Privacy

Privacy notice

This notice explains, in general terms, how information submitted through Sterling’s website and BVI Compliance Workspace is used and protected.

Last updated: 11 October 2026

Information we handle

Depending on how you use Sterling, information may include your name and contact details; organisation and entity information; health-check answers; service enquiries; account and team details; obligations, assessments, registers, screening records, documents and evidence; communications and consultant review records; and security, access, and audit information generated when the service is used.

Please submit only information that is relevant to the compliance purpose for which you are using the service.

How information is used

Sterling uses information to provide and administer the Workspace; identify potentially applicable obligations; respond to enquiries; deliver agreed professional services; maintain records and audit history; control access; protect the service; meet legal and regulatory responsibilities; and improve operational reliability.

Health-check and automated outputs depend on the information provided and are not a legal or compliance determination.

Service providers and access

Access is limited according to account roles and operational need. Sterling may use technology providers to host, secure, communicate through, or operate the service. Where an enabled AI feature is used, the question and selected approved source passages may be sent to the configured provider to generate a grounded response. Sterling remains responsible for selecting providers and applying appropriate safeguards.

Information may also be disclosed where required by law, to protect legal rights or service security, or as authorised in an applicable engagement.

Retention and security

Records are retained according to their purpose, applicable legal or regulatory requirements, Sterling’s configured retention periods, and any engagement terms. Some compliance, audit, or potential-match records may need to be kept for extended periods.

Sterling uses role-based access, private document storage, audit records, and other administrative and technical controls. No online service can guarantee absolute security; users must protect their credentials and promptly report suspected unauthorised access.

Your choices and requests

Subject to applicable law and recordkeeping duties, you may ask Sterling about access to, correction of, or handling of personal information connected with you. Account holders can update certain profile information in the Workspace.

Use Sterling’s contact page to submit a privacy enquiry. Sterling may need to verify identity and authority before acting on a request.