As a data controller we collect a variety of data in order to deliver our services.

Personal data, or personal information, is any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you when you use our Websites. Whenever we collect personal data about you, we must have a legal ground to do so.  We will ensure that your personal data is processed lawfully, fairly, and transparently without adversely effecting your rights. The type of data we collect is as follows:

Type of data	Purpose/Activity	Lawful Basis
Identity Data	includes firs name, last name, username, job title or similar identifier. When you email, phone, live chat or otherwise, we may collect information such as your first name, last name, email address and phone number.  We will use this information to carry out the contract with you and manage our relationship with you.	This information is necessary for us to perform our contract with youe.g. setting up your account and providing access to your account. This information is also necessary to comply with our legal obligation to inform you if we change this policy or our terms and conditions. We also have a legitimate interest to keep our records updated to ensure we are providing you with the best possible service.
Contact Data	includes email address and telephone numbers.	This information is necessary for us to perform our contract with you.
Financial Data	Includes any account details, billing address, and other financial data required to process payment.	This information is necessary for us to perform our contract with you, in order to take payment.

We may process your data for compliance with a regulatory requirement or legal obligation to which we are subject too. Your data will only be processed if processing the data to comply with such obligation is a reasonable and appropriate way of achieving compliance. 

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this Privacy Policy.

We work with third-party partners who help us provide and improve our products and services. We, acting under a lawful basis, (as set out above) may have to share your personal data (as set out in Table 1) with the following third parties (but not limited to):

PORT -We use theservice’s of PORT to ensure that we collect and manage your personal data transparently, fairly and securely. Data shared with PORT is not transferred outside of the European Economic Area.

Stripe –We use the services of Stripe to collect payment. Data is transferred outside of the European Economic Area to United States under the protection of EU/US Privacy Shield.

There are certain situations in which we may share access to your personal data without your explicit consent; for example, if required by law, to protect the life of an individual, or to comply with any valid legal process, government request, rule or regulation.

We may transfer personal data to a country outside of the European Economic Area (EEA), for example if a third party we share data with has servers located outside of the EEA. If this is the case we will obtain your consent or otherwise ensure that the transfer is legal and your data is secure by following the EU's guidelines.

You can see above where we send data outside of the EEA and on what basis we do so.

We keep your data secure:

• by carrying out regular penetration testing
• by following internal policies of best practice and training for staff
• by using Secure Socket Layer (SSL) technology when information is submitted to us online

In the unlikely event of a criminal breach of our security we will inform the relevant regulatory body within 72 hours and, if your personal data were involved in the breach, we shall also inform you.

• the right to be informed about the collection and use of your personal data
• the right of access to your personal data and any supplementary information
• the right to have any errors in your personal data rectified
• the right to have your personal data erased
• the right to block or suppressing the processing of your personal data
• the right to move, copy or transfer your personal data from one IT environment to another
• the right to object to processing of your personal data in certain circumstances, and
• rights related to automated decision-making (i.e. where no humans are involved) and profiling (i.e. where certain personal data is processed to evaluate an individual).

We also give you the option to manage your data via your online account. Whilst we do not hold personal data any longer than we need to, the duration that such data is held will depend on your relationship with us.

This privacy policy only relates to our Websites. We might have links on our Website to other Websites, and these Websites will have their own terms and conditions and privacy policies. You should check those privacy policies before providing your personal data to those Websites.

Please note that our terms and conditions and our policies will not apply to other Websites that you get to via a link from our Website. We have no control over how your data is collected, stored or used by other Websites and we advise you to check the privacy policies of any such Websites before providing any data to them.