Privacy Notice

Privacy Notice

Welcome to Data Pilots’ Privacy Notice where we practice what we preach. We are committed to protecting the privacy and security of your personal data. This notice explains how we collect, use, and safeguard your information in compliance with our applicable privacy regulations including the General Data Protection Regulation (GDPR).

 

Data Collection and Processing

Data Types

When you interact with our website and service to purchase a product or subscribe to our blog, we will collect:​​

• Personal Information: Such as your name, email address, phone number, and mailing address.

• Payment Information: Including credit card details, billing address, and payment history.

• Usage Data: Such as IP address, browser type, operating system, pages visited, time spent on those pages, and other analytical data.

• Account Information: Such as username, password, preferences, and purchase history.

• Contact Information: Such as your address book, phone contacts, or social media profiles if you choose to share them with us.

• Communications: Such as customer support requests, feedback, and any messages you send us.

• Marketing and Survey Responses: Such as your responses to surveys, promotions, and marketing campaigns.

• Third-Party Data: Information from third-party services you connect with our services, such as social media accounts.

• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar tracking technologies to improve your experience on our website.

• Purchase and Order Information: Details about products or services you have purchased or ordered from us, including order history.

• Consent Records: Records of any consents you have given, along with the date and time, and the specific details of the consent.

• User Content: Such as photos, videos, and other content you upload or share through our services.

• Legal and Compliance Information: Such as records of interactions with regulators, legal proceedings, and compliance-related communications.

• Service Usage Information: Data on how you interact with our services, such as features used, and session durations.

 

Legal Basis of Processing

At Data Pilots, we collect and use your personal data only when we have a valid reason to do so. Under data protection laws, especially the GDPR, we are required to have a legal basis for processing personal data. The legal bases we rely on depend on how and why we are using your data. Below are the most common reasons:

• Consent: You have given us clear consent to process your personal data for a specific purpose.

• Contract: The processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering a contract.

• Legal Obligation: The processing is necessary for us to comply with the law (not including contractual obligations).

• Legitimate Interests: The processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

 

How We Use Your Data

• Personal Information: Necessary for the performance of a contract; Legitimate interests (to communicate and provide services)

• Payment Information: Necessary for the performance of a contract; Compliance with a legal obligation (for financial records)

• Usage Data: Legitimate interests (to improve and personalize services); Explicit Consent (where required)

• Account Information: Necessary for the performance of a contract; Legitimate interests (to manage user accounts)

• Contact Information: Explicit Consent (for accessing and using contacts) for marketing purposes, or legitimate interest to facilitate necessary business communications

• Communications: Necessary for the performance of a contract; Legitimate interests (to improve services)

• Marketing and Survey Responses: Explicit Consent (marketing); Legitimate interests (to improve products and services)

• Third-Party Data: Explicit Consent; Necessary for the performance of a contract (for account integration)

• Cookies and Tracking Technologies: Explicit Consent; Legitimate interests (to enhance user experience and analyze usage)

• Purchase and Order Information: Necessary for the performance of a contract; Legitimate interests (to process orders)

• Consent Records: Compliance with a legal obligation; Legitimate interests (to document consent)

• User Content: Necessary for the performance of a contract

• Legal and Compliance Information: Compliance with a legal obligation; Legitimate interests (to manage legal risks and compliance)

• Service Usage Information: Legitimate interests (to improve and personalize services); Necessary for the performance of a contract

 

Your Rights and Choices

Understanding the legal basis for processing your data helps you to understand your rights. For example, if we are processing your data based on your consent, you have the right to withdraw that consent at any time. Similarly, if we process your data based on legitimate interests, you have the right to object to that processing under certain conditions.

 

Data Management 

Storage and Access

Your data is stored in the UK, EU and US.  Access to your personal data is limited to authorized employees and is controlled through various security controls. When transfer data across borders in compliance with GDPR requirements by ensuring adequate data protection measures and controls such as Standard Contractual Clauses. 

 

Data Retention Policy

We retain your personal data for as long as we are required to in line with our legal obligations. 

 

Data Security

We protect your data using recommended industry standards and controls, we also limit the nature of the data we collect to what is strictly required to limit the risk to individuals and ourselves. 

 

Third-Parties

We share your data with third parties to facilitate our services and products. These third parties include payment processors, customer relationship management and business management companies. We evaluate our third-party vendors' privacy practices by conducting reviews prior to onboarding. 

 

Incident Response Plan

In case of a data breach, where required we will notify affected individuals and relevant authorities as per our requirements within a reasonable timeframe of becoming aware of the breach.

​

Rights of Data Subjects

At Data Pilots we recognize and respect your rights over your personal data. You have several rights under various data protection laws, including the right to access, correct, delete, or transfer your personal data, as well as the right to object to certain types of processing.

 

How to Make a Request

If you wish to exercise any of your rights, please follow these steps:

• Contact Us: Reach out to us via our chat function. Please provide as much detail as possible about your request and your relationship with us.

• Verification: For your security, we may need to verify your identity before proceeding with your request. This is to ensure that personal data is not disclosed to anyone who does not have the right to receive it.

• Processing Your Request: Once your identity is verified, we will process your request in accordance with applicable data protection laws. We aim to respond to your request within [specify time frame, e.g., one month] of receiving it, or as otherwise required by law.

 

Types of Requests

• Access: You can ask for copies of your personal data.

• Correction: You can ask us to correct inaccurate or incomplete data.

• Deletion: You can ask us to delete or remove your data in certain circumstances.

• Objection: You can object to the processing of your data in certain circumstances, such as for direct marketing purposes.

• Portability: You can request that we transfer your data to you or another organization in a structured, commonly used, and machine-readable format.

 

Sale of Data

We do not sell any personal data.

 

Policy Review Process 

We review and update our privacy policies and practices to ensure ongoing compliance and protection of personal data.

 

Contact Us

For any questions or concerns regarding your personal data or this Privacy Notice, please submit a query on our website via the chat function or email us at team@datapilots.tech.

Last updated: September 2024