- 1. BACKGROUND AND CONTACT
- 2. THE PRODUCTS AND SERVICES WE PROVIDE
- 3. THE TYPES OF PERSONAL DATA WE COLLECT
- 4. HOW WE USE YOUR INFORMATION
- 5. DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES
- 6. INTERNATIONAL TRANSFERS OF PERSONAL DATA
- 7. HOW WE SAFEGUARD YOUR INFORMATION
- 8. HOW LONG WE KEEP YOUR PERSONAL DATA
- 9. YOUR RIGHTS
- 10. DESIGNATED REPRESENTATIVE
- 11. QUESTIONS AND CONCERNS
1. BACKGROUND AND CONTACT
1.1.BX OP Services Ltd with its registered office at Unit LF1.5, Lafone House, The Leather Lane Market, London SE1 3HN, United Kingdom +44 (0) 203 637 5764 and other companies in the group collect and use certain Personal Data. We are responsible for ensuring that we use that Personal Data in compliance with data protection laws.
1.3. The company, any designated company representative in the EU, and the company’s Data Protection Officer may be contacted as the registered office address above, or via email at email@example.com.
“Our Company”, “BX OP Services Ltd”, “we or “us” means BX OP Services Ltd and other companies and brands in the BX OP Services Ltd, including but not limited to https://www.primeholders.com/.
“Group Companies”, means any company within the group of companies that comprise the BX OP Services Ltd.
“Our Products” means products, services and/or platforms offered by us.
“Our Websites” includes those websites operated by us, including but not limited to: https://www.primeholders.com/, and can include internet forums and channels operated by us.
“Personal Data” means any data which relates to a living individual who can be identified from that data or from that data and other information which is in the possession of, or is likely to come into the possession of our company (or its representatives or service providers). In addition to factual information, it includes any expression of opinion about an individual and any indication of the intentions of our company or any other person in respect of an individual.
2. THE PRODUCTS AND SERVICES WE PROVIDE
(A) Information we receive through our websites; and
(B) Information we receive through our products.
3. THE TYPES OF PERSONAL DATA WE COLLECT
3.1. Many of the services offered by us require us to obtain Personal Data about you in order to perform the services we have been engaged to provide. In relation to each of the services described at paragraph 2.1 above, we will collect and process the following Personal Data about you:
• Information that you provide to us. This includes information about you that you provide to us. The nature of the services you are requesting will determine the kind of Personal Data we might ask for, though such information may include (by way of a non-exhaustive list):
– Personal Data (such as first name; family name; address, phone number; city; postcode; country, identity documents, selfie photos, proof of address documents, position in the company; company name; company email address; business phone number; business address);
– any information that you choose to share on internet forums operated by us which may be considered Personal Data. (Please note that we do not collate information included on internet forums we operate together with Personal Data from your user account or profile on our platform);
• Information that we collect or generate about you. This includes (by way of non-exhaustive list):
– information that you provide by filling in forms on any of our websites. This includes information provided to us at the time of registering to use any of our websites (where applicable), subscribing to any of our services (where applicable), personalising any of our websites with your preferences or requesting further services;
– a file with your contact history to be used for enquiry purposes so that we may ensure that you are satisfied with the services which we have provided to you;
– technical information relating to your visits including, but not limited to, traffic data, location data, weblogs, other communication data and the resources that you access;
– information when you respond to a survey and/or when you report a problem with one any of our websites.
• Information we obtain from other sources.
– We work closely with other third parties including other group companies, our clients, data providers as required by applicable law & regulations for the purposes of Know-Your-Customer and anti-money laundering, this could include reviewing credit histories and accessing the electoral roll.
– When you visit our websites, cookies are used to collect technical information about the services that you use, and how you use them.
– For more information on the cookies used by us please see our Cookie Notice.
• Anonymised data
-In addition to the categories of Personal Data described above, we will also process further anonymised information and data that is not processed by reference to a specific individual.
4. HOW WE USE YOUR INFORMATION
4.1. Your Personal Data may be stored and processed by us in the following ways and for the following purposes:
• for ongoing review and improvement of the information provided on our websites to ensure they are user friendly and to prevent any potential disruptions or cyber-attacks;
• to allow you to use and access the functionality provided by Our Products;
• to assess your application for Our Products, where applicable;
• to set up customers and users of Our Products;
• to conduct analysis required to detect malicious data and understand how this may affect IT systems;
• for statistical monitoring and analysis of current attacks on devices and systems and for the on-going adaptation of the solutions provided to secure devices and systems against current attacks;
• to understand feedback on Our Products and to help provide more information on the use of those products and services quickly and easily;
• to communicate with you in order to provide you with services or information about our company and our products;
• for in-depth threat analysis;
• to understand your needs and interests;
• for the management and administration of our business;
• in order to comply with and in order to assess compliance with applicable laws, rules and regulations, and internal policies and procedures; or
• for the administration and maintenance of databases storing Personal Data;
• to market Our Products to you, which will be done with your consent.
4.2. However we use Personal Data we make sure that the usage complies with law and the law allows us and requires us to use Personal Data for a variety of reasons. These include:
• we need to do so in order to perform its contractual obligations with its customers;
• we have obtained your consent;
• we have legal and regulatory obligations that we have to discharge;
• we may need to do so in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings;
• the use of your Personal Data as described is necessary for our legitimate business interests, such as:
– allowing us to effectively and efficiently manage and administer the operation of our business;
– maintaining compliance with internal policies and procedures;
– monitoring the use of our copyrighted materials;
– enabling quick and easy access to information on Our Products;
– offering optimal, up-to-date security solutions for mobile devices and IT systems; and
– obtaining further knowledge of current threats to network security in order to update our security solutions and provide these to the market.
5. DISCLOSURE OF YOUR INFORMATION TO THIRD PARTIES
5.1. We may share your Personal Data within group companies for the purposes described above:
5.2. We may also share your Personal Data outside of our group companies for the following purposes:
• with our business partners. For example, this could include our partners from whom you or your company or your organisation purchased/have used Our Product(s). Personal Data will only be transferred to a business partner who is contractually obliged to comply with appropriate data protection obligations and the relevant privacy and confidentiality legislation;
• to the extent required by law, for example if we are under a duty to disclose your Personal Data in order to comply with any legal obligation (including, without limitation, in order to comply with tax reporting requirements and disclosures to regulators), or to establish, exercise or defend its legal rights;
• if we sell our business or assets, in which case we may need to disclose your Personal Data to the prospective buyer for due diligence purposes; and
• if we are acquired by a third party, in which case the Personal Data held by us about you will be disclosed to the third party buyer.
6. INTERNATIONAL TRANSFERS OF PERSONAL DATA
6.1. We are a global business. Our customers and our operations are spread around the world. As a result we collect and transfer Personal Data on a global basis. That means that we may transfer your Personal Data to locations outside of your country.
6.2. Where we transfer your Personal Data to another country outside the EEA, we will ensure that it is protected and transferred in a manner consistent with legal requirements. In relation to data being transferred outside of Europe, for example, this may be done in one of the following ways:
• the country that we send the data to might be approved by the European Commission as offering an adequate level of protection for Personal Data (Israel is an approved country);
• the recipient might have signed up to a contract based on “model contractual clauses” approved by the European Commission, obliging them to protect your Personal Data;
• where the recipient is located in the US, it might be a certified member of the EU-US Privacy Shield scheme; or
• in other circumstances the law may permit us to otherwise transfer your Personal Data outside Europe.
6.3. You can obtain more details of the protection given to your Personal Data when it is transferred outside Europe (including a copy of the standard data protection clauses which we have entered into with recipients of your Personal Data) by contacting us as described in paragraph 11 below.
7. HOW WE SAFEGUARD YOUR INFORMATION
7.1. We have extensive controls in place to maintain the security of our information and information systems. Client files are protected with safeguards according to the sensitivity of the relevant information. Appropriate controls (such as restricted access) are placed on our computer systems. Physical access to areas where Personal Data is gathered, processed or stored is limited to authorised employees.
7.2. As a condition of employment, our employees are required to follow all applicable laws and regulations, including in relation to data protection law. Access to sensitive Personal Data is limited to those employees who need to it to perform their roles. Unauthorised use or disclosure of confidential client information by a company employee is prohibited and may result in disciplinary measures.
7.3. When you contact one of our employees about your file, you may be asked for some Personal Data. This type of safeguard is designed to ensure that only you, or someone authorised by you, has access to your file.
8. HOW LONG WE KEEP YOUR PERSONAL DATA
8.1 How long we will hold your Personal Data for will vary and will be determined by the following criteria:
• the purpose for which we are using it – we will need to keep the data for as long as is necessary for that purpose; and
• legal obligations – laws or regulation may set a minimum period for which we have to keep your Personal Data.
9. YOUR RIGHTS
9.1 In all the above cases in which we collect, use or store your Personal Data, you may have the following rights and, in most cases, you can exercise them free of charge. These rights include:
• the right to obtain information regarding the processing of your Personal Data and access to the Personal Data which we hold about you;
• the right to withdraw your consent to the processing of your Personal Data at any time. Please note, however, that we may still be entitled to process your Personal Data if we have another legitimate reason for doing so. For example, we may need to retain Personal Data to comply with a legal obligation;
• in some circumstances, the right to receive some Personal Data in a structured, commonly used and machine-readable format and/or request that we transmit those data to a third party where this is technically feasible. Please note that this right only applies to Personal Data which you have provided directly to us;
• the right to request that we rectify your Personal Data if it is inaccurate or incomplete;
• the right to request that we erase your Personal Data in certain circumstances. Please note that there may be circumstances where you ask us to erase your Personal Data but we are legally entitled to retain it;
• the right to object to, or request that we restrict, our processing of your Personal Data in certain circumstances. Again, there may be circumstances where you object to, or ask us to restrict, our processing of your Personal Data but we are legally entitled to refuse that request; and
• the right to lodge a complaint with the relevant data protection regulator if you think that any of your rights have been infringed by us.
9.2. You can exercise your rights by contacting us using the details listed in paragraph 11 below.
10. DESIGNATED REPRESENTATIVE
10.1. The company’s registered office may be contacted using the contact information at the top of this document.
10.2. The company’s designated representative in the EU may be contacted using the contact information at the top of this document.
11. QUESTIONS AND CONCERNS
11.1. If you have any questions or concerns about the company’s handling of your Personal Data, or about this Policy, please contact our Data Protection Officer using the contact information at the top of this document.
- We are usually able to resolve privacy questions or concerns promptly and effectively. If you are not satisfied with the response you receive from our Privacy Officer, you may escalate concerns to the applicable privacy regulator in your jurisdiction. Upon request, our company’s Data Protection Officer will provide you with the contact information for that regulator.