Privacy Policy

The type of personal information we collect

We currently collect and process the following information:

• Your name, address, email address, phone number, your job title, your company, your company size and all personal data freely provided to Spotted Zebra (e.g. in light of correspondence with Spotted Zebra).
• If you visit our website: usage data such as your IP address, browser type, browser version, the pages of our website you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data (depending on the consent that you give us).
• If you are a job applicant: your current role and name of your employer, the industry sector where you work, your CV and covering letter.

‍

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you (for example, through a contact form on our website or via email) for one of the following reasons:

For the technical and functional management of the website

We process personal data for the technical and functional management of our website and to make the website easy to use. By using your data, we can check how our website is used and we can improve its content and lay-out. This data also allows us to adequately secure our website.

To this end, we can process data such as your IP address, the pages you visit, the browser you are using, the websites you visited earlier, and the time and duration of your visit. We do this, for example, by using cookies. More information about the use of cookies can be found in our Cookie Policy.

We process this data based on the legitimate interest of Spotted Zebra in providing a well-functioning and secure website.

‍

To contact you and answer your questions

If you ask us a question via a contact form on the website, by telephone, email or post, we will process your personal data in order to answer that question.

To this end, we can process data such as your name, your contact information, your correspondence with Spotted Zebra, and any other personal data you provide that may be relevant for answering your question.

We process this information based on our legitimate interest or based on your consent. You are free to provide us with your personal data, and you can object to the processing thereof at any time.

To keep you informed of our services and activities and for direct marketing

We process your personal data to keep you informed of our activities, for example, with our newsletter and invitations to events.

To this end, we can process data such as your name, your job, your company name, your address, your email address and your preferred language.

We process this information based on our legitimate interest to keep our website users and prospects informed of our activities and services or based on your consent. You can object to the processing of your personal data at any time.

To comply with our legal and regulatory obligations

We have to comply with certain legal and regulatory obligations such as with respect to anti-money laundering. We must also comply with our tax and accounting obligations.

‍

Handling our own disputes

We may process your personal data to handle our own disputes and protect and enforce our rights.

To this end, we can process data such as your name, your contact information, your correspondence with Spotted Zebra and your financial data.

The processing of your personal data for this purpose is based on the legitimate interest of Spotted Zebra in safeguarding our rights in the event of disputes.

We may share your personal data with the following persons, who we will require to honour this privacy policy:

• Our (sub)contractors for assisting us in fulfilling the purposes listed above.
• Our service providers to monitor and analyse the use of our website, for payment processing, or to contact you.
• Our affiliates, such as subsidiaries and parent companies, joint venture partners or other companies that we control or that are under common control with us.
• Our accountants, auditors, lawyers or similar advisors when we ask them to provide us with professional advice.
• The competent authorities, judicial, police or administrative authorities if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, a binding decision of an administrative authority or a court order.
• Investors and other relevant third parties in the event of a potential sale or other corporate transaction related to Spotted Zebra.

All our third-party service providers are required to take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with the instructions of the data controller. All data transferred to third parties is done so in accordance with the EU's Standard Contractual Clauses (SCC). For a detailed list of these third parties, please contact us by email at hello@spottedzebra.co.uk.

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Your consent. You are able to remove your consent at any time. You can do this by contacting hello@spottedzebra.co.uk.
2. We have a contractual obligation.
3. We have a legal obligation.
4. We have a vital interest.
5. We need it to perform a public task.
6. We have a legitimate interest.

How we store your personal information

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on instruction from the data controller, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach, and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

We do not store your personal data for longer than necessary for the purposes for which it is stored. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

After this period, we will securely destroy your personal information in accordance with the data controller's instruction, and in accordance with our data retention policy.

If you would like to find out how long we keep your personal data for a particular purpose you can contact us by email at hello@spottedzebra.co.uk.

International transfers

Some of our external third parties are based outside the European Economic Area (EEA), so their processing of your personal data will involve a transfer of data outside the EEA.

Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission. For further details, see European Commission: Adequacy of the protection of personal data in non-EU countries.
• Where we use certain service providers, we use Standard Contractual Clauses (SCC) approved by the European Commission which give personal data the same protection it has in Europe. For further details, see European Commission: Model contracts for the transfer of personal data to third countries.
• Note: since the Schrems II ruling on 16 July 2020 we no longer rely on the EU-US Privacy Shield for transferring data outside the EEA.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website our assessment web application may become inaccessible or not function properly. For more information about the cookies we use, please read our cookie policy.

‍

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at hello@spottedzebra.co.uk. if you wish to make a request.

‍

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at hello@spottedzebra.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Yendo Inc.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk‍