Privacy Policy

This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website.

Your information will not be sold. Your data will not be transferred to any other party.

We take your privacy very seriously. This Privacy Notice details what Personal Data we collect and how we shall use it. Please take time to read this Privacy Notice and ensure that you understand its contents.

Changes to this Policy
We continually review our Privacy Notice and update it where necessary. We advise that you regularly check our Privacy Notices for updates. Where we make significant changes to our policy, we shall email you to inform you.

Our Name & Contact Details.
The Data Controller of your Personal Data is Ivy Technologies LTD. This means the organisation decides how your personal data is processed and for what purposes.
Our address is: Ivy Technologies LTD, Russell Street, Keighley, West Yorkshire, BD21 2JP

Personal data categories we collect
We may collect, use, store and transfer different kinds of personal data about you which we have
categorised as follows:
• Identity Data: This includes first name, maiden name, last name, Company name
• Contact Data: This includes email address and telephone number.
• Compliance Data: This includes recorded calls for quality checks and staff training. Such recordings
may also be used to help us combat fraud.
• Technical Data: This includes internet protocol (IP) address, browser type and version, time zone
setting and location, browser plug-in types and versions, operating system and platform and other
technology on the devices you use to access this website.
• Usage Data: This includes information about how you use our website, products, and services.
• Aggregated Data: This includes statistical or demographic data for any purpose.

Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

For what purposes do we process personal data, and what are the lawful basis by which we process
data?
Ivy Technologies LTD processes your Personal Data for the following purposes:
• Supply, perform, manage, and fulfil our service to you
• Communicate with you to fulfil, administer, or enforce contractual obligations via email, telephone, SMS text, postal mail, and push notifications – Contract
• Communicate with customers where we have your consent to do so via email, telephone, SMS text, postal mail, and push notifications – Consent
• Communicate with clients on matters where we have a legal obligation to do so via email, telephone, SMS text, postal mail, and push notifications – Legal Obligation
• Gather feedback for service and product improvement via email, telephone, SMS text, postal mail
– Legitimate Interest
• Share testimonials, case studies and feedback on our website – Consent
• Resolve complaints and/or disputes – Legitimate Interest
• Request continuation of Consent prior to consent expiry – Consent
• Protect our organisation, staff, associates, suppliers, partners, and clients – Legitimate Interest
• Prevent, detect, and investigate fraud – Legal Obligation
• Prevent, detect, and investigate crime – Legal Obligation
• Comply with the law – Legal obligation
• Fulfil our statutory or regulatory obligations – Legal obligation
• Maintain our own accounts and records – Legal obligation
• For reporting, analytics, and product/service improvement (including training) – Legitimate Interest
• Improve and maintain data accuracy or completeness – Legitimate Interest
• Track your email engagement – Legitimate Interest
• Personalise your online experience – Legitimate Interest
• To recruit and manage our staff – Contract, Legitimate Interest and Legal Obligation Where we have used legitimate interest as the lawful basis for processing your Personal Data we may:
• Request specific consent to share customer personal data with specific fulfilment partners so that they may direct market similar or aligned new products and services to our existing customers.
• For reporting, analytics, and product/service improvement (including training).
• Improve and maintain data accuracy or completeness.
• Track your email engagement.
• Personalise your online experience. This could include customising the content and/or layout of our pages for individual users, for both visitors and contributors.
• Resolve complaints and/or disputes.
• To prevent, detect and investigate fraud.
• To prevent, detect and investigate crime.
• To fulfil our statutory or regulatory obligations.
• To maintain our own accounts and records, including recording any contact we have with you via post, emails, telephone, SMS text and push notifications.
Sharing your personal data
Ivy Technologies LTD may choose to share your personal data internally and externally to the business. Where we choose to share your information, we shall do so for the following reasons:
• Where we have your “Consent” to do so. Where we process your data under the Consent Lawful Basis you have the right to withdraw consent. Please refer to “Your Right to Withdraw Consent” section below.
• Where necessary to fulfil the service we are providing to you.
• Where we have a “Legal Obligation” and are required by law and to law enforcement agencies, judicial bodies, government entities, tax authorities or regulating bodies around the world, this includes communicating with you to update you about our privacy notice and changes to how we process your personal data.
• Where we have “Legitimate Interest” to do so, including.
• For the purposes listed in the “What are our legitimate interests for processing your data?” section above.
• For reporting, analytics, and service improvement purposes across our trading styles and/or within any future group construct should Ivy Technologies LTD  establish or become part of a group.
• Where we believe it is necessary to protect or defend our rights, property or the personal safety of our people or visitors to our premises or websites.
We may outsource support functions of our business to trusted partners. Where we choose and/or have your permission to share/sell your personal data with 3rd Party’s we will ensure that they have signed a contract that requires them to:
• Abide by the requirements of all relevant data protection and privacy legislation.
• Treat your information as carefully as we would
• Only use the information for the purposes it was supplied (and not for their own purposes or the purposes of any other organisation); and
• Allow us to conduct checks to ensure they are doing all these things.
Ivy Technologies LTD may transfer personal data to countries outside of the UK and/or EEA. If data is transferred outside of the EEA, Ivy Technologies LTD will put in place Standard Contractual Clauses with the Data Controller or Data Processor which contractually obliges them to
protect your information to the same standard required by the General Data Protection Regulation
and Data Protection Act 2018 post 31 December 2020.

Personal Data Retention Period
Ivy Technologies LTD has the following data retention policies:
We shall retain your personal data until the completion of litigation and distribution of any award or judgment by the lawyers. Where a Regulating Body directs a statutory retention period, we shall retain the relevant data for the statutory period, if longer. For example, your financial transactions
data shall be retained for 7 years. If you withdraw from the action at any time we will retain your personal data for 2 further years. Where you have signed up to receive information emails from Ivy Technologies LTD, we shall retain your contact details for 2 years, or until you withdraw your consent.
The rights available to individuals in respect of the processing.
Unless subject to an exemption under legislation, you have the following rights with respect to your personal data:
Your right of access. You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process. In most case Ivy Technologies LTD will not charge for this service however we do have the right to charge an administrative cost should we feel the request is excessive (excessive means that you submit a subject access request multiple times for the same or similar information, or the effort required
incurs cost). Fees will not exceed £50. Information will be provided within a month (30 days) from the day you request it. We will take all reasonable steps to confirm your identity before providing you with details of any personal information we may hold about you. Your right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always
applies. Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances.
Your right to the restriction of processing. You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing. You have the right to object to processing if we can process your information because the process forms part of our public task or is in our legitimate interests.
Your right to data portability. This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering a contract and the processing is automated.
Automated decision-making, including profiling. Ivy Technologies LTD does not currently use automated decision-making tools or profiling in the processing of your Personal Data.
If you wish to exercise any of your Individual Rights, you can do so by informing a member of our team or by writing to: Ivy Technologies, Temple Chambers, Russell Street, Keighley, BD21 2JP
Your Right to Withdraw Consent You have the right to withdraw your consent to Ivy Technologies LTD processing your data at any time. Please note that this only applies for personal data processed under the Consent Lawful Basis.
To determine what of your personal data is processed under the Consent Lawful Basis, please refer to the “What are the lawful basis by which we process data?” section above.
If you decide you wish to withdraw your Consent from a processing activity that uses the lawful basis of Consent you can do so by informing a member of our team or by writing to: Ivy Technologies, Temple Chambers, Russel Street, Keighley, BD21 2JP

Your Right to Lodge a Complaint with the ICO
You have the right to lodge a complaint with the UK’s Supervising Authority: The Information Commissioners Office. Prior to lodging a complaint, Ivy Technologies LTD would like the opportunity to address any complaint you may have. Should you have a complaint please in the first instance contact Us by emailing Complaint, or writing to: Ivy Technologies LTD, Temple Chambers, Russel Street, Keighley, BD20 2JP If your complaint has not been resolved, you can lodge a complaint with the Information Commissioners Office via email https://ico.org.uk/global/contact-us/email/ or by writing to: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire. SK9 5AF. Or by telephone on 0303 123 1113