Website Privacy Policy

1.1 Teido (UK) Limited ("Teido", "we", "us", "our") is the controller responsible for your personal data. We are a private limited company registered in England and Wales under company number 14637258, with our registered office at One Bartholomew Close, London, EC1A 7BL.

1.2 This privacy policy explains how we collect, use, store, share and protect your personal data when you visit our website at www.teido.com (the "Website"), when you provide information requested on a form, sign up for a newsletter, enter a competition, request more information, or request or purchase a product or service.

1.3 This policy should be read together with our Cookie Policy and our Website Terms of Use, which also apply to your use of the Website.

1.4 The Website is aimed at businesses and professional users. It is not directed at consumers or children, and we do not knowingly collect personal data relating to children.

1.5 We may update this policy from time to time in accordance with clause 13.

2.1 We have appointed a data protection officer (DPO). If you have any questions about this policy or our data protection practices, or wish to exercise any of your legal rights, please contact the DPO at dpo@teido.com. You can also contact us at info@teido.com or write to us at the address in clause 1.1.

2.2 You have the right to make a complaint at any time, first to Teido (UK) Limited so that we have the opportunity to address your concerns, and then to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

3.1 We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

• "Identity Data" means your first name, last name, title, job title, employer and similar identifiers;
• "Contact Data" means your business address, email address and telephone numbers;
• "Financial Data" means bank account and payment details (but you must not send us full payment card numbers, security codes, PINs or banking credentials through the Website);
• "Transaction Data" means details about payments to and from you and other details of products and services you have obtained from us;
• "Technical Data" means your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access the Website;
• "Profile Data" means your username and password, your interests, preferences, feedback and survey responses, and details of requests or orders made by you;
• "Usage Data" means information about how you use the Website, products and services;
• "Marketing and Communications Data" means your preferences in receiving marketing from us and your communication preferences.

3.2 We also collect, use and share "Aggregated Data" such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not personal data in law, as it does not directly or indirectly reveal your identity.

3.3 We do not intentionally collect any special categories of personal data about you (such as data revealing racial or ethnic origin, health or biometric data), nor information about criminal convictions and offences.

4.1 We use different methods to collect data about you, including:

• direct interactions: you may give us your Identity, Contact, Financial and Profile Data by filling in forms, corresponding with us, or otherwise interacting with us, including when you submit an enquiry, sign up for a newsletter, enter a competition, request information, or request or purchase a product or service;
• automated technologies: as you interact with the Website, we may automatically collect Technical Data and Usage Data about your equipment, browsing actions and patterns, including through cookies and similar technologies, as described in our Cookie Policy; and
• third parties: we may receive personal data about you from third parties such as analytics providers and advertising networks.

5.1 We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to:

• register you as a new customer (lawful basis: performance of a contract);
• process and deliver your order (lawful basis: performance of a contract, and legitimate interests in recovering sums due to us);
• manage our relationship with you, including notifying you of changes to our terms or this policy (lawful bases: performance of a contract, legal obligation, and legitimate interests in keeping our records updated);
• enable you to participate in a prize draw, competition or survey (lawful bases: performance of a contract and legitimate interests in developing our products and services);
• improve the Website, our products and services, our marketing and our customer relationships (lawful basis: legitimate interests); and
• recommend products or services which may be of interest to you (lawful bases: legitimate interests and, where required, your consent).

5.2 We will only send you marketing communications where you have asked us to or where we are otherwise permitted to do so by law. You can ask us to stop sending marketing communications at any time by contacting us at dpo@teido.com or by using the unsubscribe mechanism in any marketing message.

6.1 We may share your personal data with:

• other companies within the IXXOV group, where this is necessary for the purposes set out in this policy;
• service providers and processors who provide services on our behalf (such as IT, hosting, analytics and administrative services), who are bound by contract to protect your personal data and to process it only on our instructions;
• professional advisers, regulators, law enforcement and other authorities, where required or permitted by law; and
• a third party in connection with any actual or proposed sale, reorganisation or transfer of all or part of our business or assets.

7.1 We may transfer, store and process your personal data outside the United Kingdom.

7.2 Where we transfer your personal data outside the United Kingdom, we ensure a similar degree of protection is afforded to it by relying on one of the following safeguards:

• transferring to a country which the UK Government has determined provides an adequate level of protection for personal data; or
• using specific contracts approved for use in the United Kingdom, such as the ICO's International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

7.3 You may contact us at dpo@teido.com for further information on the safeguards we apply.

8.1 We have put in place appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. We limit access to your personal data to those who have a genuine business need to access it.

8.2 We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO of a breach where we are legally required to do so.

9.1 We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which we collected it, including to satisfy any legal, regulatory, tax, accounting or reporting requirements.

9.2 To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and the applicable legal, regulatory and other requirements.

10.1 Under data protection law, you have the following rights in relation to your personal data:

• the right to request access to your personal data;
• the right to request correction of your personal data;
• the right to request erasure of your personal data;
• the right to object to processing of your personal data;
• the right to request restriction of processing of your personal data;
• the right to request the transfer of your personal data to you or to a third party;
• the right to withdraw consent at any time where we are relying on consent to process your personal data; and
• rights in relation to automated decision-making and profiling.

10.2 To exercise any of these rights, please contact us at dpo@teido.com. You will not have to pay a fee to access your personal data or to exercise any of your other rights, unless your request is clearly unfounded, repetitive or excessive. We try to respond to all legitimate requests within one month, although it may take us longer if your request is particularly complex or you have made a number of requests, in which case we will notify you.

10.3 You have the right to complain at any time to Teido (UK) Limited and to the Information Commissioner's Office, the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

11.1 The Website uses cookies and similar technologies. For more information about the cookies we use, and how to manage them, please see our Cookie Policy.

12.1 The Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy notice of every website you visit.

13.1 We may update this policy from time to time. The version in force is the one published on the Website, and the "last updated" date at the top shows when it was last changed. Where appropriate, we will notify you of any material changes.

14.1 If you have any questions about this policy or our data protection practices, please contact our DPO at dpo@teido.com, or write to us at Teido (UK) Limited, One Bartholomew Close, London, EC1A 7BL.