Privacy Policy

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Where you have chosen a password that enables you to access certain parts of our applications, you are responsible for keeping this password confidential. We ask you not to share the password with anyone.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation with respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting, or other requirements.

In specific scenarios where our role is designated as a data processor, the duration for which data is retained is not determined by us. Instead, this time period is set and mandated by the data controller, in accordance with their policies and regulatory requirements. This ensures a clear understanding and compliance with the data controller's guidelines and legal obligations.

You have the right to:

• Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• Request correction of the personal data that we hold about you. We may need to verify the accuracy of the new data you provide.
• Request erasure of your personal data where there's no good reason for us to continue processing it. We may decline for legal reasons, which we’ll notify you about.
• Object to processing of your personal data where we rely on a legitimate interest and it impacts your fundamental rights, or where we process it for direct marketing.
• Request restriction of processing in scenarios like:
  • Contesting data accuracy
  • Opposing erasure of unlawfully used data
  • Needing data for legal claims
  • Pending objection outcome
• Request transfer of your personal data in a machine-readable format to you or a third party. This applies to automated information with consent or contract basis.
• Withdraw consent at any time where we rely on it for processing. This may impact service availability but won’t affect past processing lawfulness.
• Make a complaint to the relevant regulator at any time.

You will not have to pay a fee to access your data (or exercise rights) unless the request is clearly unfounded, repetitive, or excessive — in which case we may charge or refuse.

We may request specific information to confirm your identity and ensure your rights are protected. This security step prevents unauthorized access.

We aim to respond within one month, but may take longer if your request is complex or includes multiple items. We'll notify and keep you updated if so.

To make a request, click the button below, follow the link provided, or contact us at [email protected].