Privacy Policy

This Privacy Policy explains how Splinter Works Limited (“we,” “us,” or “our”) collects, uses, and protects the personal data of our customers. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR).

 

Who We Are

Splinter Works Limited

Registered address: 131 Finsbury Pavement, London, EC2A 1NT, United Kingdom

Company number: 06905195

For any questions about this policy or our data practices, please contact our Data Protection Officer at:

miles@splinterworks.com (+44 1225 255525)

 

The Data We Collect

We collect and process personal data that you provide to us directly. This typically includes:

  • Contact Information: Name, email address, phone number, and postal address.
  • Business Information: Company name, job title, and other professional details.
  • Communication Data: Records of your communication with us, such as emails, phone calls, and notes from meetings.
  • Transaction Data: Details of products or services you have purchased from us.

 

Cookies

We use cookies to track user activity on our Web site. This is only used to generate site usage reports and for no other purpose. Cookies can’t do anything malicious, and they cannot send us any personal information about you.

 

How We Use Your Data (Purpose and Legal Basis)

We collect and use your personal data for the following purposes and under the following legal bases:

  • To Manage Our Relationship with You (Contract): We use your data to provide you with the products or services you have requested, manage your account, and fulfil our contractual obligations to you.
  • For Customer Service and Support (Legitimate Interest): We use your data to respond to your inquiries, provide customer support, and resolve issues. It is in our legitimate interest to ensure we can effectively serve our customers.
  • For Internal Business Administration (Legitimate Interest): We use your data for internal purposes such as record-keeping, data analysis, and to improve our products and services. This is necessary for the efficient and effective operation of our business.
  • For Marketing Communications (Consent/Legitimate Interest): With your consent, we may use your contact information to send you updates, newsletters, and promotional materials about our products or services. You can withdraw this consent at any time. We may also send marketing communications based on our legitimate interest, where we have an existing relationship with you and the communication is about similar products or services. You have the right to object to this at any time.

 

 How We Store and Protect Your Data

Your personal data is stored in our secure Customer Relationship Management (CRM) system. We take the security of your data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.

These measures include:

  • Access Controls: Access to your personal data is strictly limited to employees who need it to perform their job duties. We use strong passwords, multi-factor authentication, and a “least privilege” principle to ensure staff only have access to the data necessary for their role.
  • Firewalls and Network Security: We use firewalls and other network security tools to monitor and control incoming and outgoing network traffic, preventing unauthorised access to our systems.
  • Regular Security Audits: We conduct regular security audits and vulnerability scanning to identify and fix potential weaknesses in our systems, ensuring our security measures remain robust and effective against new threats.
  • Data Backup and Recovery: We maintain regular backups of your data to ensure we can restore our systems and your data in the event of an unforeseen incident.
  • Staff Training: All our employees receive regular training on data protection and security best practices to ensure they understand their responsibilities in protecting your data.How Long We Keep Your Data

We will retain your personal data only for as long as is necessary to fulfil the purposes for which we collected it, including for satisfying any legal, accounting, or reporting requirements.

The retention periods are determined based on the type of data and the purpose for which it was collected. For example, we typically retain customer data for the duration of our business relationship and for a period thereafter to comply with legal obligations, such as for tax purposes.

 

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

  • The right to be informed: The right to be informed about how we collect and use your personal data, which is what this privacy policy is for.
  • The right of access: The right to request a copy of the personal data we hold about you.
  • The right to rectification: The right to have inaccurate or incomplete data corrected.
  • The right to erasure (“right to be forgotten”): The right to request the deletion of your personal data where there is no longer a legitimate reason for us to process it.
  • The right to restrict processing: The right to request that we stop processing your personal data under certain circumstances.
  • The right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format and to have it transmitted to another controller.
  • The right to object: The right to object to the processing of your data based on legitimate interests or for direct marketing purposes.
  • Rights in relation to automated decision-making and profiling: The right not to be subject to a decision based solely on automated processing.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in section 1. We may require you to verify your identity before we can process your request.

 

No Third-Party Data Sharing

We can confirm that we do not sell, trade, or otherwise transfer your personal data to any third parties. Your data is used exclusively for internal purposes to manage our relationship with you.

 

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website. We encourage you to review this policy periodically.

 

How to Complain

If you have any concerns about our use of your personal data, you can make a complaint to us directly. You also have the right to lodge a complaint with the UK’s supervisory authority for data protection, the Information Commissioner’s Office (ICO).

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom. Helpline number: 0303 123 1113 ICO website: www.ico.org.uk