Pyreos Limited (“We“, “Pyreos“) are committed to protecting and respecting the confidentiality, integrity and security of personal information about individuals whose data we hold.
This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us, and how Pyreos complies with its responsibilities under applicable data protection laws, including, when and to the extent in force, the Data Protection Act 1998, the General Data Protection Regulation (Regulation (EU) 2016/679) and the Privacy and Electronic Communications Regulations 2003 (“Data Protection Laws“). Please read this policy carefully.
For the purpose of the Data Protection Laws, the data controller is Pyreos Limited of 125 Princes Street, Edinburgh, EH2 4AD.
Website data collection
Use of personal information
We process personal information collected via this website for the purposes of:
- Providing and personalising our services
- Dealing with your inquiries and requests
- Carrying out market research campaigns
- Providing you with information about products and services
If using a data capture form
We will send you information according to the information you submitted via our data capture form. If you would like to change this at any point, please email us at firstname.lastname@example.org.
Please note that your information may be used to send you details of those products or services that we offer that we have identified as likely to be of interest to you.
This will be in accordance with the information you provided. If at any point you would like to opt-out of receiving communications from us, or would like to change the channels (such as email or post) that we use to contact you, please contact us at email@example.com.
We will not share your data with third parties except as required to do so by Government Bodies and Law Enforcement Agents.
Given that the Internet is a global environment, using it to collect and process personal data necessarily involves the transmission of data on an international basis. This means for instance that data you pass to us may be processed outside the European Economic Area, although the data will always be held securely and in line with the requirements of UK data protection legislation. By communicating electronically with us, you acknowledge and agree to our processing of personal data in this way.
Where we collect personal information about you, you will be asked if you consent to us adding you to our distribution list for our email newsletter. If you give your consent, we are processing your information for that purpose on the basis of your consent.
Access and other rights
You may request to view records held about you at any point by making a request by email to firstname.lastname@example.org or in writing to the company secretary at 125 Princes Street, Edinburgh EH2 4AD. This request will be responded to within 30 working days. If we require more time to respond fully to any request, we will notify you in writing within the 30-day period referred to. Any additional copies of any information we provide to you may be subject to a reasonable fee.
You also have other rights under Data Protection Laws in relation to your personal data. In particular, you may have (i) the right to request that we rectify or erase information we hold about you in certain circumstances, (ii) the right to ask us to limit our processing of your information, (iii) the right (if we are processing information based on your consent, such as for marketing purposes) to withdraw your consent, (iv) the right to object to certain processing of your information (including the right to object to processing of your personal data for direct marketing purposes at any time), (v) the right to ask us to move, copy or transfer your personal information to another organisation. If you wish to exercise any of these rights, please contact us by writing to the company secretary at 125 Princes Street, Edinburgh EH2 4AD.
Accuracy of personal data
Pyreos tries to ensure that personal data we hold about you is accurate and kept up-to-date. If you believe that any information we are holding about you is inaccurate, out-of-date or incomplete, please notify us as soon as possible. We will promptly correct (or delete if appropriate) any information found to be incorrect.
We have put in place what we consider to be appropriate security measures against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, personal data.
Disclosure and sharing of your personal data
We may disclose personal data to third parties for the purposes of finance, IT or professional advice, or for any other purposes specifically permitted by the Data Protection Laws or for any other purpose which you may authorise.
We may also disclose personal data we hold to third parties:
- a) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
To the extent we transfer any personal data to any third party, we will only do so if that third party agrees to put in place appropriate security measures against unlawful or unauthorised processing of personal data, and against the accidental loss of, or damage to, the personal data.
Transferring personal data outside the EEA
We may transfer personal data we hold about you to a country outside the European Economic Area (“EEA“) where we engage suppliers located in jurisdictions outside the EEA.
As at the date of this policy, we transfer personal data to some IT service providers located in the United States of America (“US“); these are Microsoft, Mailchimp and Salesforce. We have not taken steps to protect any of your personal data which we send to the US, as we believe the entities themselves have sufficient measures in place.
If we transfer any data to any other jurisdiction outside the EEA, we will provide you with details of the country to which data is being transferred, along with details of the measures we have put in place to protect it (which you may see a copy of, on request).
Retention of personal data
Pyreos will take all reasonable steps to destroy, or erase from our systems, all personal data which is no longer required.
We use a third-party service provider, which, as part of its service to us, identifies the geographic location of individuals who open our email newsletter, how many times the newsletter is opened and what items were clicked on.
Changes to this policy
We may make changes to this data protection policy at any time. Any material changes we make will be notified to you in writing.
If you have any queries about this policy or your data, or you wish to submit an access request or raise a complaint about the way your personal information has been handled, please do so in writing and address this to the company secretary at 125 Princes Street, Edinburgh EH2 4AD or by email to email@example.com.
If you are not satisfied with our response to any queries or complaints you raise with us or believe we are not processing your personal data not in accordance with the Data Protection Laws you can complain to the Information Commissioner’s Office (https://ico.org.uk/).
Statement of Intent
Collection of Personal Information
Storage of Personal Information
We will keep your personal information for as long as we need it to provide our services to you. We will try to keep personal information which we hold about you up to date, but if you think that we are holding information which is inaccurate or you are otherwise unhappy about our use of your personal information then please send us an email to let us know.
We will not sell the personal information that we collect from you. We use the personal information which we collect from you to help us provide our services to you. Some data processing may be carried out for us by a third party and in some cases that may mean that the third party will receive your personal information. Apart from this we will not share or transfer any personal information with any other third party unless we are required to do so by law.
You are entitled under the Data Protection Act 1998 to a copy of the personal information that we hold about you if you apply to us in writing. We may make a small charge for dealing with any such request.
We use Google Analytics and Hotjar, to collect anonymous data on how people are using this site. This provides us with visitor statistics, details of page views etc.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
The Google Analytics cookies used by this site are:
You can find out more about Google Analytics cookies at http://www.google.com/analytics/learn/privacy.html