Privacy Policy

We respect your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our site, use our online platform or engage us for AI analytics services, including AI-powered dashboards, data visualisation, business intelligence, predictive analytics, bespoke reporting and real-time insights.

Who We Are

For the purposes of applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, the organisation operating this service is the data controller for personal data collected through our site and in connection with our own business activities.

Gas Hill
Norwich, Norfolk
NR1 1SR
United Kingdom

Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact information: such as your name, job title, organisation, postal address and telephone number.
• Enquiry and correspondence information: including information contained in enquiries, requests, feedback, meeting records and other communications.
• Account and platform information: such as login details, user roles, account preferences and records of actions taken within the online platform.
• Technical information: including IP address, browser type, device information, operating system, approximate location, referral information and log data.
• Usage information: including pages viewed, features used, dashboard interactions, access times and performance information.
• Business and service information: including information needed to configure dashboards, prepare reports, provide analytics services and manage our relationship with your organisation.
• Payment and transaction information: where relevant to our services, although payment card details may be handled directly by a payment provider and may not be stored by us.

We do not generally seek to collect special category data, such as health information, biometric data, racial or ethnic origin, political opinions or information about religious beliefs. You should not provide special category data or information relating to criminal convictions through our site unless this is necessary, lawful and expressly agreed in advance.

How We Collect Personal Data

We may collect personal data:

• directly from you when you contact us, request information, arrange a demonstration, create an account or use our services;
• from your organisation when it engages us to provide analytics, dashboard or reporting services;
• automatically through your use of our site and online platform, including through logs, cookies and similar technologies;
• from service providers, professional advisers, business partners and publicly available sources where permitted by law; and
• from data supplied by a customer for processing through our analytics services.

How We Use Personal Data

We use personal data for the following purposes:

• to provide, operate, maintain and improve our site, online platform and analytics services;
• to create and administer AI-powered dashboards, data visualisations, predictive models and bespoke reports;
• to provide real-time insights, monitor service performance and identify technical problems;
• to respond to enquiries, arrange demonstrations and manage customer and supplier relationships;
• to authenticate users, manage permissions and protect accounts and systems;
• to process payments, manage contracts and maintain business records;
• to monitor usage, analyse trends and improve the functionality, accuracy and usability of our services;
• to detect, prevent and investigate fraud, misuse, security incidents and other unlawful activity;
• to comply with legal, regulatory, accounting and reporting obligations; and
• to establish, exercise or defend legal claims.

Lawful Bases for Processing

We rely on one or more of the following lawful bases:

• Contract: where processing is necessary to provide a service, manage an account or take steps at your request before entering into a contract.
• Legitimate interests: where processing is necessary for operating, securing and improving our business and services, provided that our interests do not override your rights and interests.
• Legal obligation: where processing is necessary to comply with applicable law or a lawful request.
• Consent: where we ask for your consent, such as for certain non-essential cookies or optional marketing communications. You may withdraw consent at any time, without affecting processing carried out before withdrawal.

AI, Analytics and Customer Data

Our services may use artificial intelligence, statistical modelling, machine learning and automated analytical techniques to identify patterns, generate predictions, produce visualisations and support business reporting.

Where we process data supplied by a customer, the customer may be the data controller and we may act as a data processor. In those circumstances, we process the data only in accordance with the customer’s documented instructions and the applicable data processing agreement. Customers remain responsible for ensuring that they have a lawful basis for supplying personal data to us and that the data is accurate, relevant and lawfully collected.

We do not use personal data to make solely automated decisions producing legal or similarly significant effects about individuals unless this is lawful, transparent and subject to appropriate safeguards. Our analytics and predictive outputs are intended to support human decision-making and should be reviewed by an appropriately authorised person before important decisions are made.

Unless expressly agreed and permitted by law, customers should not upload unnecessary special category data, children’s data or highly sensitive personal data to dashboards, reports or other parts of the service.

Cookies and Similar Technologies

Our site and online platform may use cookies and similar technologies to provide essential functionality, remember preferences, maintain security, understand usage and improve performance.

Strictly necessary cookies may be used without consent where permitted by law. We will seek consent before using non-essential cookies, such as certain analytics or marketing cookies, and will provide information about those technologies through an appropriate cookie notice or preference tool. You can manage cookies through your browser settings and, where available, our cookie preference controls. Disabling some cookies may affect the functionality of the service.

Sharing Personal Data

We may disclose personal data to:

• our employees, contractors and professional advisers who need the information to perform their duties;
• technology, hosting, security, analytics, communications, payment and support providers acting on our instructions;
• customers and authorised users where this is necessary to provide contracted services;
• regulators, law enforcement bodies, courts or other authorities where required or permitted by law;
• prospective or actual purchasers, investors or advisers in connection with a business transaction; and
• other parties where you have given permission or disclosure is otherwise lawful.

We require service providers processing personal data on our behalf to provide appropriate confidentiality, security and data protection commitments. We do not sell personal data.

International Transfers

Some service providers or recipients may process personal data outside the United Kingdom. Where this occurs, we will use a lawful transfer mechanism and appropriate safeguards, such as an adequacy decision, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another mechanism recognised by applicable data protection law.

How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide services, maintain business and financial records, resolve disputes, enforce agreements and meet legal obligations.

Retention periods vary according to the nature of the data, the purpose for which it was collected, contractual requirements and applicable law. When personal data is no longer required, we securely delete it, anonymise it or otherwise dispose of it in accordance with our retention procedures.

Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access. These measures may include access controls, authentication, encryption where appropriate, backups, monitoring, staff training and supplier due diligence.

No online service can be guaranteed to be completely secure. You are responsible for keeping account credentials confidential and for notifying us or your organisation promptly if you suspect unauthorised access.

Your Data Protection Rights

Subject to legal conditions and exemptions, you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request erasure of personal data where there is no good reason for us to continue processing it;
• request restriction of processing in certain circumstances;
• object to processing based on legitimate interests, including certain forms of direct marketing;
• withdraw consent where processing relies on consent;
• receive certain personal data in a structured, commonly used and machine-readable format; and
• request human intervention or challenge a decision where applicable data protection law provides rights relating to automated decision-making.

To exercise your rights, please write to us at our physical address stated in this Privacy Policy. We may need to verify your identity before completing a request. We will normally respond within one month, although this period may be extended where permitted by law because a request is complex or numerous.

Marketing

We may use business contact information to provide information about our services where permitted by law. Where consent is required, we will ask for it. You can object to direct marketing or withdraw consent at any time by contacting us at our physical address. We will not require you to provide a reason for opting out.

Children’s Privacy

Our services are intended for businesses and professional users and are not directed at children. We do not knowingly collect personal data from children through our site. If you believe that a child has provided personal data to us, please contact us at our physical address so that we can assess and remove it where appropriate.

Third-Party Websites and Services

Our site or online platform may contain links to third-party websites, applications or services. Those third parties operate under their own privacy policies, and we are not responsible for their content, security or data handling practices. You should review their privacy information before providing personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices. The updated version will be made available through our site and will apply from the date it is published. We encourage you to review this Privacy Policy periodically.

Complaints

If you have concerns about how we process your personal data, please contact us in writing at our physical address so that we can investigate and respond.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Further information is available from the Information Commissioner’s Office through its official website or postal contact details.