METCLOUD LIMITED PRIVACY POLICY
How METCLOUD handles personal information
At a glance
We collect and use personal data to respond to enquiries, provide services, manage our business operations, improve our sites, meet legal obligations and communicate with you where permitted.
We may share personal data with service providers, advisers, regulators and business partners where necessary, and we keep it only for as long as required for the relevant purpose, legal obligation or potential claim.
You can contact us to exercise your rights, withdraw consent where consent applies, opt out of marketing, ask about cookies or make a complaint to the Information Commissioner’s Office.
METCLOUD takes the privacy of your personal data very seriously. This privacy policy explains how we collect, use, share and protect personal data provided through our websites METCLOUD.com and METCLOUD.ai, together referred to in this policy as the “sites”.
We are committed to good information-handling principles and to the privacy and confidentiality of any personal information we handle, including that of visitors to our sites.
We also provide specific notices and statements, in addition to this privacy policy, to certain individuals whose personal information we may process when we interact with them. You can read those notices in conjunction with this privacy policy statement.
In this privacy policy, the word “we” refers to METCLOUD Ltd. The terms “you” and “your” mean any visitors and users of our sites.
Changes to this privacy policy
We review this policy regularly and, where appropriate, notify you of changes by email. We encourage you to check this policy frequently for any updates.
What is personal information?
“Personal data” means any information relating to an identified or identifiable living individual. This includes information that can identify you directly or indirectly, such as your name, identification number, location data, online identifiers including IP addresses where they can identify you, or factors specific to your physical, physiological, genetic, mental, economic, cultural or social identity.
Personal data may also include special category data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, sex life or sexual orientation.
Categories of personal information
The personal information collected from you or relevant third-party sources may include the following:
your full name, postal address, e-mail address, employer/business and professional information, job titles, telephone and fax numbers;
any other personal information which you voluntarily provide to us from time to time.
We may combine or supplement this information with other information that we hold about you if you have made inquiries of us before or from third-party sources. We may also obtain information from publicly available sources such as the electoral roll, or other third parties who have a legitimate basis to pass on your information.
If you communicate with us by email over the internet, you should be aware that information within the message may not be secure and could pass through several different countries before reaching us.
Please do not email us with confidential or sensitive information such as your credit card details. We cannot accept responsibility for unauthorised access to your information that is outside our control.
What we use personal information for
We will only use your personal information for the purposes that you would reasonably anticipate. If appropriate, we will state the purpose when we collect the information.
Some of these purposes may include the following:
if you choose to register to receive information or enquire about our services;
if you choose to receive our services and to send you newsletters and details of events;
to conduct surveys to evaluate our products, services and events;
for the purposes of accounting and to manage and audit our operations;
where you have provided your consent to contact you occasionally to inform you of new products, services and events we will be providing or that we consider will be of interest to you;
processing your request for information or to exercise any rights;
diagnosing any problems with our server and administering our sites;
processing job applications;
research, analysis and developing statistics;
complying with legal and regulatory requirements; and
establishing and defence of legal rights.
Our legal basis for processing your personal information
We have described above the purposes for which we may use and otherwise process your personal information in connection with our sites or for our business purposes. We are required by law to indicate to you the legal basis for this use and other processing. This will include (as appropriate):
in order that we may perform our services and obligations under any contract with you;
processing for legitimate commercial interests provided these are not overridden by your interests and fundamental rights and freedoms;
processing which is necessary for compliance with our legal obligations.
Your consent may also be a lawful reason for processing your personal information in certain cases. This means your freely given, specific, informed, and unambiguous consent, which may be collected from you at the time it is requested, including in relation to any direct marketing communications.
You should be aware that you are entitled to withdraw your consent at any time. You should be aware that if you do this and if there is no alternative lawful reason for us to rely on to justify the relevant use or other processing on your personal information, this may affect our ability to provide services to you.
Keeping you informed
We will keep your name, address and contact details in our databases and, unless you have opted out, may use that information to tell you about our own similar products, services and events where we are permitted to do so.
We may contact you in writing, by telephone or email. If at any time you decide that you do not want your contact details used for these purposes, please see the contact us section of this policy.
If you have provided your consent, METCLOUD may disclose personal data to selected partner companies so they can contact you by your preferred contact method about products, services and events that may be of interest to you. You may withdraw that consent or opt out of partner marketing at any time by using the contact details in this policy.
Disclosing personal information
METCLOUD may share personal information under these limited circumstances:
with our business partners in order to deliver our services; this may include agents, IT support, web developers, project delivery staff and others;
to third parties who act for us for further processing in accordance with the purposes for which the personal data was originally collected or for purposes to which you have subsequently consented. Where we are making arrangements on your behalf, we may need to pass your information to third parties to conclude those arrangements. For example, to administer a pension.
to our advisers;
to comply with legal requirements and regulatory requirements, for the administration of justice, to protect vital interests, to protect the security or integrity of our databases or this Site, to take precautions against legal liability;
with regulatory authorities, courts and governmental agencies to comply with legal orders, legal or regulatory requirements and government requests;
if we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets, or otherwise in the event of our merger, re-organisation, dissolution or similar event.
Where appropriate, before disclosing personal information to a third party, we contractually require the third party to take adequate precautions to protect that data and to comply with applicable privacy laws.
Third-party plug-ins and cookies
We may use third-party plug-ins and similar technologies to collect standard internet log information, including IP addresses, about visitors to our sites so that we can monitor, optimise and improve how the sites are used.
Where we use IP address information or similar online identifiers for analytics or marketing purposes, we do so only where we have a lawful basis and appropriate controls in place. We do not use this information to identify individuals unless permitted or required by law.
Cookies are small text files that are placed on your computer by websites that you visit.
Our sites may put cookies onto your computer to collect information about how you browse the site. In particular our cookies are used to:
measure how you use the website so it can be updated and improved based on your needs
remember the notifications you’ve seen so that we don’t show them to you again
We do not use cookies to identify individuals unless we clearly explain this and have a lawful basis to do so.
Visitors to our sites will be given information about the cookies and similar technologies we use. Where consent is required, non-essential cookies will not be used unless you have made a clear choice to accept them.
Retention of personal information
We keep your personal information for no longer than is necessary to fulfil the purposes for which it was collected as described above.
The criteria we use to determine data retention periods for personal information include the following:
a. Retention in case of queries. We will retain it for a reasonable period (up to 5 years) in case of queries from you;
b. Retention in case of claims. We will retain it for the period in which you might legally bring claims against us (in the UK this means we will retain it for 6 years);
c. Retention in accordance with legal and regulatory requirements. We will consider whether we need to retain it after the period described in (b) because of a legal or regulatory requirement.
If you would like further information about our data retention practices, please contact us (see Contact us below).
Security of personal Information
We endeavour to use appropriate technical and physical security measures to protect personal information that is transmitted, stored, or otherwise processed from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access in connection with our Site.
These measures include computer safeguards and secured files and facilities.
We also carefully select our service providers and require them to use appropriate protective measures.
Individual rights
You have various rights under data privacy laws. These may include (as relevant) the right to:
access information held about you. You must make your request in writing and provide enough information to allow us to identify your personal information. A small statutory fee may be payable, and in certain circumstances under the privacy laws, we may not be required to provide all the details of personal data held;
amend and rectify personal information that is inaccurate and notify any third-party recipients of the necessary changes;
request restriction of processing concerning you or to object to processing of your personal information;
the right to request the erasure of your personal information where it is no longer necessary for us to retain it;
the right to data portability, including to obtain personal information in a commonly used machine-readable format in certain circumstances such as where our processing of it is based on consent;
the right to object to automated decision-making, including profiling (if any) that has a legal or significant effect on you as an individual; and
the right to withdraw your consent to any processing for which you have previously given that consent.
Please see the contact details in the Contact us section below if you wish to exercise any rights.
We will endeavour to acknowledge requests within 48 hours, and full information will be sent promptly and within the relevant statutory timescale.
Links to other websites
Our sites may contain links to other sites not operated or controlled by us. We are not responsible for the data privacy and security on those sites and urge you to review any privacy policy posted on any site you visit before using the site or providing any personal information.
International transfers
Your personal data may be transferred to, stored in or accessed from countries outside the UK or European Economic Area where this is necessary for our business operations, service delivery or use of service providers.
Where personal data is transferred internationally, we will take appropriate steps to protect it, which may include adequacy decisions, standard contractual clauses, contractual safeguards, security controls and transfer-risk assessments where required.
Make a complaint
You have the right to lodge a complaint with the relevant data protection supervisory authority if you consider that we have infringed applicable data privacy laws when processing your personal information.
The data privacy regulator’s details in the UK are as follows: Information Commissioner’s Office, and their site is: https://ico.org.uk/, which includes current contact details.
Contact us
If you wish to provide comments or exercise any of your rights, you can:
write to the Information Security Officer at METCLOUD, Lyndon House, 5th Floor, 62 Hagley Road, Birmingham, B16 8PE, or
email – martin.zbozien@metcloud.com
