Introduction

PhixFlow Ltd. is committed to protecting the personal data of individuals. This policy statement describes how PhixFlow Ltd. collects and uses personal data from individuals using the www.phixflow.com website (“the Website”), and individuals’ rights in relation to the processing of this data.

In this policy statement, use of “PhixFlow”, “we” or “us” refers to PhixFlow Ltd.

We may use your personal data for any of the processing described in this Privacy Policy, or as granted by you at the point of collection, or as required by law.

 

Personal data

References in this Privacy Policy to “personal data” are to data that could identify you or other living individuals. For example, your name, telephone number, email address or postal address. For more details on what personal data is required for each processing activity, see the section Data we collect of this Privacy Policy.

For further details on your rights in relation to the processing we carry out with your personal data, see the section Your rights of this Privacy Policy.

 

Data we collect

PhixFlow Ltd. may collect data about you through a number of means as you use the Website.

 

Data you submit

You may provide personal data to us through forms on the Website or by sending us details by post, phone, email or some other means. You may do this, when, for example, you:

• Request marketing material, a demo or other information from us.
• Subscribe to any newsletters or weblogs that we may publish.
• Take part in any discussion forums that we may host.
• Register for any services we may offer on the Website.
• Take part in any surveys, quizzes or competitions.
• Submit a Curriculum Vitae.
• Send us feedback.

 

Other data we collect

Other data about you may be collected as you use the Website.

 

Log data

In common with almost every website, our web server will automatically collect information when you use the Website. This information is recorded in log files on the web server. This information may include your IP address, the address of the web page you were on before you visited the Website, the type of browser you are using, settings of that browser, the date and time that you used services on the Website, your language preferences and cookie data.

 

Device information

We may collect information about the device you are using to access the Website, including the type of device, the operating system it is using, settings of the device including time zone settings, and approximate location.

 

Location information

We may collection information about your location, based on personal information you provide us, device information, or from third party analytics tools. Any location information collected from your device is controlled by the consent process provided by your device.

 

Cookies

We may collect personal information using cookies and similar technologies as you use the Website. For more details, please see our cookie policy.

 

Third parties

From time to time, we may add information received from third parties, such as data from analytics providers like Google, some of whom may be based outside of the EU.

 

Processing activities

PhixFlow Ltd. will never use your data for anything beyond the stated purpose when you provide the data, and the permissions you grant us.

 

How we store your data

PhixFlow Ltd. will store your data on secure servers hosted either in our own offices or in secure data centres operated by third party infrastructure providers. All transfers of your data will be made using secure means.

 

International transfers

We may transfer personal information about you outside the European Economic Area (EEA). Any transfers will be carried out under one of the accepted methods for transfer of personal information outside of the EEA: European Commission: Data transfers outside the EU

Specifically, any such transfers we perform to a country outside of the EEA will be governed by one or more of the following safeguards:

• Adequacy: European Commission: Adequacy of the protection of personal data in non-EU countries
• Binding Corporate Rules: European Commission: Binding Corporate Rules
• Model contact clauses: European Commission: Model contracts for the transfer of personal data to third countries
• EU-US Privacy Shield: European Commission: EU-US Privacy Shield

 

Our basis for processing your data

We will establish, for each processing activity, the lawful basis on which we will carry out the activity. These lawful bases are part of the General Data Protection Regulation (GDPR).

For each processing activity, one of the following legal bases will be used:

• Consent: you have given us consent to perform the processing activity, using the personal information you have provided for this activity.
• Legitimate interests: the processing is of a clear benefit to you; the impact on your privacy is limited; the activity is something you would reasonably expect us to do with the personal information you have supplied to us.
• Legal obligation: the processing is necessary for us to comply with the law.
• Contract: the processing is necessary for us to fulfill our contractual obligations to you, or because you have asked us to do something before you enter into a contract with us.

 

Processing activities

We will process personal information supplied to us by users of the the Website in carrying out the following activities:

1. Sending marketing material.
2. Responding to requests for further information, product demonstrations and other general queries about any of our products or services.
3. Sending out any newsletters or weblogs to which users have subscribed.
4. To provide any industry white papers or other studies which users have requested.
5. To allow users to take part in any discussion forums that we may host.
6. To support users in the use of the services we may host on the Website.
7. To process the answers to any quizzes, surveys or competitions we might hold.
8. To process any Curriculum Vitae submitted, through our recruitment process.
9. Responding to complaints or other feedback.

For each activity, as stated in Our basis for processing your data, a lawful basis appropriate to the activity will be established. If not stated on the Website when you provide your personal information, you can request information about the lawful basis being used to support each activity (see Contact us).

 

Children

Our Website is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under the age of 18.

 

How long we store your data

We will retain your personal information for as long as is necessary to serve the purpose for which it was collected. This purpose may include the need to satisfy any legal or regulatory requirements that apply.

In some cases (depending on the lawful basis on which the data is being processed) you can request that your data is deleted. See Your rights.

In some cases we may anonymise your data (so that it can no longer identify you) for the purpose of gathering statistics. In this case, we may use this data indefinitely without further notice from you.

 

Your rights

You can exercise certain rights in relation to the personal information we hold about you. Which rights apply depend on the lawful basis of each processing activity for which you have supplied personal information.

Full details of which rights each lawful basis provides are given in the General Data Protection Regulation (GDPR).

Full details of each of these rights are given in the General Data Protection Regulation, but in summary these are:

1. The right to be informed: You have the right to ask what personal information we hold about you, what we are using it for, how long we retain it, and with whom we may share it.
2. The right of access: You have the right to ask us for a copy of the personal information we hold about you. This is commonly known as a “subject access request”.
3. The right to rectification: You have the right to ask us to amend or update the personal information we hold about you.
4. The right to erasure: You may have the right to ask us to delete some or all of the personal information we hold about you. This is commonly known as the “right to be forgotten”.
5. The right to restrict processing: You may have the right to ask us to restrict or suspend processing of some of all of the personal information we hold about you.
6. The right to data portability: You may have the right to move, copy or transfer the personal information we hold about you to another service, without hindrance from PhixFlow Ltd.
7. The right to object: You may have the right to object to the processing of the personal information we hold about you.
8. Rights in relation to automated decision making and profiling: You have the right to be told about any automated decision making or profiling we perform based on the personal information we hold about you, and request details on the rules involved in such decision making, and the significance of any decisions that might be made by any such automated decision making or profiling.
9. Right to Withdraw Consent: Where you have provided consent to process your personal information, you have the the right to withdraw your consent for this processing to be carried out. In such cases, we may no longer be able to continue to provide you with the service requested. We may also be required by law or regulation to retain your personal information for some time after you have withdrawn consent.

If you contact us to exercise any of your rights, we are entitled to request that you demonstrate that you are who you say you are; this may include providing copies of identifying documentation.

 

Disclosure of your personal data

Depending on what personal information you have provided us, and for what purposes, we may share it in the following ways:

• With law enforcement, regulatory and other government agencies, or with professional bodies, if this is required by law or regulatory compliance.
• With professional advisers, for example, law firms, if we believe that sharing your information in this way is necessary to protect and defend the rights, property or personal safety of PhixFlow Ltd., the Website or its users.
• With third party event organisers if you request attendance at or other involvement in an event hosted by a third party. We will make this clear at the point at which you provide your personal information.
• With third party publishers if you request materials that are provided by a third party publisher. We will make this clear at the point at which you provide your personal information.
• With third party service providers who undertake processing on our behalf, such as provision of infrastructure, administration and analytics. With each third party service provider we share only the minimum personal data required for them to be able to carry out the services for which we have engaged them. With each third party service provider we enter into agreements that govern how they will treat personal data, including security measures, support for the rights of individuals over their data and implementation of data retention policies.

 

Links to third party sites

On the Website we may include links to third party websites that are not under the control of PhixFlow Ltd. These sites are not covered by this Privacy Policy. For full details please see our Terms and conditions.

Any such third party websites will be governed by their own privacy policies, and they may collect personal information from you in accordance with those policies. We encourage you to check the details of these privacy policies in respect of the personal information they may be collecting from you. We do not accept any responsibility or liability for these privacy policies.

 

Complaints

If you have questions or complaints about this Privacy Policy or the way your personal information is processed, of if you wish to exercise one or more of your rights as a data subject, please contact us by any of the means given in Contact us.

You also have the right to lodge a complaint with your local data protection regulator. In the UK, this is the Information Commissioner’s Office: Information Commissioner’s Office

 

Contact us

By Post

PhixFlow Ltd.
St. John’s Innovation Centre
Cowley Road
Cambridge, CB4 0WS
UK

By Email

privacy@phixflow.com