Privacy Notice

01 Who we are

We are the data controller for personal data we process, unless stated otherwise.

02 What personal data we collect

Depending on how you interact with us, we may collect:

A) Website visitors

• Device and usage data (e.g. IP address, browser type, pages viewed, approximate location derived from IP)
• Cookie and similar technology data (see our Cookie Policy)

B) Enquiries and sales conversations

• Name, work email, job title, organisation, phone number (if provided)
• Your message content and preferences (e.g. demo requirements)
• Notes from calls/meetings and correspondence

C) Service users (Regi platform)

• Account details (name, work email, role, authentication identifiers)
• Audit and security logs (e.g. login events, administrative actions)
• Content you upload or create in the Service (which may include personal data if you choose to include it)

03 How we use personal data

We use personal data to:

• Provide and operate the Service, including authentication and account management
• Respond to enquiries, arrange demos, and manage relationships
• Improve our website and Service (analytics, performance monitoring, troubleshooting)
• Maintain security, prevent fraud and misuse, and ensure system integrity
• Comply with legal obligations and enforce our rights

04 Lawful bases (UK GDPR)

We rely on the following lawful bases as applicable:

• Contract: to provide the Service or take steps at your request
• Legitimate interests: to run our business, improve the Service, secure our systems, and communicate with business contacts
• Consent: primarily for non-essential cookies and certain marketing where required
• Legal obligation: where we must retain or disclose information

05 Marketing

We may send marketing communications to business contacts where permitted by law. You can opt out at any time by using the unsubscribe link in any communication or by contacting us.

06 Sharing personal data

We may share personal data with:

• Service providers: e.g. hosting, analytics, email delivery, customer support tools, acting as processors under contract
• Professional advisers: legal, audit, insurance
• Authorities: where required by law or to protect rights and safety
• Corporate transactions: e.g. acquisition, with appropriate protections

We do not sell personal data.

07 International transfers

If we transfer personal data outside the UK, we use appropriate safeguards such as:

• UK International Data Transfer Agreement (IDTA), and/or
• UK Addendum to the EU Standard Contractual Clauses, plus additional measures where needed

08 Data security

We use organisational and technical measures designed to protect personal data, including access controls, encryption where appropriate, logging, and secure development practices. No system is 100% secure; you should also use strong passwords and safeguard your credentials.

09 Data retention

We retain personal data only as long as needed for the purposes described, including:

• Account and service data: for the life of the account and a reasonable period after closure
• Logs: for security and compliance purposes for a defined period
• Sales enquiries: typically 12–24 months, unless you ask us to delete sooner

10 Your rights

Under UK GDPR, you may have rights including:

• Access, rectification, erasure, restriction, objection, and data portability
• Withdraw consent where we rely on consent
• Complain to the UK Information Commissioner's Office (ICO)

To exercise your rights, contact us.

11 Changes to this notice

We may update this Privacy Notice from time to time. We will post the updated version on our website with a new "Last updated" date.