Privacy Policy

Introduction

Assurix Ltd ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at assurix.com, use our services, or otherwise interact with us.

We are a controller for the personal information we process, unless otherwise stated. For any questions about this Privacy Policy or our data practices, please contact us at the details provided at the end of this document.

Information We Collect

We may collect the following types of information:

Personal Information You Provide to Us:

• Contact information (name, email address, phone number, postal address)
• Company information and role/position
• Payment details when you join our waitlist or subscribe to our services
• Information you provide when you communicate with us
• Any other information you choose to provide

Information We Collect Automatically:

• Usage information (pages visited, time spent, links clicked)
• Device information (IP address, browser type, operating system)
• Location information derived from your IP address
• Log data and cookies as described in our Cookie Policy

How We Use Your Information

We use your information for the following purposes:

• To provide our services and fulfill our contractual obligations
• To communicate with you about our services, including responding to inquiries
• To manage your account and waitlist position
• To process transactions and send related information
• To send administrative information, such as updates to our terms, conditions, and policies
• To improve and personalise our services
• To analyse usage patterns and trends
• To protect against and prevent fraud, unauthorised transactions, security incidents, and other liabilities
• To comply with legal obligations

Legal Basis for Processing

Under UK and EU data protection laws, we process your personal information on the following legal bases:

• Contractual necessity: Processing necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legitimate interests: Processing necessary for our legitimate interests, provided those interests are not outweighed by your rights and interests
• Legal obligation: Processing necessary to comply with our legal obligations
• Consent: Where you have given us consent to process your personal information for specific purposes

Data Sharing and Disclosure

We may share your information with:

• Service providers: Third parties that help us deliver our services (payment processors, cloud hosting providers, etc.)
• Business partners: Third parties with whom we partner to offer joint services, events, or promotions
• Professional advisors: Lawyers, accountants, auditors, and insurers when necessary
• Legal authorities: Regulatory bodies, government agencies, law enforcement, and others as required by law
• Business transfers: In connection with a merger, acquisition, restructuring, or sale of assets

We require all third parties to respect the security of your personal information and to treat it in accordance with the law.

International Transfers

Your personal information may be transferred to and processed in countries outside the UK or European Economic Area (EEA). These countries may have data protection laws that are different to the laws of your country.

We have implemented appropriate safeguards to ensure your personal information remains protected according to this Privacy Policy. These safeguards include transferring data to countries that have been deemed to provide an adequate level of protection by the UK or EU authorities, or using specific contracts approved for use in the UK and EU which give personal information the same protection it has in the UK and EU.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no system is perfectly secure, and we cannot guarantee the absolute security of your information.

Data Retention

We will retain your personal information only for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the information, and applicable legal requirements.

Your Rights

Under UK and EU data protection laws, you have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate personal information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request restriction of processing of your personal information
• Data portability: Request the transfer of your personal information to you or a third party
• Objection: Object to processing of your personal information
• Withdraw consent: Withdraw consent where we rely on consent to process your personal information
• Complain: Lodge a complaint with a supervisory authority

To exercise these rights, please contact us using the details provided at the end of this Privacy Policy. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

Children's Privacy

Our services are not intended for children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information.

Third-Party Links

Our website and services may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this Privacy Policy frequently to stay informed about how we are protecting your information.

IT Provider Directory Matching Service

Our IT provider directory includes a matching tool that helps SMBs find a suitable managed service provider (MSP). This section explains how we handle personal data collected through that service.

What we collect

When you use the matching form we collect your first name, work email address, company name (optional), UK region, company size band, and a free-text description of your requirements.

How we use it

We use this information to email you a shortlist of matched providers and to operate the directory service. Our lawful basis for this processing is legitimate interests - specifically, providing you with a relevant shortlist and helping IT providers reach businesses that match their offering.

Sharing with providers

We do not share your details with any provider automatically. We share your name, work email, company, region, size band and stated requirements with a specific named IT provider only where you have explicitly clicked "Confirm introduction" for that provider on the results page. Our lawful basis for that disclosure is your consent, given at the point of confirmation. Consent is per provider - confirming an introduction to one provider never shares your data with any other provider.

The receiving provider

Each provider to whom we make an introduction is an independent data controller. They will handle your personal data under their own privacy policy, which you should review before engaging with them. We are not responsible for their data practices.

Withdrawing consent and deletion

You may withdraw your consent to a provider introduction or request deletion of your enquiry data at any time by emailing info@assurix.com. Please note that withdrawing consent does not undo an introduction that has already been made to a provider, as we cannot control data already received by an independent controller.

Retention

We retain enquiry data and consent records for 24 months from the date of your last interaction with us.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: info@assurix.com

Address: Privacy Team, Assurix Ltd, 4 Crown Pl, London EC2A 4BT, United Kingdom

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.