ManufactIQ Ltd privacy notice

1. Who we are

ManufactIQ Ltd (“ManufactIQ”, “we”, “us”, “our”) is a UK software business providing customer relationship management and related business software services to manufacturing businesses.

Our registered contact details are:

Registered in

England and Wales

Company number

17376873

ICO registration reference

ZC229188

Email

support@manufactiq.co.uk

Website

manufactiq.co.uk

For the purposes of UK data protection law, ManufactIQ Ltd may act as a data controller where we decide why and how personal information is used.

Where we process personal information solely on behalf of one of our business customers through the ManufactIQ platform, we may instead act as a data processor, with that customer acting as the data controller.

2. Personal information we may collect

We may collect and process the following categories of personal information.

Business contact information

This may include:

• name;
• job title;
• employer or organisation;
• business email address;
• business telephone number;
• business address; and
• professional or LinkedIn information.

Enquiry and sales information

This may include:

• enquiries;
• demonstration requests;
• sales opportunities;
• quotation information;
• meeting notes;
• correspondence;
• telephone call notes; and
• records of interactions with us.

Customer account information

If you or your organisation becomes a customer, we may process:

• account contact information;
• authorised users;
• login/account information;
• service preferences;
• support requests;
• contract information; and
• account activity.

Billing and transaction information

We may process:

• billing contacts;
• invoices;
• payment status;
• transaction records; and
• accounting information.

We do not intend to store full payment-card details ourselves where payments are handled by a third-party payment provider.

Technical and website information

Depending on how our website and services are configured, we may collect:

• IP address;
• browser type;
• operating system;
• device information;
• website usage information;
• pages visited;
• approximate location derived from IP address;
• referral source; and
• cookie or similar technology identifiers.

Our cookie policy lists every cookie and similar technology our website uses.

Website statistics

We count visits to the public pages of our website on our own server, to see which pages are read and which websites, searches and links bring people to them. For each page viewed we add one to a daily total of the page, the name of the website or campaign link that led there, and whether it was read on a phone, a tablet or a computer.

Those totals are all we keep. We do not store your IP address, your browser's details or the full address of the page you came from with them, we set no cookie and run no script for them, and nothing in them can identify you or connect one visit to another. Nobody signed in to the CRM is counted, and if your browser sends a Global Privacy Control or Do Not Track signal, your visit is not counted at all.

Marketing preferences

We may keep records of:

• whether you have objected to marketing;
• whether you have unsubscribed;
• marketing preferences; and
• the date and source of those preferences.

3. How we obtain personal information

We may obtain personal information:

• directly from you;
• when you contact us;
• when you request a demonstration;
• when you become a customer;
• through our website;
• through meetings, telephone calls or email correspondence;
• from your employer or organisation;
• from publicly available business sources;
• from company websites;
• from professional networking platforms such as LinkedIn;
• from business directories; and
• from third-party business-data providers where lawfully permitted.

If we obtain your business contact information from somewhere other than you, we will give you the information in this notice within a reasonable period and no later than one month - or sooner, when we first contact you.

4. How and why we use personal information

We may use personal information for the following purposes.

Where we rely on legitimate interests, we consider whether our use of personal information is necessary and whether those interests are outweighed by the individual's rights and freedoms.

5. Business-to-business marketing

We may contact relevant individuals at businesses where we reasonably believe our products or services may be relevant to their professional role.

Marketing may include:

• email;
• telephone;
• LinkedIn or other professional platforms; and
• other business communications.

The rules depend on the type of organisation and the communication method.

For electronic marketing to corporate subscribers such as limited companies and LLPs, PECR does not generally require prior consent. However, UK GDPR still applies where an individual's personal information is used.

Sole traders and some partnerships are subject to different electronic-marketing rules.

We will identify ourselves in marketing communications and provide a way to object or unsubscribe where required.

You can object to direct marketing at any time by:

• using the unsubscribe method provided; or
• emailing support@manufactiq.co.uk.

If you object, we may retain the minimum information needed on a suppression list so that we do not accidentally contact you again.

Our LinkedIn page

We have a company page on LinkedIn. What you do on LinkedIn, including following, commenting on or messaging our page, is covered by LinkedIn's own privacy policy. If you follow, comment on or message our page, we can see your public profile and what you write, as LinkedIn shows them to us, and LinkedIn gives us statistics about our page's visitors that do not identify any of them.

Our website only links to LinkedIn. No LinkedIn script, tag or cookie is placed by our pages.

6. Telephone marketing

Before carrying out relevant B2B telephone marketing, we may screen numbers against applicable preference services and our own internal suppression records.

We will respect objections to future marketing calls.

Automated marketing calls will not be made without the consent required by law.

7. Customer data processed through ManufactIQ

Our customers may use ManufactIQ to store personal information relating to their own customers, prospects, employees or other contacts.

Where we process this information solely on the customer's instructions, the customer will normally be the data controller and ManufactIQ Ltd will normally act as its data processor.

In those circumstances:

• the customer's privacy notice governs its use of that information;
• we process the information according to the customer's instructions and our contractual obligations; and
• requests relating to that information may need to be directed to the relevant customer.

8. International transfers

We host our website and the ManufactIQ service with DigitalOcean in London, United Kingdom, where our database and the files stored in the service are kept. DigitalOcean delivers our pages through Cloudflare's network, which also protects the site from automated attacks. We send email through Microsoft 365.

DigitalOcean, Cloudflare and Microsoft are United States companies, and some suppliers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate legal safeguard is used where required, such as:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the EU Standard Contractual Clauses; or
• another legally permitted transfer mechanism.

9. How long we keep information

We only intend to retain personal information for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and contractual requirements.

We apply the following retention periods:

10. Security

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised access;
• accidental loss;
• alteration;
• disclosure; and
• destruction.

Measures may include access controls, authentication, software updates, backups, encryption where appropriate and staff access restrictions.

No internet-based system can be guaranteed to be completely secure.

11. Your data-protection rights

Depending on the circumstances, you may have rights to:

• be informed about how your information is used;
• access your personal information;
• correct inaccurate personal information;
• request deletion;
• restrict processing;
• object to processing;
• receive certain information in a portable form; and
• withdraw consent where processing is based on consent.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise a right, contact: support@manufactiq.co.uk

We may need to verify your identity before responding.

12. Complaints

If you have concerns about how we use personal information, please contact us first at: support@manufactiq.co.uk

You also have the right to complain to the UK Information Commissioner's Office.

ManufactIQ Ltd's current ICO registration reference is ZC229188.

13. Changes to this notice

We may update this Privacy Notice from time to time.

The latest version will be published on our website with the date of the most recent update.