Privacy Policy

This Notice sets out our commitments to safeguarding your privacy and establishes how we will collect, process, and store your Personal Data when using the Website.

Within this policy-

‘Content’ means any information, articles or images included within the Website;

‘Personal Data’ means any information in any format or medium, from which you can be personally identified;

‘we’, ‘us’ or ‘our’ means CloudNativeX Ltd, a company incorporated in England with a registered office at Gothis House, Barker Gate, Nottingham, England, NG1 1JU and a company registration number of 12202106.

‘Website’ means https://cloudnativex.io

‘you’ or ‘your’ means the visitor or user of the Website;

We are providing this information as part of our on-going efforts to provide transparency and fairness by

a) ensuring that you have all the information regarding your privacy when using the Website; and
b) to comply with our obligations and your rights created by applicable law.

We pride ourselves on keeping up to date with regard to advances in technology and legal developments which can result in us needing to change this Privacy Notice, if we make any changes we shall make the new notice available on the Website which shall apply from the date of publication so you are encouraged to revisit this Notice periodically to ensure that you agree to the version that is current at the time of your visit.

Your trust is important to us and we want to be clear and transparent about

a) What Personal Data we collect;
b) How we use that Personal Data;
c) Who we share the Personal Data with;
d) How we store and retain your Personal Data;
e) Your rights in respect of that Data.

Whether or not you are personally identifiable from the data that we gather, store, or process you can be assured the data will only be used in accordance with this notice.

You will be asked to agree to this Privacy Notice, if you do not agree with anything within this Privacy Notice, you must not use our Website.

1. Your Personal Data

1.1. We will only gather, collect, process, or store any Personal Data –
- a) with a lawful purpose;
- b) that is necessary for processing an enquiry;
- c) that is necessary to deliver the website to the device used by you;
- d) to take the necessary steps to enter into and in the performance of a contract with you;
- e) that is necessary for the administration of an account if you register with the Website;
- f) for the recording of a financial transaction.
- g) for internal records that we are legally obliged to keep.
- h) to deal with complaints, disputes, and legal actions.
- i) where necessary to protect the vital interest of you or another person;
- j) to send commercial communications from us (including newsletters and notifications), where you request or consent to such communications.
- k) to send commercial communications from selected partners, associates, or affiliates only where you expressly request or consent to such communications.

2. Use of the Website

2.1. When visiting the Website, we may collect the following information –
- a) the country from where you gain access to the Website;
- b) the browser used by your device;
- c) the operating system used by your device;
- d) the screen resolution and other settings of the device you use;
- e) the IP address;
- f) the web pages that you visit or access;
- g) the length of time you spend on a webpage;
- h) the referral source, if any (the way how you arrived at the Website);
2.2. With the exception of the IP address this information is anonymised and you cannot be personally identified from it, therefore it is not classified as Personal Data.
2.3. The information is used with a legitimate interest or consent to
- a) generate website usage reports and statistics;
- b) maintain a Website that is user friendly and compatible with popular equipment and software;
- c) analyse and maintain the security of the Website;
- d) the IP address may be used to help identify inappropriate or malicious use;

3. Enquiries

3.1. If you make an enquiry about the Company, its services, the Website or its Content whether using the facility on the Website (or otherwise), you will need to provide us with your name, Company/business name, job title and email address.
3.2. This information is processed with
- a) A legitimate interest - in order that we can respond to your enquiry; or
- b) With your consent to send commercial communications including the availability of new Products, special offers and discounts, newsletters, and notifications.

4. Registration

4.1. If you register with us to use a restricted area or access any software or apps we may require your name, address, Company name, job title, telephone number and email address, you will also need to create a username and password.
4.2. we will use your Personal Data
- a) with a legitimate interest for the administration and performance of the account;
- b) with a legal obligation and legitimate interest for maintaining internal records;
- c) with a legitimate interest to deal with complaints, disputes, and legal actions;
- d) with a legitimate interest o detect miss-use;
- e) with a legitimate interest to protect the vital interest of you or another person;
- f) with a legitimate interest and with your consent to send commercial communications from us except where you opt-out of receiving such communications;

5. Purchases

5.1. If you make an order or purchase for Products or Services then we will collect your name, address, email address, payment card details, and the details of your purchase.
5.2. we will use this information
- a) with a legitimate interest and performance of the contract for the administration of the purchase;
- b) in the performance of the contract to deliver any Products or servicers to you;
- c) in the performance of the contract and with a legal obligation for the recording of financial transactions;
- d) in the administration and performance of the contract and a legal obligation for internal records;
- e) in the performance of the contract to deal with complaints, disputes, and legal actions;
- f) with a legitimate interest to, where necessary, protect the vital interest of you or another person;
- g) with your consent and a legitimate interest to send commercial communications from us including the availability of new Products or Services, special offers and discounts, newsletters, notifications, you can withdraw your consent at any time by clicking the unsubscribe link in the communications; or otherwise informing us that you wish to opt-out.

6. Processing payments

6.1. All payments are processed by a third party payment processing merchant and in full compliance with all recognised standards and security requirements.
6.2. The payment processing merchant will use full encryption to ensure your payment card information remains secure, this means that orders can only be accepted from web browsers that permit communication through Secure Socket Layer (SSL) technology, it is not possible to place an order via an unsecured connection. Most web browsers support SSL.
6.3. We do not process, retain, or store any payment card details, we only collect and pass them through to the processing merchant. A payment processing merchant is bound by strict rules and regulations for the collection, use sand storage of your payment card details.

7. Sharing your Personal Data

7.1. We will not share your Personal Data with anyone except as stated within this paragraph.
7.2. We may use a third party software to perform certain functions, this is considered to be sharing your Personal Data with the software.
7.3. We may store your Personal Details in software on our computers or third party servers or on the cloud, although the third party does not access the Personal this is still classed as sharing.
7.4. We will share your name and email address with our email service provider when we communicate with you through email.
7.5. We may share your Personal Data with our employees, officers, agents, consultants, suppliers, or subcontractors insofar as reasonably necessary
- a) for dealing with an enquiry or administering a registration;
- b) for performance of a contractual obligation;
- c) to the extent that we are required to do so by law;
- d) in connection with any legal proceedings or prospective legal proceedings;
- e) to establish, exercise or defend our legal rights;
- f) with the purchaser (or prospective purchaser) of any business, asset, or account which we are (or are contemplating) selling;
7.6. We may also engage other businesses for website, IT or analytic support and maintenance who may, whilst performing their services have access to your Personal Data. These businesses will be working under a contract for services that contain strict conditions in relating to accessing Personal Data and will be subject to confidentiality undertakings.

8. Automated Processing

8.1. We shall not use automated processing of your Personal Data to form or make decisions except where authorised or required by law (for example for the calculation of taxes due from a purchase); or you have given your express consent. If we use automated processing you are entitled to request details of the automated process.

9. Data Security

9.1. We will take all reasonable technical and organisational precautions to prevent the loss, misuse, or alteration of Personal Data, including
- a) storing of data on a secure, password protected, and firewall protected device;
- b) limiting access to data to only personnel who need access for the performance of a contract or the administration and management of an account;

10. Data transfers outside the EU

10.1. We shall not generally transfer or process any personal data outside the boundaries of the E.U. If any data is transferred outside of the E.U. we shall ensure that the county has sufficient security measures and guarantees in place to protect the security of your Personal Data.

11. Data retention

11.1. Personal Data shall be retained for as long as necessary to fulfil the purpose which it was collected.
11.2. We may retain Personal Data for longer than is necessary for the purpose which it was collected to comply with a legal obligation, for example the retention of financial transactions for accounting purposes or where we may need to exercise or defend our legal rights which means some information may be retained for up to six years.

12. Your rights

12.1. Under data protection regulations you have the right
- a) to know the identity and contact details of the Data Controller and Data Protection Officer (where applicable);
- b) to know the purpose and legal basis for processing your Personal Data, and where processing is based on the legitimate interests of the Data Controller, what those legitimate interest are;
- c) to know whether your Personal Data is transferred or processed beyond the EU and that appropriate safeguards are in place.
- d) to access your Personal Data
- e) to erase Personal Data.
- f) to restrict processing.
- g) to portable data.
- h) to withdraw consent
- i) to complain.
12.2. The right of access.
- a) You may require us to provide you with any Personal Data we hold about you. To obtain a copy of any Personal Data we hold contact the Data Controller.
- b) The Personal Data will be provided free of charge except where a request is manifestly unfounded or excessive (for example it is a repetitive request, or where we need to process large amounts of data) in which case we shall make a charge for our reasonable administrative costs in dealing with the request or refuse to respond but we must provide a justifiable reason for refusing to respond.
- c) We shall provide the requested Personal Data within one month of receipt of the request, however where there is a substantial amount of information or it is difficult to collate we may extend this timeframe by one month by providing you notice.
- d) As we take the issue of protecting your Personal Data seriously, we follow strict storage and disclosure procedures which mean that we may require proof of identity from you prior to disclosing such information.
12.3. The right to erase Personal Data
- a) You have the right in certain circumstances to instruct us to erase your Personal Data where
  - i. The Personal Data is no longer necessary in relation to the purpose for which it was originally collected/processed.
  - ii. You withdraw your consent.
  - iii. You object to the processing and there is no overriding legitimate interest for continuing the processing.
  - iv. The Personal Data was unlawfully processed or obtained.
  - v. The Personal Data must be erased to comply with a legal obligation.
  - vi. The Personal Data is processed in relation to the offer of information services to a child.
- b) Where you have the right and you issue an instruction to erase your Personal Data we shall use all reasonable efforts to
  - i. Inform all third parties to whom we have disclosed your Personal Data of the requirement to erase your Personal Data which they hold;
  - ii. In the event that your Personal Data has been published online we shall endeavour to ensure that any links or references are also removed, however due to the Cashing of information it may take same time before the Data is no longer visible or available, for example in search engine;
- c) We may refuse to erase your Personal Data only
  - i. to exercise the right of freedom of expression and information;
  - ii. to comply with a legal obligation or for the performance of a public interest task or exercise of official authority;
  - iii. for public health purposes in the public interest;
  - iv. archiving purposes in the public interest, scientific research historical research or statistical purposes; or
  - v. the exercise or defence of legal claims.
12.4. The right to restrict processing
- a) We shall, upon your request, restrict the processing of your Personal Data if the following circumstances arise
  - i. Where you contest the accuracy of the Personal Data we shall restrict the processing until we have verified the accuracy of the Personal Data.
  - ii. Where you have objected to the processing where it was necessary for the performance of a public interest task or purpose of legitimate interests, and we are considering whether our legitimate grounds override your grounds.
  - iii. When processing is unlawful and you oppose erasure and you request restriction instead.
  - iv. If we no longer need the Personal Data but you require the information to establish, exercise or defend a legal claim.
- b) Where processing of your Personal Data is restricted, the information shall be stored but no further processing shall occur.
- c) We shall inform any third party to whom we disclosed your Personal Data that the Information is restricted.
- d) We shall inform you when and restricted period comes to an end.
12.5. The right to portable data
- a) Any Personal Data where the lawful purpose for processing is consent or for the performance of a contract which is stored by us electronically we shall hold that Personal Data in a portable format (readable in a format that will be commonly used on other computer systems) and we shall provide this information to you or directly to another organisation (where technically feasible) upon your request.
12.6. The right to complain.
- a) If you are not happy with the way we collect or store your Personal Data you can make a complaint to the Information Commissioners Office, however we would appreciate you contacting us first to give us the opportunity to provide an explanation or put things right.
12.7. The right to withdraw consent
- a) If you provide your consent to process your Personal Data in a particular way, you may withdraw your consent at any time by informing the Data Controller at the address at the bottom of this notice.
- b) Upon receipt of a notice withdrawing your consent to process your Personal Data we shall stop processing the Data except:
  - i. Where is it necessary for the performance of a contract.
  - ii. Where there are compelling legitimate grounds for the processing, which override your interests, rights, and freedoms; or
  - iii. the processing is for the establishment, exercise, or defence of legal claims; or
  - iv. where the processing of the Personal Data is carried out under an obligation in law.

You can contact us regarding any aspect of the collection, use or storage of your Personal Data at:

CloudNativeX Ltd, Gothis House, Barker Gate, Nottingham, England, NG1 1JU

Or email info@cloudnativex.io