See ‘Who we share your personal data with’ for further information on the steps we will take to protect your personal data where we need to share it with others.
We intend to engage in email marketing to inform you of our services, such as promotions.
We will always ask you for your consent before doing sending you marketing communications, except where you have explicitly opted in to receive email marketing from us in the past or where you were given the option to opt-out of email marketing when you initially signed up for your account with us and you did not do so.
You will have the right to opt out of receiving marketing communications at any time by:
- contacting us at email@example.com
- using the ‘unsubscribe’ link included in all marketing emails you may receive from us
We will always treat your personal data with the utmost respect and never sell or share it with other organisations for marketing purposes.
For more information on your right to object at any time to your personal data being used for marketing purposes, see ‘Your rights’ below.
8. Who we share your personal data with
We only allow service providers to handle your personal data if we are satisfied they take appropriate measures to protect your personal data. We also impose contractual obligations on service providers to ensure they can only use your personal data to provide services to us and to you.
We or the third parties mentioned above may occasionally also need to share your personal data with:
- external auditors, e.g. in relation to the audit of our accounts and our company —the recipient of the information will be bound by confidentiality obligations
- professional advisors (such as lawyers and other advisors)—the recipient of the information will be bound by confidentiality obligations
- law enforcement agencies, courts or tribunals and regulatory bodies to comply with legal and regulatory obligations
- other parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations
If you would like more information about who we share our data with and why, please contact us (see ‘How to contact us’ below).
We will not share your personal data with any other third party.
9. How long your personal data will be kept
We will keep your personal data for as long as you have an active account with us and for a period of up to 6 years thereafter to comply with any accounting or legal obligations we have, including in the event of the pursuit or defence of legal claims. Once you have closed your account with us, we will move your personal data to a separate database so that only key stakeholders in our business on a ‘need to know basis’ have access to such data.
Following the end of the aforementioned retention period, we will delete or anonymise your personal data.
10. Transferring your personal data out of the UK
Furthermore, under UK data protection laws, we can only transfer your personal data to a country outside the UK where:
- the UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45 of the UK GDPR;
- there are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you; or
- a specific exception applies under relevant data protection law. Accordingly, if we were to start transferring your personal data from the UK to:
- The EEA: we would rely on the adequacy finding granted by the UK to the EU under the Withdrawal Agreement to do; for any transfers from the EU to the UK, we would rely on the adequacy regulation granted to the UK under the Adequacy Decision.
- Any country located outside the UK/EEA: we would rely an appropriate safeguards under the UK GDPR, such as by including the relevant Standard Contractual Clauses in our data processing agreements.
In the event we could not or choose not to continue to rely on either of those mechanisms at any time we would not transfer your personal data outside the UK unless we could do so on the basis of an alternative mechanism or exception provided by UK data protection law.
11. Your rights
You generally have the following rights, which you can usually exercise free of charge. For more information regarding these rights, please visit the ICO website here.