• “I”, “our”, “us”, or “we” refer to the business, SoundDrop UK LTD
• “you”, “the user” refer to the person(s), or business, using this website

The purpose of this policy is to explain to you how we control, process, handle and protect your personal information through the business and while you browse or use this website, subscribing to any of our services, posting material or requesting further services. If you do not agree to the following policy you may wish to cease viewing / using this website or services, and or refrain from submitting your personal data to us.

This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data.

We may collect data about you in the following ways:

• By filling in forms on any of our websites, this includes information provided at the time of registering to use our websites, subscribing to any of our services, posting material or requesting further services.
• If you contact us, we may keep a record of that correspondence.
• We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
• Details of transactions you carry out through our site and of the fulfilment of your orders.
• Visiting our sites, including, but not limited to, traffic data, location data and other communication data required for our own security, diagnostic, authentication and billing.
• We also work with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, social networks such as Facebook and Twitter, search information providers, third parties who enable sign on functionality and social network integration) and may receive information about you from them.

We may collect some or all of the following personal data. If you do not allow us to collect this data, then we may not be able to fulfil our contractual or legal requirements.

• Name
• Business name
• Address
• Email address(es)
• Telephone number(s)
• IP Addresses and website cookies
• Payment details

IP Addresses
We collect IP address information for security, diagnostics and statistical analysis of traffic used for improvements to the performance and usability of our services, for GDPR purposes we collect this information under legitimate interest.
Cookies
A cookie is a small file saved on your computer that is used to help store preferences and other information that is used by websites you may visit.
We use cookies for the following:

• Authentication of users when logging in or out of our services
• Analysis of traffic to our website via Google Analytics (see Google Analytics)
• Tracking of website preferences

If you register with us or if you continue to use our site, you agree to the use of cookies.
You can block cookies by activating the setting in your browser which allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies you may not be allowed access to all or parts of our site. Unless you have adjusted your browser settings so that it will refuse cookies, our system will issue cookies as soon as you visit our site.

Under GDPR, we must always have a lawful basis for using personal data. Our lawful basis is one or more of the following:

Contractual obligations
When you purchase a service, we need to collect personal data to fulfil our contract with you, e.g. so we can manage and invoice your account and contact you for support purposes.
Legal compliance
The law requires we collect and process data for certain purposes such as for keeping financial records, i.e. invoicing, and that we can comply with law enforcement requests for data.
Legitimate interest
We collect data under legitimate interest in a way that is reasonably expected as part of the day to day running of our business, e.g. we collect and log IP addresses for fraud protection and security as well as analysis of our site usage.
Consent
We collect and process your data with your consent when subscribing to any of our services.

Your personal data may be used for one of the following purposes:

• Providing and managing your account.
• Supplying our services to you. Your personal details are required in order for us to enter into a contract with you.
• Communicating with you. This may include responding to emails or calls from you.
• Supplying you with information that you have opted-in to (you may unsubscribe or opt-out at any time by emailing info@sounddrop.co.uk).
• With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email with information, news, and offers on our services. You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out by contacting us via email at info@sounddrop.co.uk.

We will only retain your personal data for as long as is necessary to fulfil the purposes for which it is collected.
In assessing whether any longer retention period is appropriate for your personal data, we take into consideration:

• the purposes for which we originally collected the personal data
• the lawful grounds on which we based our processing
• the type of personal data we have collected
• the amount and categories of your personal data
• whether the purpose of the processing could reasonably be fulfilled by other means

Please note that, if you or we terminate any service we provide to you, then (irrespective of whether we are acting as a data controller or a data processor) we do not accept any obligation to retain any or all of the personal data provided to us in connection with or processed by that service and we may delete it from our systems at any time.

We take measures to ensure that your personal data is adequately protected from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, when transmitted, stored or otherwise processed. However, we cannot guarantee that unauthorized access, hacking, data loss, or other similar events will never occur. We urge you to take steps to keep your personal data safe, such as choosing a strong password and logging out of your account and closing your web browser when finished using our services.

Under data protection law, you have rights including:

• Access - You have the right to ask us for copies of your personal information.
• Rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
• Object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
• Data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Persistent requests for the same data may incur an administration/postage charge to cover our costs. Please contact us at info@sounddrop.co.uk if you wish to make a request.

We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.

This policy (together with our terms of use Terms and Conditions and any other documents referred to on it) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

For the purpose of the Data Protection Act 1998 (the Act) and GDPR (General Data Protection Regulation), the data controller is SoundDrop UK LTD, a company registered in England and Wales under company number 13868580 and with registered address at 17 Rowsham Dell, MK14 5JS, United Kingdom email: info@sounddrop.co.uk.

The safety of your personal data is important to us. In situations where you are not happy with how we have processed your personal data, you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk), located at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (tel 0303 1231113). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please do contact us in the first instance.