‍1.WHAT INFORMATION DO WE COLLECT?

1.1 We have set out the general categories of personal data that we collect.

1.2 We may process data enabling us to get in contact with you ("contact data"). This contact data may include your name, email address, telephone number and postal address, it will also include any data that you supply in your communication with us. If you use our services you may also be provided with log in details and passwords, by us, which will also be collected and retained by us. The contact data is provided by you, if you use our services, it is necessary for us to carry out the services we provide. 

1.3 We may process information contained in or relating to any communication that you send tous or that we send to you ("communication data”) in the form of any communication between us. The communication data may include the communication content and metadata associated with the communication. We will generate the metadata associated with communications made using the services. 

1.4 We may process data about your use of our services ("usage data"). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, usage, as well as information about the timing, frequency and pattern of your service use. The source of the usage datais Google Analytics. 

1.5 We may not retain all of the information above depending on what services you use and your interaction with them. 

1.6 Application Data -If you use our Services, we also may collect the following information if you choose to provide us with access or permission: 

1.6.1. Geolocation Information - ‘Track Location’ based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. 

1.6.2 Mobile Device Data - we many also automatically collect device information (such as yourmobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware modelinternet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our website we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our App you accessed. 

1.7 If you wish to change our access or permissions, you may do so in your device's settings. 

1.8 No data is collected from any person under the age of 16, If we discover that we hold any data from anyperson under the age of 16 we will immediately delete such information.

2. SPECIAL CATEGORY DATA 

2.1 Special Category Data - is information about race, religion, ethnic origin, political opinion, religious or philosophical beliefs, trade union membership, genetic data, biometric data, or health data. 

2.2 We do not knowingly collect any Special Category Data. If any information of this nature is sent via any communication provided then you expressly consent to its collection and storage.

3. HOW DO WE PROCESS YOUR INFORMATION 

3.1 We will take appropriate technical and organisational precautions to secure your personal data and to prevent the loss, misuse or alteration of your personal data. 

3.2 We will store your personal data on secure servers, personal computers and mobile devices, and in secure manual record-keeping systems. 

3.3 Any data relating to your enquiries that is sent from your mobile browser to our server, or from our server to your mobile browser, will be protected using encryption technology. 

3.4 You acknowledge that the transmission of unencrypted or inadequately encrypted data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. 

3.5 You should ensure that any password and any login details (if any) are not susceptible to being guessed, whether by a person or acomputer program. You are responsible for keeping the password you use for accessing our services and we will not ask you for your password (if any). 

3.6 We process your information to provide, improve, and administer the services we provide and supply to you; 

3.6.1 for security and fraud prevention, to communicate with you and to comply with law. 

3.7 We may also process your information for other purposes only with your specific consent: 

3.7.1 To provide you with a personal account and the necessary authentication and otherwise manage user accounts;  

3.7.2 We may process your information so you cancreate and log in to your account, (if any) as well as keep your account in working order and update your account when used; 

3.7.3 To ensure proper delivery of services to you and to process your information to provide you with the requested service; 

3.7.4 To respond to your inquiries and to support you whilst using our services; 

3.7.5 We may process your information to respond toinquiries and solve any potential issues you might have with the requested service; 

3.7.6 To send information to you in respect of the services; 

3.7.7 We may process your information to send you details about changes or updates to our services, changes to our terms and policies, and other such information; and 

3.7.8 To save or protect an individual's or company’s vital interest to prevent harm. 

4.ON WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

4.1 Operations - We may process your personal data forthe purposes of operating our Services, the processing and fulfilment of our Services, providing additional services, generating invoices, bills and other payment-related documentation, and credit control. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. 

4.2 Relationships and communications - We may process personal data for the purposes of managing our business relationships, communicating with you by email, providing support services and complaint handling. The legal basis for this processing is our legitimate interests, namely communications with our Service users and the maintenance of our relationships, enabling the use of our Services and the proper administration of our business. 

4.3 Personalisation - We may process account data, service data and/or usage data for the purposes of personalising the Services to ensure that you only see material that is relevant to you. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract. 

4.4 Direct marketing - We may process contact data, account data, profile data, client relationship data and/or transaction data for the purposes of creating, targeting and sending direct marketing communications by email, SMS for marketing-related purposes. The legal basis for this processing is promoting our business and communicating marketing messages and offers to our Service users. You may opt out of this service atany time by contacting us at info@iqlink.co.uk. 

4.5 Research and analysis - We may process usage data, service data and/or transaction data for the purposes of researching and analysing the use of our services, as well as researching and analysing other interactions with our business. The legal basis for this processing is our legitimate interests, namely monitoring, supporting, improving and securing our services and business generally. This data is anonymised and your data cannot be identified to you. 

4.6 Record keeping - We may process your personal data for the purposes of creating and maintaining our databases, back-up copies ofour databases and our business records generally. The legal basis for this processing is our legitimate interests, namely ensuring that we have access to all the information we need to properly and efficiently run our business in accordance with this policy and any legal requirements we are obligated to. 

4.7 Security - We may process your personal data for the purposes of security and the prevention of fraud and other criminal activity. The legal basis of this processing is our legitimate interests, namely the protection of our website, services and business, and the protection of others. 

4.8 Insurance and risk management - We may process your personal data where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks and/or obtaining professional advice. The legal basis for this processing is our legitimate interests, namely the proper protection of our business against risks. 

4.9 Legal claims - We may process Your personal data where necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.The legal basis for this process is our legitimate interests, namely the protection and assertion of our legal rights, Your legal rights and the legal rights of others. 

4.10 Legal compliance and vital interests - We may also process your personal data where such processing is necessary for compliance with a legal obligation to which we are subject or in order to protect your vital interests or the vital interests of another natural person. 

4.10.1 if we are unable to obtain permission but believe it is in the interest of the individual that we collect and retain certain information, we will do so in the following circumstances: 

4.10.2 If collection is clearly in the interests of anindividual and consent cannot be obtained in a timely way; 

4.10.3 For investigations and fraud detection and prevention; 

4.10.4 For business transactions provided certain conditions are met; 

4.10.5 If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim;and/or 

4.10.6 If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the services; 

4.11 All processing of Information is done in line with the Data Protection Act 2018, EU GDPR Regulations (Data Protection Directive 95/46/EC), and in compliance with CCPA (California Consumer Privacy Act).

Also see table below

 5.WHO DO WE SHARE YOUR PERSONAL INFORMATION?

5.1 Third-party service providers that we made need to share such information with to enable them to perform the services we require of them. We ensure that these third parties cannot use or supply your personal information unless we have given them permissions to do so. They will also not share your personal information with any other organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The categories of third parties we may share personal information with are as follows:

5.1.1 Data Analytics Services;

5.1.2 Sales & Marketing Tools.

5.2 We also may need to share your personal information in the following situations:

5.2.1 Business Transfers - We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company;

5.2.2 Affiliates - We may share your information with our affiliates, in which case they are legally required to abide by this privacy notice. Affiliates include any parent company and any subsidiaries, joint venture partners, or other companies that we control or that are undercommon control with us;

5.2.3 Selected third party suppliers of products and/or services for the purpose of enabling them to contact you so that they can offer, market and sell to you relevant products and/or services. Each such third party will act as a data controller in relation to the personal data that we supply to it; and upon contacting you, each such third party will supply to you a copy of its own privacy policy, which will govern that third party's use of your personal data. You can opt out of this service at any time by contacting us at email address info@iQlink.co.uk;

5.2.4 Insurers and/or professional advisers insofar as reasonably necessary for the purposes of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice.

5.3 Our database will be stored on the servers of our hosting services.

5.4 In addition to the specific disclosures of personal data, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose Your personal data where such disclosure is necessary for the establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

‍6. KEEPING YOUR INFORMATION SAFE

6.1 We will take appropriate technical and organisational precautions to secure your personal data and to prevent the loss, misuse or alteration of your personal data.

6.2 We will store your personal data on secure servers, personal computers and mobile devices, and in secure manual record-keeping systems.

6.3 Data relating to your enquiries and financialtransactions that is sent from your browser to your server, or from our server to your web browser, will be protected using encryption technology.

6.4 You acknowledge that the transmission of unencrypted or inadequately encrypted data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

6.5 You should ensure that any authentication details, password and any login details are not susceptible to being guessed, whether by a person or a computer program. You are responsible for keeping the password you use for accessing our Services confidential and we will never ask you for your password (if any) (except when/if you log in to our website).

7.HOW LONG DO WE NEED TO KEEP YOUR INFORMATION?

7.1 These are our data retention policies and procedures, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.

7.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

7.3 We will retain your personal data if you have agreed to allow us to send you marketing emails and supply your data to third parties for the purpose of sending third party marketing emails.

7.4 We will retain your personal data for the purposes of any business transaction and account creation.

7.5 We may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. This may entail your personal data being retained for a longer period.

7.6 We may retain your personal data for as long as required for the requirements of our accounting obligations and for providing details to any relevant authority if requested.

7.7 Wherever possible if we are required to retain your personal data for a longer period and we can do so safely we will anonymise your personal data.

‍

8. OURPOLICY ON MINORS

8.1 We do not knowingly collect data from or market to children under the age of contractual consent:

8.1.1 In the UK this is eighteen (18) years of age;

8.1.2 In the EU this is eighteen (18) years of age;

8.1.3 In the USA this is sixteen (16), Seventeen (17) or eighteen (18) years of age, depending upon your location; and

8.1.4 In Canada this is sixteen (16) years of age.

8.2 In other areas please ensure you do not register to use our Services if you are under the age of consent in your jurisdiction.

8.3 By using the Services, you represent that you areat least 18.

8.4 If we learn that personal information from users less than relevant age of consent has been collected, and there is no parental or guardian permission in place we will deactivate the account and take reasonable measures to promptly delete such data from our records.

9. INTERNATIONAL TRANSFERS OF YOUR PERSONAL DATA

9.1 We provide information about the circumstances in which your personal data may be transferred to a third country under UK, EU and/or US data protection law.

9.2 We may transfer your personal data to the European Economic Area (EEA) or the US from the UK and process that personal data in the EU for the purposes set out in this policy, and may permit our suppliers and subcontractors to do so, during any period with respect to which the EU is not treated as a third country under UK data protection law or benefits from an adequacy decision under UK data protection law; and We may transfer your personal data from the UK to the EEA, US and process that personal data in the EEA and US for the purposes set out in this policy, and may permit our suppliers and subcontractors to do so, during any period with respect to which EEA, US states are not treated as third countries under UK data protection law or benefit from adequacy regulations under UK data protection law.

9.3 We may transfer outside of the UK, other than the EU or EEA, If we intend to do this we will notify you, in doing so we will ensure that the terms under which Personal Data is held is such that it complies with all of the same or similar requirements as if it was held in the EU, EEA or EU.

9.4 The hosting facilities for our website are situated in the UK, EU and US only and our website hosting facilities are situated in the UK, EU and US. The competent data protection authorities have made an adequacy determination with respect to the data protection laws of each of these countries. Transfers to each of these countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted or approved by the competent data protection authorities.

10. YOUR RIGHTS

10.1 We have summarised the rights that you have under UK Data Protection Law (Data Protection Act 2018) and other laws in other jurisdictions where relevant.

10.2 Further information can be found at https://ico.org.uk/, if you are in Europe contact https://EC.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en and for the US  contact The Federal Trade Commission at ww.ftc.gov‍

10.3 Your principal rights under data protection law are:

(a) the right to access - you can ask for copies of Your personal data;

(b) the right to rectification - you can ask us to rectify inaccurate personal data and to complete or incomplete personal data;

(c) the right to erasure - you can ask us to erase your personal data;

(d) the right to restrict processing - you can ask us to restrict the processing of your personal data;

(e) the right to object to processing - you can object to the processing of your personal data;

(f) the right to data portability - you can ask that we transfer your personal data to another organisation or to you;

(g) the right to complain to a supervisory authority - you can complain about our processing of your personal data; and

(h) the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent. 

10.4 You have the right to confirm as to whether or not we process your personal data and, where we do, access to the personal data, together with certain additional information. That additional information includes details of the purposes of the processing, the categories of personal data concerned and the recipients of the personal data. Providing the rights and freedoms of others are not affected, we will supply you with a copy of our personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee.

10.5 You have the right to have any inaccurate personal data about you rectified and, taking into account the purposes of the processing, to have any incomplete personal data about you completed.

10.6 In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.

10.7 In some circumstances You have the right to restrict the processing of your personal data. Those circumstances are: you contest the accuracy of the personal data; processing is unlawful but you oppose erasure; We no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise ordefence of legal claims; and You have objected to processing, pending the verification of your objection. Where processing has been restricted on this basis, We may continue to store your personal data. However, we will only otherwise process it: with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest.

10.8 You have the right to object to our processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for: the performance of a task carried out in the public interest or in the exercise of any official authority vested in Us; or the purposes of the legitimate interests pursued by us or by a third party. If you make such an objection, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

10.9 You have the right to object to our processing of Your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.

10.10 You have the right to object to our processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried outfor reasons of public interest.

10.11 To the extent that the legal basis for our processing of your personal data is:

(a) consent; or

(b) that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

10.12 If you consider that our processing of your personal data infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. In relation to complaints under EU data protection law, you may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement; in relation to complaints under UK data protection law, you should do so in the UK. In the US you should make a complaint to your state regulator.

10.13 To the extent that the legal basis forour processing of your personal data is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

10.14 California Civil Code Section 1798.83, also known as the 'Shine The Light' law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided.

10.15 You may exercise any of your rights inrelation to your personal data by emailingthe company information email address here and making a Data Subject Request. Such a request must only be in respect of your one data.

11. DO NOT TRACK

11.1 iQlink Ltd does not support “Do Not Track” requests. Whether or not any of the third party services uses “Do Not Track” requests you must read their privacy policies.

11.2 You can check on your browser and set your options to "Do Not Track" independently of our website should you wish to do so.

12. UPDATING THIS POLICY

12.1 We may update this policy from time to time to ensure we continue to be in compliance with the appropriate laws and regulation or if we offer additional services on our website which would require this policy to be updated.

12.2 Please see at the bottom of this document the “Last Updated Date”

12.3 We recommend that you read this policy from time to time to ensure you understand how we deal with you Personal Data.

Last updated: 31^st May 2023

‍