By ‘personal data’ we mean any data that personally identifies you, from which you could be identified, or which could identify you in conjunction with other data. We use it interchangeably with the US term ‘personally identifiable information’.
Your use of a Website or Service is your consent to our use of your personal data (and other data you provide to us) in accordance with this policy, including (if you are a resident of the European Economic Area (‘EEA’)) the transfer of your personal data outside the EEA.
Who ‘we’ are
Data we collect
You may submit and we may collect your personal data when you use a Website or Service or contact us through a Website or a Service. You may provide such personal data to us directly and sometimes we may be given the data by a third party, for example in a ‘refer a friend’ program.
Such personal data could include your name, telephone number and email address and, depending on your query or the Service you are using, other information such as your age range. Using the definitions in EU law, we will be the ‘data controller’ of personal data we collect and use for our own marketing and account management purposes (‘Account Data’) and the ‘data processor’ of personal data collected through your use of a Website or Service, such as data about your device model, operating system or browser, IP address and, if you have enabled tracking for a particular Service, data about your location (‘Service Data’).
When you provide us with personal data about yourself or another person, you are confirming to us that you are authorised to provide us with that information and that any personal data you give us is accurate and up-to-date.
Sensitive Personal Data
‘Sensitive personal data’ is defined under EU law as personal data revealing information such as racial or ethnic origin, political opinions or religious or philosophical beliefs, trade-union membership and data concerning health or sex life. We do not collect or process sensitive personal data for Services such as CleanSpace, the CleanSpace API and Aura. Should we collect or process sensitive personal data in future we will only do so in accordance with applicable law and we will amend this policy to cover such processing.
Using personal data
We may use your personal data for the purposes stated in any data collection notice and in the normal, legitimate, course of our business, including the following required purposes:
And the following ancillary purposes:
We shall only share personal data in the limited circumstances below:
Other than for the examples set out above, we shall not share your personal data with other companies or organisations without your prior consent.
If you make a positive, public remark about us, a Website or Service, for example on social media, you agree that we may use that remark as a testimonial.
Non-personal or anonymized data
We may process personal data to create non-personal or anonymized data. By non-personal or anonymised data we mean data that is aggregated or otherwise anonymized, in accordance with applicable law, so that it is no longer personal data. For example, in the CleanSpace Service, we may aggregate geo-located pollution readings from Tags with our AirMap created from other sources, to create a map of air pollution which does not allow for the identification of a living individual from that data. We may use such non-personal or anonymised data, for example, to show trends in air pollution or trends in the use of the CleanSpace Services, or to create a consolidated air pollution map of an area or location, and we may share such non-personal or anonymised data publicly or with third-parties such as publishers and commercial or research partners.
The security of your personal data is of paramount importance to us. We shall use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access.
California Privacy Notice
You are entitled to know if we are processing any personal data about you and, if we are, with certain limitations, to a copy of that personal data. You can also ask us to limit the use and disclosure of your personal data, ask that we do not use your details to contact you for marketing purposes, ask us to remove or correct inaccurate personal data, or revoke your consent in relation to any processing of your personal data. We’ll ask you to prove your identity when you make such a request. We will respond to your request as soon as reasonably possible and in any event, in accordance with any local legal requirement.
For any question or request under this policy, please contact us at the addresses above or by email to firstname.lastname@example.org, marked for the attention of the Data Protection Officer.