1. How we handle your personal data
Batchseed Ltd (we / our / us) respects your privacy and is committed to protecting your personal data. We are the controller responsible and our contact details are Trent Lodge, Stroud Road, Cirencester, England GL7 6JS. Our ICO registration number is ZA549894.
We may make changes to this policy from time to time. The most recent version is available here. It was last updated on 16 September 2019.
2. The data we collect
We may also collect technical data including your IP address, login information, browser type and version, time zone setting, location, plugins, operating system, platform and other technology or devices you use to access our site. We will also record your preferences in receiving marketing from us and our third parties, as well as your communication preferences.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences
3. What we do with your data
We use your personal data in order to provide our services to you we need to process the collected personal information in order to provide our services to you. In order to deliver our services effectively your personal data may also be transferred to the following third parties:
- Other users of the Batchseed platform, in line with our terms of service
- Facebook – for re-marketing
- Google – for cloud hosting services and web analytics
- Mangopay – for payment processing
- Crisp - for support chat
We may also use your personal data in order to improve our services (for example by analysing how you use them in order to gain insights), to provide you customer support and account administration.
We may also use your personal data to provide you with information on related products and services you may be interested in, but not without you giving us your explicit consent to do so. You can withdraw consent given at any time by writing to us at our registered address as it appears above or by emailing us at email@example.com.
4. Our lawful basis for processing your personal data
Under article 6 of the GDPR we are required to tell you about the legal basis under which we collect and process your data. As such we will only do so on the following bases:
- Performance of a contract: this is where processing is necessary for a contract we have with you, or where you have asked us to take specific steps before entering into a contract, such as providing you with a quote or detailed information about the contract you may enter. This lawful basis covers the purpose of providing our services to you.
- Our legitimate interests: this is where we collect and process data in accordance with our legitimate interests, which include improving our service, providing you with marketing information about our services, customer support and account administration, and providing you with information about related products and services.
- Consent: you may be given the option to explicitly consent to share your data with selected third parties for marketing purposes or to sign up for related products and services. This will always be via a separate notice via our site and we will never assume we have your consent unless you explicitly opt in.
- Compliance with our legal obligations: we may be required to process or share your personal data in compliance with a legal obligation, such as in a response to a request by law enforcement or when a civil claim is being brought against one of our users.
5. Data storage and international transfers
We take the security of your data very seriously, and all of your personal data will be kept according to strict safeguards and in compliance with the GDPR. Your data will be stored on cloud servers within the EEA and we will only store your data outside the EEA in the event that the jurisdiction in question has been assessed as compliant with the GDPR.
6. Your rights
You have the right to be informed over what personal data we hold and how we are using it. This information is contained within this privacy notice. If you have consented to particular uses of your personal data, you have the right to withdraw this consent at any time.
You have the right to “portability” of your personal data that we have collected with your consent or in performance of a contract. This means that you can request copies of all the personal data we hold for this purpose in a structured, commonly used, and machine readable form, and we will supply this to you free of charge on request. We will respond to these requests within one month, unless the request is particularly complex, in which case we will inform you of how long it will take as soon as possible.
Where we are using your personal data in accordance with our legitimate interests, you can object to further use of your data. This objection should be based on grounds relating to your particular situation. If you object, we will stop using your personal data in this way immediately, unless there are compelling legitimate grounds for processing your personal data which override your interests, rights and freedoms (such as requests by law enforcement) or we need to process your data for the establishment, exercise or defence of legal claims. You may always object to further use of your data for direct marketing purposes by clicking the “unsubscribe” button within marketing emails.
You have the right to request a copy of the personal data we hold under the GDPR by making a “subject access request” to us in writing. We will comply with all valid subject access requests within 30 days, unless the request is particularly complex; in this case we will contact you within 30 days with further information. You will not be charged for making a subject access request unless we reasonably deem this to be a manifestly unfounded or excessive request, in which instance you will be charged a reasonable fee based on the administrative costs of providing the information.
If some of the personal data we hold is inaccurate or incomplete, you can request that we rectify our records by writing to us. We will comply with all requests within 30 days unless the request is particularly complex; in this case we will contact you within 30 days with further information.
You have the right to restrict the processing of your personal data in certain circumstances, such as when you object to us using your data in accordance with our legitimate interests or when you contest the accuracy of the data we hold on you.
You have the right to request erasure of the personal data we hold by contacting us. Please note that it is not always possible for us to comply with a request for erasure; for example, if we have collected data from you in performance of a contract, we cannot normally comply with a request for erasure unless we no longer have an active contract with you and the data is more than six years old.
7. How long we will keep your data for
We will only keep your personal data for as long as is necessary. This means that we will retain your personal data for as long as we have an active contract or business relationship with you, and after this, we will only keep your data for as long as is necessary for the purposes which it is stored.
8. What happens if you don’t provide us with the information we need
As outlined above, some of the personal data you provide to us will be used in order to enter into a contract with you and to comply with our legal obligations. Should you not provide us with the data we require to offer our service or request that we erase the personal data we hold, it is likely that we will not be able to deliver our services to you.
If you feel that we have not been complying with our obligations on data protection law or you wish to assert one of your rights, please contact us without delay using the contact details provided above. Should you be dissatisfied with our response or wish to complain to the relevant supervisory authority, you can do so by contacting the Information Commissioner’s Office (ICO). Contact details for the ICO can be found on this webpage.
10. Cookies and similar technology
- remember that you have used the website before - this means we can identify the number of unique visitors we receive and allows us to make sure that we have enough capacity for the number of users we get
- allow you to navigate the website more quickly and easily
- remember your login session so you can move from one page to another within the website
- store your preferences;
- customise elements of the layout and/or content of the pages of the website for you
- collect statistical information about how you use the website so that we can improve the website
Some of the cookies used on our website are set by us and some are set by third parties who are delivering services on our behalf.
Most computer and some mobile web browsers automatically accept cookies but, if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set.
You can also learn more about cookies by visiting www.allaboutcookies.org which includes additional useful information on cookies and how to block cookies using different types of browser. Please note however, that by blocking or deleting cookies you may not be able to take full advantage of the website.