

      Details
      Your name, email address, phone number and country, and a password, which we store only as a hash and never in plain text.
      Where it comes from
      You. If you sign in with Google, Microsoft, GitHub or LinkedIn, we receive your name, email address and profile picture from them.

    • Profile and settings

      Details
      Your display name, photo, job title, language, time zone, notification preferences, and the details needed to check your second factor if you turn on two-factor sign-in.
      Where it comes from
      You, and the organisation that invited you.

    • Sign-in records

      Details
      The time, IP address, device, browser and operating system of each sign-in, and an approximate location worked out from the IP address. They are shown to you in your account so you can spot a sign-in that was not you.
      Where it comes from
      Your device, and an IP location lookup service.

    • How you use Route Royal

      Details
      The actions you take and the records you create and change, kept in an activity log for your organisation, and the requests you make to Q, Route Royal’s AI, with Q’s replies, kept as chat history in your account.
      Where it comes from
      You.

    • Billing

      Details
      Your plan, invoices, billing contact and payment records. If you pay by card, your card details go straight to our payment processor; we never hold your full card number.
      Where it comes from
      You, and your organisation’s owner.

    • Support

      Details
      What you send us when you ask for help, and the notes we make to answer you.
      Where it comes from
      You.

    Por confirmarConfirm whether Google Analytics runs in the Route Royal app in production. If it does, list it here as usage analytics, ask for consent before it loads where the law requires, and list its cookies in the cookie policy.

    Sensitive data. We do not ask for, and do not want, special categories of personal data about you: your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health, sex life or sexual orientation, or criminal records. Please do not put them in a message, a support request or your profile. The only sensitive data we hold is your sign-in credentials, used solely to sign you in.

    Data about other people. If you give us another person’s details, for example by inviting a colleague, tell them about this policy. If you use Route Royal to hold data about your own clients, the section above on our two roles applies.

  4. Como os utilizamos

    Em resumo: Para fazer funcionar a Route Royal, mantê-la segura, prestar-lhe suporte e cumprir a lei, cada finalidade com o seu fundamento jurídico indicado.

    We use personal data only for the purposes below, each on the legal basis shown. Where a law where you live needs no legal basis, or names it differently, the purpose still stands.

    • To provide Route Royal and your account: to set it up, sign you in, run the features you and your organisation use, and bill you.

      Legal basis
      Performing our contract with you or your organisation.

    • To keep Route Royal, your account and other people safe: to check every request, detect and stop fraud, abuse and attacks, and investigate incidents.

      Legal basis
      Our legitimate interest in a secure service, and in some cases our legal obligations.

    • To answer your enquiries, demo requests and support requests.

      Legal basis
      Steps you ask for before a contract, or our legitimate interest in replying to you.

    • To tell you about your account and the service: changes to the service, these policies, security notices and your invoices.

      Legal basis
      Performing our contract with you, or our legal obligations.

    • To understand how Route Royal is used and make it better, using the least data that will answer the question, and aggregated or anonymous data wherever we can.

      Legal basis
      Our legitimate interest in a better product.

    • To send you news about Route Royal.

      Legal basis
      Your consent, or, where the law allows it for existing customers, our legitimate interest, always with a way to opt out. See the section on marketing.

    • To meet our legal obligations: keeping tax and accounting records, answering lawful requests from authorities, and handling requests about your rights.

      Legal basis
      Our legal obligations.

    • To establish, exercise or defend legal claims, and to enforce our terms.

      Legal basis
      Our legitimate interest in protecting our rights and the people who use Route Royal.

    Where we rely on legitimate interests, we have weighed them against your interests and rights, and you can object at any time: see the section on your rights. We will not use your personal data for a new purpose that is incompatible with these without telling you first and, where the law requires it, asking for your consent.

  5. IA

    Em resumo: O Q envia aos fornecedores de modelos de IA apenas o que precisa para responder, nunca treina com os seus dados e não altera nada sem a sua confirmação.

    Q, Route Royal’s AI, works as the person asking and within their permissions, and every change it makes waits for that person to confirm it. To answer a request, Q sends the request and the data needed to answer it to the AI model providers we use, which process it to return a reply. They are listed in our subprocessors list. Por confirmarConfirm the AI model providers’ terms on retaining this data and training on it, and state them here; the proposed wording is that they do not use it to train their models and keep it only as long as needed to reply.

    We train no AI models of our own on your personal data. Your chat history with Q is yours: it stays in your account, and you can delete any conversation.

    Where our customers use Route Royal’s AI features on their own data, such as the AI voice agent, whose calls are recorded and transcribed, or lead scoring, we act as their processor, and their privacy notice applies. Our AI page explains what Q does and does not do.

  6. Decisões automatizadas

    Em resumo: Nenhuma decisão com efeitos jurídicos ou de importância semelhante é tomada sobre si apenas por uma máquina.

    We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects for you or affect you in a similarly significant way. Q suggests and drafts; a person decides. Our security systems may block a request or a sign-in automatically, for example after too many failed attempts, which you can always raise with us.

    Where a business uses Route Royal to score or rank its own leads, that is the business’s decision and its responsibility as controller; ask the business how it uses the result.

  7. Marketing

    Em resumo: Novidades da Route Royal só se as aceitou ou a lei o permitir, com cancelamento em cada mensagem. Nunca publicidade.

    We send you news about Route Royal only where you have agreed to receive it, or where the law where you live lets us write to existing customers about similar services. Every marketing email has an unsubscribe link, and you can also opt out by emailing privacy@routeroyal.com; we act on it promptly and without charge. We never send marketing by text message or automated call without your prior consent, and we do not call people to sell Route Royal who have asked us not to.

    Opting out of marketing does not stop service messages about your account, your security or these policies, which you receive for as long as you hold an account.

    We do not use personal data for advertising, we do not share it with advertisers, and we do not build advertising profiles. We do not buy marketing lists.

  8. Com quem os partilhamos

    Em resumo: Apenas os prestadores de serviços que operam a Route Royal por nossa conta, a sua organização, os serviços que liga, consultores e autoridades. Nunca os vendemos.

    We do not sell personal data, and we do not share it for advertising. We share it only with:

    • Service providers who run parts of Route Royal for us, under contracts that require them to protect it, use it only for us and delete it when they no longer need it: hosting and databases, sign-in, email and message delivery, AI models, maps and address lookup, IP location, media storage and delivery, and payment processing. Every one is named in our subprocessors list, with where it processes data.
    • Your organisation. The owners and administrators of the organisations you belong to can see your profile, your role, your activity in that organisation and your sign-in records, so they can manage their team and keep their account safe.
    • Services you or your organisation connect to Route Royal, such as calendars, email accounts, property portals, social networks or identity verification, which receive what the connection needs and are governed by their own terms.
    • Professional advisers, such as lawyers, auditors and accountants, where needed and under confidentiality.
    • Authorities, courts and regulators, where the law requires it or to protect the rights, property or safety of Route Royal, our customers or others. We tell you before we disclose your data unless the law forbids it, and we challenge requests we think are unlawful or too broad.
    • A buyer or successor, if Route Royal’s business is reorganised, merged or sold, under the same protections, with notice to you before your data becomes subject to a different policy.

    We may share data that cannot identify you, such as aggregated usage statistics, freely.

  9. Onde são armazenados

    Em resumo: Na União Europeia, com uma garantia reconhecida sempre que os dados saem da UE ou do seu país.

    Route Royal’s customer data is stored in the European Union. Some of our service providers, and our own team, may process data in other countries, including Por confirmarthe countries in which our service providers and team process data, from the subprocessors list, whose laws may protect it differently from yours.

    Whenever personal data leaves the European Economic Area, the United Kingdom, Switzerland, Australia, South Africa, Mauritius or another country whose law restricts transfers, we make sure it is covered by a safeguard that law recognises: a finding that the destination protects data adequately, the European Commission’s Standard Contractual Clauses (with the UK’s International Data Transfer Addendum for data from the United Kingdom), a binding agreement that holds the recipient to this policy’s standard, or, in a few cases, your explicit consent or the need to perform your contract. You can ask us for a copy of the safeguards for a particular transfer at privacy@routeroyal.com.

  10. Durante quanto tempo os conservamos

    Em resumo: Apenas enquanto precisarmos deles; depois, apagamo-los ou anonimizamo-los.

    We keep personal data only as long as we need it for the purposes above, and then we delete it or make it anonymous:

    • Account data, for as long as your account is open, then Por confirmarhow long after an account closes its data is deleted or anonymised, so that you can reopen it or ask for a copy in the meantime.
    • Sign-in records and security logs, for Por confirmarretention period for sign-in records.
    • Chat history with Q, for as long as your account is open, or until you delete it.
    • Enquiries and demo requests that do not become customers, for Por confirmarretention period for enquiries.
    • Billing and tax records, for as long as tax and accounting law requires, usually five to ten years after the transaction depending on the country.
    • Records of requests about your rights, for Por confirmarretention period, to show that we answered them.
    • Data in backups, until the backups expire, Por confirmarthe backup expiry period.

    We may keep data for longer where the law requires it, where it is needed for a legal claim, or where it has been made anonymous so that it no longer identifies you.

  11. Segurança

    Em resumo: Encriptação, acesso limitado a quem precisa, verificações em cada pedido e monitorização.

    We protect personal data with technical and organisational measures appropriate to the risk: encryption of every connection and of stored data, each organisation’s data kept separate, every request checked against the permissions of the person making it, staff access limited by role and protected by multi-factor authentication, scanning of our code and dependencies, monitoring and alerting, and a process for handling incidents. Our security page explains them, and what we do and do not claim.

    No system is perfectly secure. You help by using a strong, unique password, turning on two-factor sign-in, reviewing your sign-in records, and telling us at security@routeroyal.com if you think something is wrong.

  12. Violações de dados

    Em resumo: Se uma violação o puser em risco, informamo-lo a si e à autoridade de controlo dentro do prazo que a lei fixa.

    If we find a breach of security that affects your personal data and is likely to put you at risk, we will tell you without undue delay, and we will tell the regulator as the law requires: within 72 hours of becoming aware under the GDPR, the UK GDPR and Mauritius’s Data Protection Act, as soon as reasonably possible under South Africa’s POPIA, and under Australia’s Notifiable Data Breaches scheme for breaches likely to cause serious harm. We will tell you what happened, what data was affected, what we have done and what you can do.

    Where the data belongs to one of our customers, we tell the customer, so that it can meet its own obligations, as our data processing addendum sets out.

  13. Os seus direitos

    Em resumo: Consultar, corrigir, apagar, limitar, transferir os seus dados ou opor-se à sua utilização, e retirar o consentimento, onde quer que viva.

    Wherever you live, you can ask us to:

    • confirm whether we hold personal data about you, and give you a copy of it, with the information in this policy about how we use it;
    • correct it if it is wrong or incomplete;
    • delete it, where we no longer need it, you withdraw consent, you object and we have no overriding reason, or we must delete it by law;
    • restrict how we use it while we check a correction or an objection, or where you need it kept for a legal claim;
    • give it to you, or to another company, in a structured, commonly used, machine-readable format, where we hold it under your contract or consent;
    • stop using it where you have objected, including to direct marketing at any time and to processing based on legitimate interests on grounds relating to your situation;
    • not be subject to automated decisions of the kind described above; and
    • withdraw consent you have given, at any time, without affecting what we did before.

    The regional sections below name the laws and regulators where you live and add what each gives you. If a law where you live gives you a right that is not listed here, you have it, and we will answer your request under that law.

    You can also complain to a data protection authority, such as the one where you live, work or where you think something went wrong. We would rather you told us first, at privacy@routeroyal.com, so that we can put it right.

  14. Como os exercer

    Em resumo: Basta um email. Confirmamos que é mesmo você, respondemos no prazo legal, sem custos, e nunca o penalizamos por pedir.

    Email privacy@routeroyal.com, or write to us at Por confirmarregistered address, saying what you would like and which account or email address it concerns. You can also change your profile, settings and notification preferences, and delete your chat history with Q, in your account at any time.

    • Who can ask. You, or someone you authorise in writing, such as a parent, guardian or an authorised agent; we may ask for proof of the authority and confirm the request with you directly.
    • Checking it is you. We may ask you to confirm your identity, for example by replying from the email address on your account, before we act, so that nobody else can obtain or change your data. We ask only for what we need to check.
    • How long. We reply as soon as we can and within the time the law allows: within one month under the GDPR, extendable by two months for complex requests, and within 45 days under California law, extendable by a further 45 days, in each case telling you if we need longer. Other laws set similar periods.
    • Cost. Free, unless a request is clearly unfounded or excessive, in which case we may charge a reasonable fee or decline it, and tell you why.
    • If we refuse. We will tell you why, how to appeal to us, and how to complain to the regulator.
    • No penalty. We will never treat you differently, charge you more or give you a lesser service because you have exercised a right.

    If your data is held in Route Royal by a business you deal with, ask that business; we will pass your request to it and help it answer.

  15. Europa, Reino Unido e Suíça

    Em resumo: RGPD, UK GDPR e lei suíça: os fundamentos do artigo 6.º, cada direito na íntegra e uma reclamação junto da sua autoridade de controlo.

    If you are in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR), the UK GDPR with the Data Protection Act 2018, or the Swiss Federal Act on Data Protection applies. In addition to the rest of this policy:

    • The legal bases in the section on how we use data are those in Article 6 of the GDPR. Where we rely on legitimate interests, you can ask us for a summary of our balancing assessment.
    • You have every right listed in the section on your rights, under Articles 15 to 22 of the GDPR, and we answer within one month.
    • Transfers outside the EEA, the United Kingdom or Switzerland are covered as the section on where data is stored describes: an adequacy decision, the Standard Contractual Clauses, the UK Addendum, or another safeguard under Chapter V of the GDPR.
    • Por confirmarOur representative in the European Union and in the United Kingdom, if the company is not established there.
    • You can lodge a complaint with the supervisory authority of the EU or EEA country where you live or work, with the Information Commissioner’s Office in the United Kingdom, or with the Federal Data Protection and Information Commissioner in Switzerland. Por confirmarName the lead supervisory authority for the controlling company.

  16. Austrália

    Em resumo: O Privacy Act e os APP: anonimato quando praticável, divulgação no estrangeiro, marketing com cancelamento, acesso, retificação e o OAIC.

    If you are in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply, and "personal data" in this policy means "personal information" as that Act defines it. In addition to the rest of this policy:

    • Kinds of personal information, and how we collect and hold it, are set out in the sections on what we collect, how long we keep it and security. Where it is lawful and practicable, you can deal with us anonymously or under a pseudonym, for example by reading this website or asking a general question; an account needs your identity.
    • Overseas disclosure. We are likely to disclose personal information to our service providers in the European Union Por confirmarand the other countries in which our service providers process it, from the subprocessors list. Before we do, we take reasonable steps to ensure the recipient handles it in line with the APPs, as described in the section on where data is stored.
    • Direct marketing follows APP 7: we use personal information for direct marketing only where you would reasonably expect it or have consented, every message tells you how to opt out, and you can ask us at any time where we obtained your information.
    • Access and correction follow APPs 12 and 13: ask us as described above, and we respond within a reasonable period. If we refuse, we tell you why in writing and how to complain, and on request we attach a statement to the information noting your view that it is wrong.
    • Data breaches. Under the Notifiable Data Breaches scheme we assess suspected breaches promptly, and notify you and the Office of the Australian Information Commissioner (OAIC) where a breach is likely to result in serious harm.
    • Complaints. Write to privacy@routeroyal.com; we acknowledge your complaint, investigate it and reply within Por confirmara reasonable period, proposed as 30 days. If you are not satisfied, you can complain to the OAIC.
    • We do not adopt, use or disclose government identifiers, such as a tax file number, as our own identifier of you.

  17. África do Sul

    Em resumo: POPIA: o nosso Information Officer, os seus direitos ao abrigo das secções 23, 24, 11 e 71, e o Information Regulator.

    If you are in South Africa, the Protection of Personal Information Act 4 of 2013 (POPIA) applies. We are the "responsible party" for the personal information in this policy and, for our customers’ data, their "operator". In addition to the rest of this policy:

    • Information Officer. Por confirmarThe name and contact details of our Information Officer, registered with the Information Regulator, and any Deputy Information Officer. Our manual under the Promotion of Access to Information Act 2 of 2000 (PAIA) is Por confirmarwhere the PAIA manual is published.
    • Your rights under POPIA include access to your personal information (section 23), correction or deletion (section 24), objecting to processing on reasonable grounds (section 11(3)), not being subject to a decision based solely on automated processing (section 71), and withdrawing consent. You may use the forms in the POPIA Regulations, but you do not have to; an email is enough.
    • Direct marketing by electronic means (section 69): we send it only with your consent, or to existing customers about similar products or services, with a chance to opt out when we collect your details and in every message.
    • Transfers outside South Africa (section 72): we transfer personal information only to recipients bound by law, binding corporate rules or a contract to a standard of protection substantially similar to POPIA, with your consent, or where the transfer is necessary for your contract, as the section on where data is stored describes.
    • Security compromises (section 22): we notify the Information Regulator and you as soon as reasonably possible after a compromise that affects your personal information.
    • Complaints. You can complain to the Information Regulator (South Africa). We would rather you told us first, at privacy@routeroyal.com.

  18. Maurícia

    Em resumo: O Data Protection Act 2017: o nosso registo, os seus direitos ao abrigo das secções 37 a 40, e o Data Protection Office.

    If you are in Mauritius, the Data Protection Act 2017 applies. In addition to the rest of this policy:

    • Registration. Por confirmarOur registration number as a controller with the Data Protection Office, and the registrations of any processors we control.
    • What the Act asks us to tell you when we collect your data, namely who we are, why we collect it, who receives it, whether it leaves Mauritius, how long we keep it, your rights, your right to withdraw consent and your right to complain, is in the sections above.
    • Your rights under the Act include access to your personal data (section 37), not being subject to a decision based solely on automated processing (section 38), rectification, erasure and restriction (section 39), and objecting to processing (section 40), including to direct marketing at any time. We answer without undue delay and within one month.
    • Transfers outside Mauritius (section 36): we transfer personal data abroad only on a basis the Act allows, with appropriate safeguards, with your explicit consent, or where the transfer is necessary for your contract, Por confirmarand with the Data Protection Commissioner’s authorisation where the Act requires it.
    • Breaches (section 25): we notify the Data Protection Office without undue delay, and within 72 hours where feasible, and tell you where a breach is likely to result in a high risk to you.
    • Complaints. You can complain to the Data Protection Commissioner at the Data Protection Office of Mauritius. We would rather you told us first, at privacy@routeroyal.com.

  19. Estados Unidos

    Em resumo: A CCPA e outras leis estaduais: as categorias que recolhemos, sem venda nem partilha, os seus direitos e como recorrer.

    If you live in the United States, the privacy law of your state may apply, such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), or the comprehensive privacy laws of Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states. To the extent they apply, this section is our notice at collection and describes our practices over the past 12 months.

    Categories of personal information we collect, as those laws define them:

    • Identifiers

      Examples
      Name, email address, phone number, account name, IP address.
      Collected
      Yes

    • Customer records

      Examples
      Billing contact, company, country, invoices and payment records.
      Collected
      Yes

    • Commercial information

      Examples
      Your plan, what you asked us about, support history.
      Collected
      Yes

    • Internet or network activity

      Examples
      How you use the website and Route Royal, sign-in records, chat history with Q.
      Collected
      Yes

    • Geolocation

      Examples
      An approximate location from your IP address, never precise geolocation.
      Collected
      Yes, approximate only

    • Professional or employment information

      Examples
      Company, job title and role in your organisation.
      Collected
      Yes

    • Sensitive personal information

      Examples
      Your account sign-in credentials. We use them only to sign you in, which is a purpose the law permits without a right to limit.
      Collected
      Yes, credentials only

    • Inferences and profiles

      Examples
      None.
      Collected
      No

    • Audio, biometric, health, precise geolocation, racial or ethnic origin, religious beliefs, union membership, sexual orientation, government identifiers

      Examples
      None.
      Collected
      No

    The sources, purposes and recipients are in the sections on what we collect, how we use it and who we share it with. We disclose personal information only to service providers and contractors under written contracts, and to the other recipients that section names. We do not sell personal information, we do not share it for cross-context behavioural advertising, we have not done either in the past 12 months, we have no actual knowledge that we sell or share the personal information of anyone under 16, and we do not use or disclose sensitive personal information for anything beyond what the law permits without a right to limit. We keep each category for the periods in the section on how long we keep it.

    • Your rights include the right to know what personal information we collect, use and disclose and to access it, the right to delete it, the right to correct it, the right to data portability, the right to opt out of sale, sharing and targeted advertising (which we do not do), the right to limit the use of sensitive personal information (which we do not need to use beyond what the law permits), and the right not to be discriminated against for exercising any of them.
    • How to ask. Email privacy@routeroyal.com. We verify your request by matching the details you give us with those on your account, and may ask you to confirm from the email address on it. An authorised agent may ask for you with your signed permission, and we may confirm the request with you directly. We respond within 45 days, extendable once by 45 days with notice.
    • Appeals. If we decline your request, we tell you why and how to appeal; we answer an appeal within the time your state’s law allows, and tell you how to contact your state attorney general if you still disagree.
    • Do Not Track and Global Privacy Control. This website does not track you across other websites and we do not sell or share personal information, so there is nothing for these browser signals to switch off. We do not currently change the site’s behaviour in response to them.
    • California "Shine the Light". We do not disclose personal information to third parties for their own direct marketing purposes.
    • Business contacts. If your personal information is in Route Royal because a business you deal with uses it, that business is the "business" under these laws and we are its service provider; send your request to the business, and we will help it answer.

  20. Outros países

    Em resumo: Canadá, Brasil, Japão, Singapura, Nova Zelândia, o Golfo, África e Índia: os seus direitos aí e a autoridade a quem recorrer.

    Route Royal is used in many countries, and you have the rights your country’s law gives you. Where a law below applies, the rest of this policy stands and this section adds to it.

    • Canada. The Personal Information Protection and Electronic Documents Act (PIPEDA) and the provincial laws that replace it, including Quebec’s Act respecting the protection of personal information in the private sector, apply. We collect, use and disclose personal information with your consent, except where the law allows otherwise; you can withdraw it, ask for access and correction, and challenge our compliance with our privacy contact, Por confirmarwho is the person in charge of the protection of personal information under Quebec law, and then with the Office of the Privacy Commissioner of Canada or your provincial commissioner. Your information is stored outside Canada, in the European Union, and may be accessible to authorities there under that country’s law.
    • Brazil. The Lei Geral de Proteção de Dados (LGPD) applies. We process personal data on the legal bases in Article 7, as the section on how we use data sets out, and you have the rights in Article 18: confirmation, access, correction, anonymisation, blocking or deletion, portability, information about sharing, and withdrawal of consent. Por confirmarName our encarregado (data protection officer). You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
    • Japan. The Act on the Protection of Personal Information applies. The purposes of use are those in the section on how we use data, we provide personal data to third parties only with your consent or as the Act allows, and we store it in the European Union, whose data protection system the Personal Information Protection Commission has recognised. You can ask for disclosure, correction, addition, deletion or suspension of use of your retained personal data at privacy@routeroyal.com, and complain to the Personal Information Protection Commission.
    • Singapore. The Personal Data Protection Act 2012 applies. Our data protection officer can be reached at privacy@routeroyal.com. We collect, use and disclose personal data with your consent or as the Act allows, you can withdraw consent and ask for access and correction, and you can complain to the Personal Data Protection Commission.
    • New Zealand. The Privacy Act 2020 and its Information Privacy Principles apply. You can ask for access and correction, and complain to the Office of the Privacy Commissioner.
    • The Gulf, Africa and India. Where the UAE Federal Personal Data Protection Law, Saudi Arabia’s Personal Data Protection Law, Kenya’s Data Protection Act 2019, Nigeria’s Data Protection Act 2023 or India’s Digital Personal Data Protection Act 2023 applies, you have the rights listed in the section on your rights, we transfer data abroad only as that law allows, and you can complain to the regulator it names.

    If your country is not named here, email us: we will tell you which law we apply to your request, and answer it under that law.

  21. Menores

    Em resumo: A Route Royal destina-se a empresas, não a menores de 18 anos.

    Route Royal is for businesses. It is not meant for anyone under 18, and we do not knowingly collect personal data from children. If you think a child has given us personal data, tell us at privacy@routeroyal.com and we will delete it. We do not sell or share the personal information of anyone under 16 under US law, and we do not need to ask for parental consent because we do not offer Route Royal to children.

  22. Cookies

    Em resumo: Neste website, apenas armazenamento funcional; na app, cookies de início de sessão.

    This website sets only the functional storage described above, and no analytics or advertising cookies, which is why it shows no cookie banner. The Route Royal app uses cookies to keep you signed in, to remember your organisation and to protect your account. Our cookie policy lists every one, how long it lasts, and how to manage cookies in your browser.

  23. Alterações a esta política

    Em resumo: Datamos cada alteração e informamos os titulares de conta das mais importantes antes de entrarem em vigor.

    We may update this policy when Route Royal, our practices or the law changes. We will change the date at the top, and keep earlier versions available on request. If a change matters, such as a new purpose, a new kind of recipient or a change to your rights, we will tell account holders by email, or by a notice in Route Royal, at least Por confirmarnotice period, proposed as 30 days before it takes effect, and ask for your consent where the law requires it.

  24. Contacte-nos

    Em resumo: Tudo o que diga respeito aos seus dados, num único endereço.

    For anything about this policy or your data, email privacy@routeroyal.com, or write to us at Por confirmarregistered address. Por confirmarThe Data Protection Officer, Information Officer or privacy contact named above is responsible for this policy and for answering you. This policy is written in English; where it is shown in another language, the English version governs.

Dúvidas sobre os seus dados?

privacy@routeroyal.com