Privacy & Cookies Policy

1. Introduction

We are committed to safeguarding the privacy of our website visitors and service users. This policy explains how we handle your personal data in compliance with UK GDPR and the Data Protection Act 2018.

We will ask for your consent to our use of cookies when you first visit our website.

2. How We Use Your Personal Data

This section summarises the categories of personal data we may process, the purposes for processing, and the legal bases.

2.1 Demo and Call Requests

When you request a demo or call, we collect:

• Your name, email address, and phone number
• Company name and team size
• Any specific requirements you mention

Legal basis: Consent and legitimate interests (providing the service you requested).

Purpose: To respond to inquiries, schedule demos/calls, and provide relevant product information.

2.2 Usage Data

We may process data about your use of our website and services (e.g., IP address, approximate location, browser type/version, operating system, referral source, pages viewed, session length, navigation paths, and usage timing/frequency patterns).

Legal basis: Legitimate interests (monitoring and improving our website and services).

2.3 Account & Profile Data

We may process account data (e.g., name, email) and profile data to operate the website, provide services, secure our systems, maintain backups, and communicate with you.

Legal basis: Legitimate interests and, where applicable, contract performance.

2.4 Service & Publication Data

Personal data provided in the course of using our services and any information you publish via our website may be processed to operate and administer the website/services.

Legal basis: Legitimate interests (proper administration of our website and business).

2.5 Enquiry & Correspondence Data

Information contained in enquiries and communications (including metadata generated by our forms) may be processed for communicating with you and record-keeping, or to offer/market relevant products and services where you have asked us to follow up.

Legal basis: Consent (for marketing follow-ups you request) and legitimate interests (communications and administration).

2.6 Transaction Data

We may process transaction data relating to purchases or subscriptions (contact details, card/payment tokens, transaction details) to supply services and maintain proper records.

Legal basis: Contract performance and legitimate interests (proper administration of our business).

2.7 Notifications/Newsletters

Legal basis: Consent. Purpose: Send requested notifications and newsletters. You can unsubscribe at any time.

2.8 Legal, Compliance & Claims

We may process any personal data as necessary to comply with legal obligations, protect vital interests, or establish/exercise/defend legal claims.

Please do not supply another person’s personal data unless we have specifically asked you to do so.

3. Data Sharing

We may share your data with:

• Group companies: As reasonably necessary for the purposes set out in this policy.
• Insurers & professional advisers: For risk management, legal, and compliance purposes.
• Service providers & subcontractors: For hosting, support, analytics, communications, and business operations.
• Payment service providers: We use:
  • KashFlow – Privacy: https://www.kashflow.com/privacy-policy/
  • Chargebee – Privacy: https://www.chargebee.com/privacy
  • Stripe – Privacy: https://stripe.com/se/privacy
  • GoCardless – Privacy: https://gocardless.com/legal/privacy/
  We share transaction data only as needed to process payments, refunds, and payment-related queries.
• Selected third-party partners: If you ask us to introduce you to a partner/vendor, we may share your enquiry so they can contact you. They will provide their own privacy policy.
• Legal requirements: Where required by law or necessary to protect rights.

We do not sell or rent your personal data to third parties for marketing.

4. International Transfers

• We have operations in the United Kingdom and Australia. Where we transfer personal data internationally, we rely on adequacy decisions (where available) or appropriate safeguards such as Standard Contractual Clauses (SCCs).
• Our website hosting facilities are located in the Republic of Ireland (adequacy recognised). We apply appropriate safeguards for any international transfers.
• Our customer service and technical support subcontractors operate in the United Kingdom, Australia, and Sweden (all covered via adequacy and/or SCCs as applicable).
• Content you submit for publication may be available worldwide via the internet; we cannot prevent its use or misuse by others.

5. Data Retention

We will not keep personal data for longer than necessary for the relevant purposes. The following specific retention applies to website enquiries and contact records:

• Your organisation’s name: retained for 1 year from collection.
• Your organisation’s address: retained for 1 year from collection.
• Your contact name: retained for 1 year from collection.
• Your position within your organisation: retained for 1 year from collection.
• Your email address: retained for 1 year from collection.
• Your telephone number: retained for 1 year from collection.

• Customer data: Retained for the duration of service plus 7 years for legal/accounting requirements.
• Website analytics: Aggregated data may be retained; IP addresses are anonymised after 14 months.
• Marketing communications: Retained until you unsubscribe or withdraw consent.

We may retain data longer if required to comply with legal obligations or establish/exercise/defend legal claims.

6. Cookies

We use cookies for:

• Essential: Website functionality and security
• Analytics: Understanding site usage and performance (e.g., Google Analytics)
• Preferences: Remembering settings
• Consent: Remembering your cookie choices

Our service providers may also set cookies when you visit our site. For Google’s privacy policy, see https://www.google.com/policies/privacy/.

How to manage cookies in your browser

Most browsers let you block or delete cookies. See guides for:

• https://support.google.com/chrome/answer/95647?hl=en
• https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• http://www.opera.com/help/tutorials/security/cookies/
• https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
• https://support.apple.com/kb/PH21411
• https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

Blocking all cookies may negatively impact the usability of many websites; some features may not work.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Objection to processing based on legitimate interests or for direct marketing
• Portability of your data
• Withdraw consent at any time
• Complain to a supervisory authority

To exercise these rights, contact us using the details below.

8. Contact Us