Privacy Notice

LAWFUL BASIS

PURPOSE EXAMPLES

Contractual

We use your Personal Data on the basis that it is necessary for us to provide our services and products to you.

When you sell or purchase a service, you are entering into a contract with us.

Onboarding

When you register as a new client, or supplier and we interview and onboard you.
We may use the following business personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical data
• Profile data
• Marketing and communications data

Service delivery

In order to be able to deliver our services or receive services in physical or digital form.
We may use the following business personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data

Account administration

• When we administer your account, take, or receive payment, deal with any transaction, respond to your queries, refund requests and complaints.
• When we collect and recover money owed to us (usually from clients).

We may use the following business personal data:

• Contact data
• Location data
• Transaction data
• Communications data
• Usage data

Relationship management

To manage our relationship with you, which may include:

• Notifying you of changes to our terms or Privacy Notice;
• Notifying you of changes to any services;
• Processing purchase orders; and
• Asking you to leave a review.

We may use the following business personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical data
• Profile data
• Marketing and communications data

Communication

To be able to contact you regarding updates or informative communications related to the functionalities, products, or contracted services, including the security updates, when necessary or reasonable for their implementation.

We may use the following business personal data:

• Identity data
• Contact data
• Profile data
• Marketing and communications data

Handling the information you submit to us enables us to respond effectively. We may also keep a record of these queries to inform any future communications between us and to demonstrate how we communicated with you throughout our contractual relationship.

Legitimate interest

When we rely on this, we will carry out a Legitimate Interests Assessment to ensure we consider and balance any potential impact on you (both positive and negative), and your rights under Data Protection Law.

Our legitimate business interests do not automatically override your interests – we will not use your Personal Data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise required or permitted to by law.

Managing our business

We hold Personal Data for our own legitimate business interest. This relates to us managing our business to enable us to give you the best service/products and most secure experience, including when we respond to your queries and complaints, where you are not a client or supplier, or a potential client or supplier.

We may use the following personal data:

• Identity data
• Contact data
• Technical data
• Profile data
• Marketing and communications data

Provide and maintain our Websites

To provide and maintain our Website, including to monitor the usage of these, troubleshooting, data analysis, network security and system testing necessary for our legitimate interests in maintaining the useability, security and integrity of our website.

We may use the following personal data:

• Identity data
• Location data
• Transaction data
• Technical data
• Profile data
• Aggregated data

Recommendations and marketing

To make recommendations to you about services that may interest you. We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data

To measure and analyse the effectiveness of the advertising we serve you. We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data

Ensuring that our marketing is tailored to your interests and to keep our records up to date and to provide you with marketing as allowed by law. We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data

To make suggestions and recommendations to you about goods or services that may be of interest to you and necessary for our legitimate interests (to develop our products/services and grow our business). We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data

Recruitment of candidates (contractors, employees and providers)

We will use the personal information we collect about you to assess your skills, qualifications and suitability for the work.

We may use the following personal data:

• Identity data
• Contact data
• Location data
• Candidate Data

It is in our legitimate interests to decide whether to appoint you to work since it would be beneficial to our business to appoint someone to that work.

Reviews

When we capture your service reviews, for example when you buy goods and services from us, we may follow it up with an enquiry about your experience of the service to help us gauge customer satisfaction. We may use the following personal data:

• Identity data
• Contact data
• Transaction data
• Profile data
• Marketing and communications data
• Usage data

Data analytics

We use data analytics to improve our Website, products/services, marketing, customer relationships and experiences. We may use the following personal data:

• Identity data
• Contact data
• Transaction data
• Profile data
• Usage data

Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy). We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical data
• Profile data
• Usage Data

Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy). We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical data
• Profile data
• Usage Data

Rights and claims

To enforce or apply our Website terms of use, our policy terms and conditions, or other contracts. To exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and the third parties we work with. We may use the following personal data:

We may use the following personal data:

• Identity data
• Contact data
• Transaction data
• Technical data
• Profile data
• Usage Data

Data subject rights

Verifying your identity when you exercise your data subject rights. Fulfilling data subject rights requests. We may use the following personal data:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical data
• Profile data
• Usage Data

Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud, and in the context of a business reorganisation or group restructuring exercise.

Legal obligations

We may use your Personal Data to comply with laws (for example, if we are required to co-operate with a police investigation after a court order orders us to).

Legal requirement

The processing is necessary for compliance with legal obligations, such as but not limited to healthcare requirements, security requirements and accounting requirements.

To comply with applicable law, for example in response to a request from a court or regulatory body, where such request is made in accordance with the law.

Criminal activity

To detect fraudulent or criminal activity, we may share information with forces such as the police.

Consent

We may have to get your consent to use your Personal Data, such as when we collect and use Special Category Personal Data about you or when we want to send you marketing.

We will get your consent before sending third-party direct marketing communications to you via email or text message or before processing any Personal Data relating to your health.

Wherever consent is the only reason for using your Personal Data, you have the right to change your mind and/or withdraw your consent at any time by clicking the Unsubscribe button at the bottom of an applicable email or by withdrawing your consent here.

Marketing

To measure and analyse the effectiveness of the advertising we serve you.

We may collect IP addresses and store Cookies on visitors’ devices.

Sending third-party direct marketing communications to you via email, letters or phone calls.

To participate in Focus groups (in person or online), one to one interview (in person or online), online communities, customer observation / diaries (online platform), online surveys, face to face surveys, telephone surveys.

We may use the following personal data, depending on what you consent to:

• Identity data
• Contact data
• Location data
• Transaction data
• Technical Data
• Profile data
• Marketing and communications data
• Usage data
• Candidate Data
• Aggregated Data

Special Category Personal Data

We will get your express consent for collecting and processing Special Category Personal Data.

YOUR RIGHTS

DETAILS

Right to be informed

We have a legal obligation to provide you with concise, transparent, intelligible, and easily accessible information about your personal information and our use of it. We have written this notice to do just that, but if you have any questions or require more specific information, you can contact us to exercise this right.

Right of access

You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information. When you request this data, this is known as making a data subject access request (DSAR). In most cases, this will be free of charge; however, in some limited circumstances, for example repeated requests for further copies, we may apply an administration fee.

Right to rectification

You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.

Right to erasure

You have the right to ask us to erase your personal information in certain circumstances. We have the right to refuse to comply with a request for erasure if we are processing the Personal Data for one of the following reasons:

• To exercise the right of freedom of expression and information.
• To comply with a legal obligation.
• To perform a task in the public interest or exercise official authority.
• For archiving purposes in the public interest, scientific research, historical research or statistical purposes.
• For the exercise or defence of legal claims.

Right to restriction of processing

You may ask us to stop processing your Personal Data. We will still hold the data but will not process it any further. This right is an alternative to the right to erasure. If one of the following conditions applies, you may exercise the right to restrict processing:

• The accuracy of the Personal Data is contested.
• Processing of the Personal Data is unlawful.
• We no longer need the Personal Data for processing, but the Personal Data is required for part of a legal process.
• The right to object has been exercised and processing is restricted pending a decision on the status of the processing.

Right to object to processing

You have the right to object to processing in certain circumstances. You can also object if the processing is for a task carried out in the public interest, the exercise of official authority vested in you, or your legitimate interests (or those of a third party).

Right to data portability

This right only applies if we are processing information based on your consent or for the performance of a contract and the processing is automated.