In this policy we want to tell you who we are, what data we process about you, why we collect it, what we use it for and how we store and protect it.
Why? Because your privacy is important to us.
To make this policy more user friendly we use “we”, “us”, “our” etc. to describe our company “Direct Web Ltd”.
When we refer to “you” we mean you as a user of our website, e.g. when you request a demo, ask for a compliance check, ask to be contacted, sign up for our newsletters, sign up for our service, register yourself as a business user in our product etc.
When we talk about our “website” we mean www.directweb.uk, incl. our sub-domains, store.directweb.uk and other sites we own and operate.
On our website, in our emails and on our social-media profiles, we have links to websites that aren’t ours. This policy doesn’t cover how that websites/companies process your data. We encourage you to read the privacy notices on the other websites you visit.
We are the data controller for the personal data we process about you in accordance with this policy.
What data do we collect about you?
The data we collect about you fits into these different categories: 1) personal data, 2) business data and 3) log data.
We also collect information about how you use our product and what services you and your company are subscribing to. We collect the information you provide us when we do a compliance check and when you contact us for support.
Here are more examples of what we mean by “business data” and the type of additional data we collect: what choices you made when you set up a widget, when you set it up, when you became a customer, your user role and email, when you are logging into our product, what changes you made to e.g. your agreements. This data also includes other types of interactions you will have with us and our service, e.g customer support, account and product setup, user interviews, UX research, customer feedback etc.
When you visit our website, our servers may automatically log the standard data provided by your web browser. It includes your computer’s Internet Protocol (IP) address, your browser type and version, your user agent, the pages you visit, the time and date of your visit, the time spent on each page, and other details.
What do we use your data for? (also known as “purposes”)
We use your data for these purposes:
- To deliver our services to you and the company you work for,
- To ensure that you can log into our product, incl. giving you access to your account,
- Identify you as a user when you log into our product and log and save the actions you take when you use our product,
- Improve or modifying our website, our services, including our widgets, and products to you,
- Respond to your questions and provide you with customer service and support, including sending service related messages to you,
- Send you newsletters, give you a product demo, carry out a compliance check, provide you with offers and send you different types of marketing material,
- Comply with legal obligations and requirements, requests from public and governmental authorities, relevant industry standards and our internal policies and protect our operations and our rights,
- Engage in various internal business purposes, i.e data analysis, audits, developing new products and services, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities,
- We may also use your data in other ways but we will inform you about these purposes when we collect your data.
We do not sell or rent your data to marketers or third parties.
What legal basis is used to process your data?
We process your data based on the following legal grounds:
- To perform our contract with you
- Comply with our legal obligations.
- To pursue legitimate business interests of our own related to operating our website and providing our services to you, or to pursue the legitimate interests of third parties as long as your interests and fundamental rights do not override those interests.
- For the establishment, exercise or defense of legal claims, where necessary
Some of these grounds for processing your data overlap, so there may be several reasons which justify us processing your data.
When you have expressly given your consent to us to process your data, e.g. when subscribing to our newsletters, you are free to withdraw your consent at any time. If you withdraw your consent, we might still have the right to process your information if it is required or justified by the legal grounds above.
If you would like more information about our legal basis for processing your data, feel free to contact us (see our details elsewhere in this policy).
What about third parties? (also known as sub-processors)
We use other companies to help us deliver our services to you, e.g. to improve SEO and Social Media, to help us run our website etc.
These third parties are sub-processors which means that they are not entitled to use the data for their own purposes. We have contracts with them that mean that they cannot do anything with your personal information unless we have instructed them to do it. They must not share your data with any organisation apart from us. They will hold it securely and keep it for the period we tell them to.
We use a range of organizational, technical and administrative measures to protect your data within our company. Unfortunately, the internet is not a 100% secure environment and that means we cannot guarantee the security of the data you transmit to us. Emails sent via the internet may not be encrypted, and we therefore advise you not to include any confidential information in your emails to us.
How long do we keep your data?
The length of time we keep your data depends on the type of data we are processing and why we are processing it.
Newsletters, email marketing etc.:
We keep your data for as long as you are subscribing to our newsletters, email marketing etc. If you ask us to unsubscribe you, we will keep your data for two years after your request so we can show that we have honored your request and to make sure that you aren’t receiving email marketing and newsletters.
If we have collected publicly accessible information about you for the purpose of being able to carry out marketing activities, we will keep such data for as long as the relevant activity is ongoing and for two years after that.
Events, seminars, courses etc.:
We will keep your personal data as long as they are necessary for the purposes of the course, the event or seminar in question and for evaluating them.
Sign up for our service and registration as a business user in our systems:
We will keep your data about your sign-up and registration as long as you have an account with us and up to 5 years after so that we can fulfill our legal obligations, e.g. in connection with the Danish Bookkeeping Act.
If you are employed by one of our customers, we will keep your data as long as we have a business relationship with that customer.
We will keep your data for as long as they are necessary for the purposes for which they are being processed. As a general rule, data will be kept for as long as you use our product or have an account with us plus 5 years following the conclusion of your account / customer relationship with us. Special circumstances or legal requirements may entail that such periods may be shorter or longer, including for the purpose of complying with legal requirements for the erasure or keeping of data.
Your rights and how to unsubscribe to email marketing material?
You have rights we want to make you aware of. Your rights will depend on our reason for processing your data.
- Your right of access – You always have the right to ask us for copies of your personal data. There are some exemptions, which means you may not always receive all the information we process but as a main rule you can always contact us and ask for your information.
- Your right to rectification – You can always ask us to rectify information you think is inaccurate and you can also also ask us to complete information you think is incomplete.
- Your right to erasure – You can also ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing and object to processing – You have the right to ask us to restrict the processing of your information in certain circumstances and a similar right to object to processing.
- Your right to data portability – This only applies to information you have given us. You have the right to ask that we transfer the information you gave us from one organisation to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
The easiest way to exercise your right is to email us at email@example.com
The law gives us one month to respond to you, and we will try to respond sooner.
If you have subscribed to our newsletters or asked to receive marketing material from us, you can always unsubscribe. In all these emails we include an unsubscribe link and you always click the link and easily unsubscribe.
You can also unsubscribe by sending us an email to firstname.lastname@example.org
What about cookies?
You can read more about the cookies we use on our website here: https://www.directweb.uk/legal/cookie-policy/
Who are we and how can you contact us?
Here is our company information:
Direct Web LTD
56 St Marys Avenue
Company registration number (also known as a cvr.-nr in Denmark): 39587408
You can always write to us at: email@example.com.
Changes to this policy
Sometimes we need to make changes to this policy to reflect our current practices. We will take reasonable steps to let you know about changes via our website. If you are a registered user, we will notify you via email if significant changes are being made to the policy using the email address you give. You are responsible for keeping your email address up to date.
If you continue to use our website or services after the notification, we will regard this as your acceptance of our privacy practices.
This policy is effective from September 06th, 2020.