Privacy Policy
We’re committed to keeping your data secure, being transparent about how we use it, and protecting your privacy.
Your privacy and trust are important to us and this Privacy Policy (“Policy”) provides important information about how Salpo Technologies Limited (“Company” “we” or “us”) handle personal information. This Policy applies to personal information which we process in the course of doing business including information processed through the Company’s website and the services we provide (collectively, our “Services”).
Please read this Policy carefully and contact us if you have any questions about our privacy practices or your personal information choices.
To view the data we hold about you and control how we contact you please visit our Preference Centre.
It is important that you check back often for updates to this Policy. If we make changes we consider to be important, we will let you know by placing a notice on the relevant Services and/or contact you using other methods such as email.
This Policy was last updated on 11 June 2018.
We may process personal information about you in different ways depending on our relationship with you. Please click on the link below which most closely identifies your relationship with us:
1. You are or were a customer or an employee of a customer, using the Salpo CRM platform
We will collect and store personal information including contact details of our customers and their employees so that we can provide our Services in accordance with our contract with you. For those customers who pay to subscribe for the services, we will also retain that information and any information relating to the contract between us for a period of seven years following completion or termination of the contract(s) between us so that we can review our performance if any complaints or issues arise after completion or termination of the contract. For those customers that sign up for a free trial, but do not pay for a subscription, we will retain your personal information and any information relating to the trial for a period of seven years following completion of the trial and will only retain your information for a longer period where we consider we have a legitimate interest to do so.
We will also collect and store personal information about employees of the customer for whom we are providing IT support services. This information may include email addresses, user names and passwords for the IT systems which we support. We are processing this information on behalf of your employer (our customer) in order to provide them with the Services. You should therefore contact your employer for further information about how we process your information on their behalf.
In the course of providing you with the Salpo CRM platform, we may sometimes have incidental access to data that is located on this system. This data may contain information about you, your organisation’s employees, clients/customers, partners, or suppliers. We are accessing this information on behalf of our customer in order to provide them with our services. The customer is the data controller in respect of this data and you should therefore contact the customer (your employer) for further information about how we process this data on their behalf.
Unless you request us not to do so, we may also contact you on an individual basis in relation to additional features and add-ons to the software system, as well as new releases and updates. We may also contact you about similar services which we offer. We will only do this if we believe that it is in our legitimate interests to keep you informed of our products and services and if we believe that you would reasonably expect us to contact you in this way. We will not send you general marketing information as part of a group e-mailing campaign unless you have consented to being contacted in this way.
Unless you request us not to, we may be required to share your information with our specialised subsidiaries, located outside of the European Economic Area. We will only share your information with these subsidiaries where it is necessary to provide the services under our contract.
2. You are or were a customer or an employee of a customer of our software development or other services
We will collect and store personal information including contact details of our customers and those employees of the customer who are involved in the delivery of the contract so that we can provide our Services in accordance with our contract with you. We will also retain that information and any information relating to the contract between us for a period of seven years following completion or termination of the contract(s) between us so that we can review our performance if any complaints or issues arise after completion or termination of the contract.
We will also collect and store personal information about employees of the customer for whom we are providing IT support services. This information may include email addresses, user names and passwords for the IT systems which we support. We are processing this information on behalf of your employer (our customer) in order to provide them with the Services. You should therefore contact your employer for further information about how we process your information on their behalf.
In the course of providing technical support to you, we may sometimes have incidental access to data that is located on your system. This data may contain information about you, your organisation’s employees, clients/customers, partners, or suppliers. We are accessing this information on behalf of our customer in order to provide them with our services. The customer is the data controller in respect of this data and you should therefore contact the customer (your employer) for further information about how we process this data on their behalf.
Unless you request us not to do so, we may also contact those employees of the customer who are involved in the delivery of the contract on an individual basis about similar services which we offer, this contact may be made by telephone, e-mail or post. We will only do this if we believe that it is in our legitimate interests to keep you informed of our products and services and if we believe that you would reasonably expect us to contact you in this way. We will not send you general marketing information as part of a group e-mailing campaign unless you have consented to being contacted in this way.
Unless you request us not to, we may be required to share your information with our specialised subsidiaries, located outside of the European Economic Area. We will only share your information with these subsidiaries where it is necessary to provide the services under our contract.
3. You are a supplier or an employee of a supplier to us
We will collect and store personal information including contact details of our suppliers and those employees of the supplier who are involved in the delivery of the contract so that we can receive your services in accordance with our contract with you. We will also retain that information and any information relating to the contract between us for a period of seven years following completion or termination of the contract(s) between us so that we can review your performance if any complaints or issues arise after completion or termination of the contract.
We may also contact you about new business opportunities for us to work together with you and to keep you informed of our activities. We are processing your personal information in this way because it is in our legitimate interests to grow our business and explore new business opportunities with you. We will only do this if we believe that you would reasonably expect us to contact you in this way and that such processing does not have an impact on you in a way that would make this processing unfair.
We will not send you general marketing information as part of a group e-mailing campaign unless you have consented to being contacted in this way.
Unless you request us not to, we may be required to share your information with our specialised subsidiaries, located outside of the European Economic Area. We will only share your information with these subsidiaries where it is necessary to receive the services under our contract.
4. You are a third party with whom we are in contact during the delivery of services to our customers or the possible delivery of services to prospective customers
We will collect and store personal information including contact details of third parties with whom we are in contact during the delivery of Services to our customers or discussions relating to Services to prospective customers. We may receive that information from you, a customer, a supplier, an introducer or otherwise as a result of an interaction between you and our supplier or customers. We process that information because it is in our legitimate interests to do so in order for us to be able to perform our contracts for our customers or pitch for work from prospective customers. We believe that you would reasonably expect us to process your personal information in this way and that such processing does not an impact on you in a way that would make this processing unfair.
Where your personal information is kept as part of a file relating to the performance of a contract with one of our customers, we will also retain that information and any information relating to that contract for a period of seven years following completion or termination of that contract(s) so that we can review the file if any complaints or issues arise after completion or termination of the contract. Where your information is stored in our contacts database but is not kept in a customer or supplier file, we carry out a review of our contacts database every three years when we consider whether or not we still have a legitimate interest to keep your contact information. Where we consider that we no longer have a legitimate interest to keep your contact information we will delete it.
We may also contact you about new business opportunities for us to work together with you and to keep you informed of our activities. We are processing your personal information in this way because it is our legitimate interests to grow our business and explore new business opportunities with you. We will only do this if we believe that you would reasonably expect us to contact you in this way and that such processing does not have an impact on you in a way that would make this processing unfair.
We will not send you general marketing information as part of a group e-mailing campaign unless you have consented to being contacted in this way.
5. You are a prospective customer or an employee of a prospective customer. You are a prospective supplier or an employee of a prospective supplier
We will collect, store and use personal information including contact details of people who we might do business with as a supplier or a customer for the purpose of growing our business and exploring new business opportunities. We may collect this information from you, when you contact us (including through this website) or from a mutual contact. We will only collect contact information from your website or another third party website if we have identified you specifically as someone who may be interested in receiving a Service from us or delivering goods or services to us. We may contact you about new business opportunities for us to work together with you and to keep you informed of our activities.
We are processing your personal information in this way because it is in our legitimate interests to grow our business and explore new business opportunities with you. We believe that you would reasonably expect us to process your personal information in this way and that such processing does not have an impact on you in a way that would make this processing unfair.
Where your information is stored in our contacts database but is not kept in a customer or supplier file, we carry out a review of our contacts database every three years when we consider whether or not we still have a legitimate interest to keep your contact information. Where we consider that we no longer have a legitimate interest to keep your contact information we will delete it.
We will not send you general marketing information as part of a group e-mailing campaign unless you have consented to being contacted in this way.
6. You are an employee or related to an employee
Employees should refer to the Employee Privacy Notice for further information about our privacy policy in respect of employees.
Where an employee has provided us with personal information about a spouse, civil partner or other family member/friend (perhaps in relation to sharing a Company car, private medical insurance or other benefits or as an emergency contact), it is the employee’s responsibility to inform that person that the employee has provided us with their details and that we will be processing it in connection with the relevant benefit and/or policy in accordance with this privacy policy.
7. You are a prospective employee or a referee of a prospective employee
If we have received your details in response to a recruitment initiative, we will store the personal information that either you, your recruitment agent or another third party has provided us with. We process that information because it is in our legitimate interests to do so in order for us to be able to make an informed decision about whether to interview you and, ultimately, recruit you. We believe that you would reasonably expect us to process your personal information in this way and that such processing does not an impact on you in a way that would make this processing unfair. Where your personal information is kept as part of a file relating to prospective employees of the Company, we will retain that information and any information relating to that matter. This is so that we can review the file if any complaints or issues arise after the recruitment process. The length of time that we keep prospective employee files is usually 6 months after conclusion of the relevant recruitment process.
Unless you request us not to do so, we may also contact those individuals who are referred to in any information you provide us with, for example referees, this contact may be made by telephone, e-mail or post. We will only do this if we have your express permission to contact them in this way.
Where you have provided us with personal information about a referee or a previous employer, it is your responsibility to inform that person that you have provided us with their details and that we will be processing it in connection with your employment application. You should also give them our contact details (below) should they wish to discuss this with us.
8. We have received your information from a third party
If we have received your personal information from a third party, for example an introducer, your employer or service provider, that third party will be the controller in relation to that personal information and we will be processing it on their behalf. You should therefore contact that third party to review their privacy policy.
If you become a customer or a prospective customer as a result of an introduction, the Company will become a controller in relation to your personal information and the relevant sections of this policy will apply.
9. Your relationship with us is not covered by any of the above
We may hold your contact details and personal information as a result of an interaction between you and one of our employees or prospective employees. This interaction could be as a result of business development and/or business networking. We are processing your personal information in this way because it is in our legitimate interests to retain a record of our employees’ engagement with third parties. We believe that you would reasonably expect us to process your personal information in this way and that such processing does not impact on you in a way that would make this processing unfair. We carry out a review of our contacts database every three years when we consider whether or not we still have a legitimate interest to keep your contact information. Where we consider that we no longer have a legitimate interest to keep your contact information we will delete it safely.
If you give us personal information about another person, you must ensure that:
(a) you are legally entitled to give us that information;
(b) the disclosure is in accordance with any applicable data protection or privacy laws; and
(c) such other person has also read this privacy policy.
The information we collect about you depends on the products and services you use. It includes (but isn’t limited to):
We would not normally process sensitive information, for example, relating to your health, religious belief or sexuality. If that information is relevant to the services we are providing or receiving from you, then we will agree with you at the time whether we can process that information.
Some of our services provide data and document storage as an integral part of the product or solution offering. Documents and data stored by our customers may contain personal information in business and personal tax forms, payroll and financial data, and legal and litigation-related documents, for example. Any information stored by or on behalf of our customers is controlled and managed by and only made accessible to those customers or others our customers may authorise from time to time. Our access to this information is limited to the Company personnel who require access in order to provide our Services or for any other critical business reason.
We use cookies to track visitors to our websites and help us tailor the pages and features to our customers’ interests and preferences.
What are cookies? Cookies are small files saved to the user’s computer hard drive that track, save and store information about the user’s interactions and usage of the website.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computer’s hard drive they should take all necessary steps within their web browser’s security settings to block all cookies from our website.
We use tracking software to monitor site visitors to better understand how they use the website. The software will save a cookie to your computer’s hard drive to track and monitor your engagement and usage of the website.
The Company shares or discloses personal information when necessary to provide Services or conduct our business operations as described below. When we share personal information, we do so in accordance with data privacy and security requirements. We do not sell any personal information to third parties. We may occasionally share non-personal, anonymised, and statistical data with third parties. Below are the parties with whom we may share personal information and why.
We take steps to ensure that the information we collect is processed according to this Policy and the requirements of applicable law wherever the data is located.
We store information in a cloud hosting service, through the provider Amazon Web Services. The Company has networks, databases, servers, systems, support, and help desks located in the UK. We take appropriate steps to ensure that personal information is processed, secured, and transferred according to applicable law. In some cases, we may need to disclose or transfer your personal information within the Company or to third parties in areas outside of your home country, but we will not transfer your data outside of the European Economic Area without your express written consent, other than to the Company’s subsidiary in Sri Lanka where it is necessary to provide customers support as set out in the section “When we share personal information”.
The Company takes data security seriously, and we use appropriate technologies and procedures to protect personal information. Our information security policies and procedures are closely aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our business needs, changes in technology, and regulatory requirements.
We retain personal information for as long as we reasonably require it for legal or business purposes. In determining data retention periods, the Company takes into consideration local laws, contractual obligations, and the expectations and requirements of our customers and suppliers. When we no longer need personal information, or when you request us to delete your information, where this is legal, we will securely delete or destroy it. See section “Purpose of the processing, legal basis and retention periods” for further information on our retention periods.
We respect your right to access and control your information, and we will respond to requests for information and, where applicable, will correct, amend, or safely delete your personal information.
Where we need to collect under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel your contract with us but we will notify you if this is the case at the time.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please let us know by using the “Contact Us” option on our website or let us know in writing, by email or by telephone.
If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
Our website has links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
Our Services are not directed to children under 13. If you learn that a child under 13 has provided us with personal information without consent, please contact us.
Please contact us with any requests related to your personal information. We understand that you may have questions or concerns about this Policy or our privacy practices or may wish to file a complaint. Please feel free to contact us in one of the following ways:
Email: mats@salpo.com
Address: Attn: Mat Smart, Salpo Technologies, Festival House, Jessop Avenue, Cheltenham GL50 3SH
Telephone: +44 (0) 333 8000 029